Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/SZhTF09juGSE5ZjZuNbmR9VpiF4.roa
File: SZhTF09juGSE5ZjZuNbmR9VpiF4.roa (raw, json)
Hash identifier: w94ziwyZL5hoEvgCar0OWw/c1s0Wp0alZbxpeELQf6w=
Subject key identifier: 49:98:53:17:4F:63:B8:64:84:E5:98:D9:B8:D6:E6:47:D5:69:88:5E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1805
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SZhTF09juGSE5ZjZuNbmR9VpiF4.roa
Signing time: Mon 10 Feb 2025 14:07:30 +0000
ROA not before: Mon 10 Feb 2025 14:07:30 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 112.104.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6149 (0x1805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:30 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=499853174F63B86484E598D9B8D6E647D569885E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:e5:a3:65:73:7e:b1:42:71:54:4a:cd:4c:
d0:87:cb:8e:fd:eb:2f:25:8a:69:34:ad:89:8a:11:
09:d6:06:74:9d:a2:14:8e:bb:35:50:29:15:e0:a3:
cf:63:2a:94:1a:55:4c:e6:f9:81:e6:44:69:b5:14:
ad:a6:b3:0d:b7:bb:4d:97:52:85:7b:6b:39:a1:86:
10:b2:88:95:fb:ec:22:ec:7a:89:6b:35:7b:a6:5b:
72:67:45:c3:be:8b:51:63:72:4d:e9:f7:e8:20:5f:
11:10:da:0f:63:87:c3:5d:b0:be:e3:08:57:0c:c1:
bd:61:48:32:b9:b4:63:88:da:50:e2:3b:9d:de:9d:
bb:ec:29:a6:2e:f2:9d:db:00:91:c4:6c:d5:cd:52:
b3:b5:c5:f7:65:35:05:b8:25:a3:20:cc:61:83:79:
b4:55:34:f2:f7:a7:02:92:0d:b3:0b:b7:84:21:ed:
8d:d8:dd:6e:32:cd:3a:4d:bb:0d:c1:e2:65:81:6b:
58:77:d0:c4:82:c0:33:4a:0f:9c:5e:9e:cb:15:48:
5d:95:81:b8:9f:7f:27:de:9d:f0:25:0c:c7:e7:8f:
30:ce:fe:01:68:84:2e:3a:9a:00:b3:e3:d6:78:8e:
37:70:ba:80:6e:dc:6d:69:0d:71:7d:f2:75:7b:e3:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:98:53:17:4F:63:B8:64:84:E5:98:D9:B8:D6:E6:47:D5:69:88:5E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SZhTF09juGSE5ZjZuNbmR9VpiF4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.104.0.0/15
Signature Algorithm: sha256WithRSAEncryption
29:14:d3:b8:ce:e8:b4:20:ca:66:d5:19:6d:88:d4:bb:02:73:
40:9f:be:43:bc:0b:8d:22:da:4d:93:fd:b3:61:1f:c5:1e:d9:
a6:73:d9:66:5c:f4:fa:ec:99:46:bd:c1:a9:bd:01:bd:a6:8e:
02:61:64:33:8c:83:1c:89:70:f2:2a:49:04:4b:38:a7:4f:e0:
16:24:4c:c4:34:2e:2a:1b:10:90:aa:8f:df:d6:a3:55:2a:de:
06:3a:ff:63:d9:04:89:7e:62:94:73:e2:0a:9b:9e:6f:bc:ff:
48:ae:ca:81:13:1b:f2:5c:7d:e8:f2:86:79:a8:23:c4:f9:d6:
61:d0:c3:d0:ac:e7:58:1a:2b:78:1c:d1:91:aa:c2:fb:60:af:
66:68:13:e2:b9:af:15:86:18:de:b5:ca:1f:bd:c5:42:b9:c5:
f2:f9:25:4c:73:d0:a4:9d:32:3f:17:70:ba:a2:e5:22:0b:c1:
73:20:c8:bd:a5:f3:23:fb:57:2d:7d:46:03:a8:dd:ab:35:03:
45:96:3e:0a:f4:f9:79:0e:da:51:8d:43:49:53:db:ca:92:d0:
e4:81:19:04:1c:ce:f8:10:5c:22:d4:8c:f1:7a:f0:a0:4d:32:
f9:da:cb:e8:01:a9:89:b2:8d:25:ae:b9:1f:db:08:1d:7a:77:
28:84:21:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:18:53 2025 by rpki-client