Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/bB_dm8kXfQG-Y2bWCGIQJJjvCLk.roa
File: bB_dm8kXfQG-Y2bWCGIQJJjvCLk.roa (raw, json)
Hash identifier: 3c9x8eFcB19xijwqExFtoGGKNGGdrK8iLmvXIdyORGg=
Subject key identifier: 6C:1F:DD:9B:C9:17:7D:01:BE:63:66:D6:08:62:10:24:98:EF:08:B9
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1850
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bB_dm8kXfQG-Y2bWCGIQJJjvCLk.roa
Signing time: Mon 10 Feb 2025 14:07:48 +0000
ROA not before: Mon 10 Feb 2025 14:07:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 175.183.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6224 (0x1850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6C1FDD9BC9177D01BE6366D60862102498EF08B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f3:1f:fe:5c:72:2b:ef:78:f8:48:49:9a:ce:
49:d5:d1:c1:3f:6c:d4:0e:13:db:86:b5:9c:26:f0:
f4:48:f0:79:14:ea:60:83:97:6c:0f:22:d4:d9:2b:
62:33:bb:cc:6d:7d:e2:97:2f:6e:b0:fd:57:19:7a:
60:49:7e:b1:7c:0c:0e:61:2b:98:51:26:4e:2c:de:
91:98:44:6d:8d:c3:65:20:86:bf:82:49:20:3d:42:
f0:2d:39:09:4c:95:b1:48:61:9c:b1:81:6e:50:52:
35:4c:3f:49:49:ff:8c:87:ea:db:83:83:b3:0f:34:
5d:19:34:19:b7:5b:50:0e:0e:15:21:f8:cc:1e:14:
30:12:65:63:40:5c:8f:db:49:5d:84:f0:09:a8:2e:
79:2e:3f:6a:bf:0b:6b:fa:0d:20:dd:b0:8f:64:c8:
91:76:df:53:12:9a:b8:31:9c:8e:9b:f6:65:c4:d3:
14:73:c1:94:11:07:e7:cd:81:8a:bb:3f:d9:ae:31:
9f:20:0d:9c:d9:6a:b4:9b:b1:cb:e3:8b:64:e4:ae:
16:24:88:13:71:55:41:b3:b7:bc:10:d4:28:bf:4e:
e1:27:1e:ad:ec:ac:98:fd:c4:51:93:77:4b:51:f6:
71:87:b2:b1:55:3e:55:06:66:67:02:0d:d4:d8:0c:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1F:DD:9B:C9:17:7D:01:BE:63:66:D6:08:62:10:24:98:EF:08:B9
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bB_dm8kXfQG-Y2bWCGIQJJjvCLk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.136.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:41:63:fa:e2:7c:21:cb:40:0c:d8:a0:f7:5b:e4:c7:5b:38:
da:af:3a:ae:2e:85:1d:25:28:e8:46:20:27:55:37:bb:83:13:
47:b7:cc:7e:f5:98:93:bc:9d:e7:03:ad:4e:92:37:e9:95:83:
77:36:66:a1:ce:78:a5:cd:5a:23:c9:28:4a:04:b7:73:1e:aa:
e6:d5:97:e0:29:ff:2d:2b:51:0e:b8:30:76:83:05:da:79:4f:
1a:b8:bb:67:b3:0d:8b:9c:f2:fa:e0:71:90:4c:3a:be:b7:e0:
37:6d:92:be:9b:e9:b2:2f:cb:04:11:a2:83:a8:a2:1d:20:04:
05:86:d7:a3:f5:50:f5:dc:e2:b0:55:38:e4:47:95:1a:1a:5b:
f5:19:f1:ad:5d:18:5b:71:9e:a6:5f:91:a9:ac:2e:ba:2e:68:
27:d0:ef:21:61:29:b2:22:c1:7c:ea:ce:b8:00:90:61:0d:65:
cf:78:9f:4c:76:7a:9a:82:0c:8a:d1:3b:cb:5c:88:59:f0:c6:
c0:d8:73:be:99:80:44:24:d3:24:69:38:c5:df:77:57:d1:7b:
6f:f4:e0:f9:69:8e:90:c5:6a:d0:4f:48:5a:c5:7a:97:e6:a0:
19:dd:a9:f4:8a:d6:f1:33:f4:2a:27:33:d9:2e:45:cb:92:05:
18:84:8e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:39:05 2025 by rpki-client