Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Tbp78wIpUjJD8kflpRzCnMRBz9U.roa
File: Tbp78wIpUjJD8kflpRzCnMRBz9U.roa (raw, json)
Hash identifier: ISdAX7nV4ZbjUoqQnKqqEjJDi+FUGuSjfWEqA6jAc0E=
Subject key identifier: 4D:BA:7B:F3:02:29:52:32:43:F2:47:E5:A5:1C:C2:9C:C4:41:CF:D5
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 17DC
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Tbp78wIpUjJD8kflpRzCnMRBz9U.roa
Signing time: Mon 10 Feb 2025 14:07:20 +0000
ROA not before: Mon 10 Feb 2025 14:07:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 61.66.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6108 (0x17dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:20 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4DBA7BF30229523243F247E5A51CC29CC441CFD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:95:a0:cd:c2:53:19:ae:5e:4b:8d:bd:d2:
1a:8e:c1:e4:72:ff:da:f2:86:61:58:e1:e5:f1:00:
a7:71:fe:89:d6:ed:bd:95:22:bf:d3:c3:9d:f5:7f:
21:a1:72:12:9e:d8:f6:0f:e9:8b:17:32:0d:cc:22:
b9:43:d5:73:93:3d:01:01:7d:41:99:45:ab:e0:f5:
a0:e6:6b:f5:e3:96:49:b8:c8:71:0a:64:32:58:f9:
4b:0a:e5:89:ad:f3:ca:ac:52:68:77:a6:ee:37:65:
c4:81:37:19:a1:4c:5a:c5:68:49:d1:ca:7a:c9:00:
67:0f:5a:82:e2:4a:40:b8:1b:a8:f6:ae:67:63:37:
d9:08:b5:8d:c4:6c:fa:29:2a:39:af:7b:de:f8:1f:
ff:a1:12:08:42:61:73:65:14:6f:96:16:7a:e9:aa:
7c:ee:ca:05:90:e5:32:cf:88:e8:3a:7f:8f:5d:4c:
ca:6d:73:2e:85:0c:44:78:6e:1b:eb:a6:0f:80:d3:
3a:14:2d:98:f3:80:53:87:5c:16:2e:6f:96:77:cb:
96:e1:48:77:41:74:f3:cc:f8:86:91:93:94:95:28:
18:23:2e:e4:c2:6e:b3:1c:f7:2a:35:ab:1f:a7:c7:
f9:98:4e:87:1a:a4:23:52:2e:e7:39:91:33:5e:f3:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BA:7B:F3:02:29:52:32:43:F2:47:E5:A5:1C:C2:9C:C4:41:CF:D5
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Tbp78wIpUjJD8kflpRzCnMRBz9U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.66.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:d9:54:59:37:cb:23:db:3a:84:c2:a1:ce:a6:8c:e5:da:04:
d1:e7:2f:4a:e4:69:8e:8a:e0:e5:16:c0:9f:6c:06:ed:be:77:
92:f2:86:c1:36:8f:d9:68:96:90:1d:6b:66:a3:95:48:ce:6b:
85:99:c0:a2:40:00:f3:8d:10:a8:fb:5a:29:19:21:aa:2e:19:
0d:b1:5f:ad:c3:ed:be:25:9e:64:1a:29:37:04:58:67:8f:fa:
a7:16:5e:4d:84:a5:8f:08:11:73:1b:86:93:4c:e2:70:e2:33:
0b:c6:69:88:0b:d2:c5:e3:ba:3d:11:81:85:bf:3d:98:e7:83:
c3:f0:f6:f6:d8:8a:01:d1:3c:72:3c:3d:0c:af:db:01:98:fb:
ee:76:e2:27:dc:d2:b2:3b:b2:3a:d8:10:05:03:a8:25:48:f6:
2e:27:d5:d7:c6:60:41:ee:eb:74:45:dc:22:90:16:4b:46:cf:
55:dc:b2:cf:23:f0:d8:90:dd:cf:ce:9e:68:21:f9:8f:da:8f:
61:c7:5c:5c:b8:39:c8:95:97:41:94:13:d8:6a:d0:26:84:85:
19:95:f9:53:d1:15:44:03:ab:7f:f6:58:34:4d:b9:99:2a:4d:
b2:43:dc:2f:a4:b7:f4:a4:b5:18:bf:62:62:82:39:6c:a7:ee:
2d:97:c8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:16:31 2025 by rpki-client