Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/NjVf5L3x6fMGtaQ1Tfqsm8kGu3s.roa
File: NjVf5L3x6fMGtaQ1Tfqsm8kGu3s.roa (raw, json)
Hash identifier: 5SCitNywz6f7Foipq2XwctBuUHLpT/xLiFmfHfexRT0=
Subject key identifier: 36:35:5F:E4:BD:F1:E9:F3:06:B5:A4:35:4D:FA:AC:9B:C9:06:BB:7B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 183C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NjVf5L3x6fMGtaQ1Tfqsm8kGu3s.roa
Signing time: Mon 10 Feb 2025 14:07:43 +0000
ROA not before: Mon 10 Feb 2025 14:07:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 123.205.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6204 (0x183c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:43 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=36355FE4BDF1E9F306B5A4354DFAAC9BC906BB7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:1e:b9:9a:15:21:10:ae:e7:f9:11:f7:e0:
c7:86:03:71:36:2b:66:5f:e8:46:1c:e4:e4:47:b5:
55:a8:d5:69:50:90:69:fe:b1:37:42:89:f0:e7:5b:
ba:26:40:0e:86:7f:5d:47:f8:d8:80:a9:f6:3d:3e:
11:2f:49:80:b5:84:2b:07:d3:3f:2b:59:ae:e4:cc:
88:61:6c:8e:1a:bb:63:ba:c8:3e:3e:47:67:04:22:
4f:44:1d:7b:0f:bc:71:11:1a:58:3b:20:c3:f5:91:
db:bc:f0:80:60:65:7f:5b:56:8c:45:8c:8d:16:f4:
4f:c2:f1:05:eb:4a:7e:32:30:94:56:f6:63:df:1f:
20:be:56:ec:55:f4:4f:b3:88:88:fb:ab:7e:ef:03:
73:7a:8f:f5:6e:f7:31:73:57:59:e2:5a:21:96:5a:
cf:1f:33:dd:75:9c:c2:11:83:aa:2f:62:a8:bf:47:
c0:2e:1b:11:8c:9d:79:ba:c0:f8:00:3c:dc:5d:91:
c9:48:2e:3f:37:b8:a9:9b:c2:3b:c4:d7:43:09:e9:
1d:9f:7f:af:aa:80:df:5c:bf:3c:a3:15:38:00:8f:
41:6c:dd:dc:c2:01:4f:d9:87:0f:10:64:49:59:e4:
9e:40:e8:a8:1d:b8:b5:ba:2f:f1:a5:ff:fe:16:b2:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:35:5F:E4:BD:F1:E9:F3:06:B5:A4:35:4D:FA:AC:9B:C9:06:BB:7B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NjVf5L3x6fMGtaQ1Tfqsm8kGu3s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.58.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:60:6c:ac:20:99:03:3f:76:de:28:19:00:6f:50:c3:34:52:
e4:25:f6:f5:c2:be:e1:1e:5b:9a:3c:39:59:67:06:a8:3e:67:
21:c0:2c:28:39:d2:9d:d8:03:29:ab:28:cd:5c:88:0c:c3:82:
b7:7a:ab:7f:c3:e7:73:77:ef:2d:48:90:d6:44:8b:49:2f:03:
18:f9:da:60:81:f9:f2:d8:98:79:3f:e4:6a:c4:61:ee:e3:de:
83:bb:19:92:1f:b3:fd:4b:48:d9:36:44:0b:0c:2c:c6:29:38:
ee:97:34:24:c3:0a:58:85:e8:a4:af:53:12:f4:44:40:fe:ed:
92:53:a8:2f:b0:8e:ea:a0:95:7f:35:e5:70:bd:d9:9c:24:47:
90:e6:99:80:d7:72:89:eb:32:d8:95:a8:58:1c:82:1c:1b:16:
74:84:0b:06:3c:87:4e:a7:70:68:2c:49:fa:3d:d1:ef:62:f7:
fe:3b:3f:d2:5a:fa:38:41:fc:d4:75:be:fb:08:e9:29:36:ff:
db:1c:15:73:64:48:70:f1:21:6b:46:fd:8b:a9:ea:df:de:35:
b9:1e:8f:bf:15:36:5e:5e:a9:fd:83:f1:db:3d:40:e6:67:90:
38:e4:0e:5e:f8:69:9e:58:1f:95:b7:30:c8:9f:78:b7:e1:7f:
f9:51:61:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:18:52 2025 by rpki-client