Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/d6WH3lJgbz_GQMiDIvUxYIsLFIc.roa
File: d6WH3lJgbz_GQMiDIvUxYIsLFIc.roa (raw, json)
Hash identifier: KGJJoHaCo1X2PXOITjYMZKoviWkYHFUfa7zdyU7FbYw=
Subject key identifier: 77:A5:87:DE:52:60:6F:3F:C6:40:C8:83:22:F5:31:60:8B:0B:14:87
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 17FB
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/d6WH3lJgbz_GQMiDIvUxYIsLFIc.roa
Signing time: Mon 10 Feb 2025 14:07:28 +0000
ROA not before: Mon 10 Feb 2025 14:07:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18419
IP address blocks: 210.244.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6139 (0x17fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:28 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=77A587DE52606F3FC640C88322F531608B0B1487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:5f:91:ca:14:9e:39:50:70:95:bf:58:7b:
dd:cf:52:a3:0c:24:96:8b:80:c9:a2:22:b7:49:3e:
c2:2a:93:7c:d5:90:e6:f2:6c:24:3d:9a:90:5f:ca:
c4:6e:39:3c:05:1b:da:99:0c:b7:bc:5c:88:04:f4:
65:e0:dc:e8:3e:2b:61:a3:ed:90:42:d9:8a:3e:ed:
0d:4c:54:00:3d:8e:f9:98:b8:00:06:41:83:1b:be:
47:ba:f2:e3:c4:d8:60:fb:ea:ff:9f:05:11:5a:30:
ee:34:86:f6:5b:2b:28:3d:d5:36:37:cb:9c:eb:7a:
d7:53:58:96:56:43:e8:86:c2:6b:ca:c6:dc:21:e0:
b2:d6:12:a3:28:c3:df:a0:94:99:29:b6:aa:1e:8f:
e6:5b:54:17:56:4f:29:68:3e:85:c9:f7:7e:00:75:
1d:7f:56:2f:6b:8a:cc:5b:2a:12:81:44:02:19:75:
31:9c:61:c5:9d:13:b2:59:ce:9a:6e:47:6d:9d:a1:
39:75:54:0e:2f:c4:cd:b6:6a:46:79:66:f1:37:79:
85:16:ef:99:c4:81:c6:e8:f4:74:5d:78:10:52:75:
48:fe:f6:f1:33:3f:50:cf:3e:4f:87:96:4d:a4:cd:
34:b8:60:d8:c3:ea:98:0b:da:3d:1f:ae:0d:01:20:
cd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A5:87:DE:52:60:6F:3F:C6:40:C8:83:22:F5:31:60:8B:0B:14:87
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/d6WH3lJgbz_GQMiDIvUxYIsLFIc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.244.84.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:cf:54:4e:59:99:89:ec:78:53:2e:9c:4a:b7:63:64:6e:6d:
e5:29:af:5f:30:70:e5:5c:89:73:a7:e0:04:21:0d:d4:d9:f8:
2b:ae:72:c3:7a:bb:f6:86:87:2d:49:8b:ee:aa:0f:d8:f4:fd:
2f:f3:d9:c4:ad:22:39:7a:62:38:fa:b3:66:63:d6:df:61:fb:
8f:09:a2:30:a8:76:41:e5:0f:01:5d:05:62:63:c2:9f:e2:45:
b6:30:b6:6f:5b:97:98:08:7f:14:d6:1f:5f:81:3b:a5:66:ff:
a7:e0:b2:72:9c:fb:23:49:64:95:e1:a7:2c:30:ae:35:97:35:
e3:a6:8f:c6:be:91:20:73:c1:70:c0:90:ab:4a:4e:25:bf:42:
62:d3:bb:45:62:a0:f4:36:de:80:7a:57:7e:2a:2b:4f:c1:ea:
d0:d0:15:d6:d8:50:ad:02:5f:6c:80:5d:43:fc:02:8d:48:0e:
ea:77:12:f9:4a:cf:e2:3e:d1:3c:f9:74:ed:7f:eb:7e:bf:19:
70:6e:c2:05:47:f3:35:14:d6:57:6e:97:cc:8c:a2:c6:a2:b4:
16:0a:bd:93:85:f0:32:49:57:2a:23:f3:67:c2:a7:78:e8:d4:
bb:70:0e:67:65:e7:12:11:a5:20:c0:78:9a:ba:5b:6a:9f:6d:
eb:36:78:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:02:24 2025 by rpki-client