Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/zEatsFqL0KvwSZOM4qd-nD-N4wI.roa
File: zEatsFqL0KvwSZOM4qd-nD-N4wI.roa (raw, json)
Hash identifier: 1KcwP/mfX3BFY/rcni3AlmCvcz/riZ5ZphoQPWjnbXw=
Subject key identifier: CC:46:AD:B0:5A:8B:D0:AB:F0:49:93:8C:E2:A7:7E:9C:3F:8D:E3:02
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1828
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zEatsFqL0KvwSZOM4qd-nD-N4wI.roa
Signing time: Mon 10 Feb 2025 14:07:38 +0000
ROA not before: Mon 10 Feb 2025 14:07:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 122.147.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6184 (0x1828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:38 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CC46ADB05A8BD0ABF049938CE2A77E9C3F8DE302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:11:a6:82:d9:95:89:1b:6b:14:d7:4b:a2:c4:
94:a2:66:98:0c:01:af:34:57:2c:57:3c:63:c4:42:
10:f6:79:c7:be:eb:a1:e8:01:d8:a7:2c:fe:3c:f1:
9d:7e:2f:cf:8b:a3:6a:d4:95:cc:5b:88:9e:06:a9:
e3:49:03:37:c7:13:9b:21:9b:c1:45:36:b8:2e:10:
8b:72:0f:24:1b:21:2a:b7:93:ec:2b:12:74:0c:b4:
36:a6:2b:64:14:9d:ae:94:9e:ac:b5:90:c4:e4:11:
29:03:20:e4:1a:bc:a1:29:ab:30:e7:6b:82:3f:32:
63:2d:67:c2:37:85:4b:c7:48:ed:d3:50:76:b9:93:
1c:28:da:46:d3:8b:90:9b:16:40:c8:d6:31:ba:ac:
6c:fc:59:c3:86:3e:bd:f1:be:09:bb:df:4e:1b:af:
d2:ea:57:3b:5a:eb:69:39:3e:3d:48:48:b5:93:2e:
e6:2c:04:7d:d8:be:43:0a:58:ab:93:ae:ad:2d:ab:
69:c2:e4:a6:c5:a4:04:06:8b:5b:86:55:0b:bc:2f:
ab:52:88:95:9f:96:ca:b4:34:5d:13:19:e1:de:7a:
73:9f:67:41:44:f4:e1:eb:25:ce:1c:01:ad:ee:fc:
58:a6:a3:80:cb:fb:40:0b:34:b4:46:2b:d9:b3:0e:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:46:AD:B0:5A:8B:D0:AB:F0:49:93:8C:E2:A7:7E:9C:3F:8D:E3:02
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zEatsFqL0KvwSZOM4qd-nD-N4wI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.128.0/17
Signature Algorithm: sha256WithRSAEncryption
2b:e6:79:78:77:a3:72:60:a7:5a:a8:66:24:55:b6:28:32:9a:
63:e3:9a:87:23:7e:1b:2d:04:8c:2a:5c:54:70:e6:d1:2d:21:
ec:d1:83:dc:4c:e5:da:9b:92:0e:e7:6a:ae:57:f0:3d:90:ed:
e0:8a:9e:6c:ca:9b:d3:a4:e5:40:9c:8d:02:30:d5:88:35:71:
c6:ed:14:b2:b9:e5:96:ac:3b:17:1f:7a:51:08:01:48:a8:4c:
78:39:82:72:08:ae:b4:e7:c1:5e:c6:87:6d:2a:3f:a2:b4:f5:
72:d5:17:e1:ef:0d:5f:ad:c0:7c:27:2d:e6:11:6d:38:c0:f2:
97:19:0f:60:9e:93:ba:83:81:17:7d:04:1e:2d:bc:22:64:ae:
a2:cf:56:43:38:63:ce:28:fa:e2:0e:7d:aa:ad:3c:e8:10:bb:
c0:fa:80:18:27:6a:cd:11:45:4a:5e:1c:b4:2f:30:74:1a:3d:
ee:6a:aa:5f:c2:31:8f:3d:e1:0f:fc:7e:26:23:0f:49:d8:c0:
d1:14:18:9c:66:b9:b1:dd:97:ce:c3:0f:77:2b:a1:e0:35:f0:
89:cd:68:2a:ab:cc:3e:cf:21:bf:a3:05:f6:eb:1e:d4:45:82:
c8:d3:7d:85:4e:17:55:03:94:ea:4d:a1:42:13:5a:fc:0c:d6:
b3:10:56:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:18:52 2025 by rpki-client