Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/iNPdFd3aRS85k-BWe-y6Ka4ZMo0.roa
File: iNPdFd3aRS85k-BWe-y6Ka4ZMo0.roa (raw, json)
Hash identifier: Y4WYwJx+48Ai39s+ifso63EOBRpwWrl4Rx8AxMTGeLQ=
Subject key identifier: 88:D3:DD:15:DD:DA:45:2F:39:93:E0:56:7B:EC:BA:29:AE:19:32:8D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 17ED
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iNPdFd3aRS85k-BWe-y6Ka4ZMo0.roa
Signing time: Mon 10 Feb 2025 14:07:25 +0000
ROA not before: Mon 10 Feb 2025 14:07:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 175.182.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6125 (0x17ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:25 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=88D3DD15DDDA452F3993E0567BECBA29AE19328D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:0d:42:6e:25:57:74:24:ae:dc:97:57:9b:
78:27:b4:5d:95:4b:a5:08:c6:94:56:f1:c7:3b:1b:
76:03:14:4d:d1:0e:ae:83:73:19:03:77:66:0e:46:
15:e8:a5:95:11:8e:1f:cd:13:83:69:68:8f:d0:60:
bb:6f:8e:f6:d6:b5:2b:1f:a5:89:92:82:7c:4d:f9:
7e:9e:ad:d7:d7:a5:b5:a5:d4:50:d8:f4:2d:7b:5f:
17:7e:70:55:7e:e7:66:f1:65:0c:07:b3:91:e1:e4:
db:57:7e:f5:39:6a:58:6d:45:3d:20:26:55:91:8f:
50:d5:05:10:e3:a0:3f:15:32:b4:e5:02:ce:dd:99:
dc:a5:6e:09:50:dd:c7:8b:a4:4f:65:38:9d:a4:68:
e7:08:6d:0c:3f:14:d3:38:07:2c:c3:3c:f1:ba:d0:
2a:2c:57:97:89:76:25:b8:9b:6c:10:e5:82:20:e2:
11:29:b7:a9:60:59:98:33:21:24:e1:89:71:85:02:
85:ba:ca:cf:48:77:6e:9d:c3:24:27:f4:62:6a:7a:
ab:33:f5:21:3a:9e:20:31:68:c6:95:e1:fc:2b:43:
da:9f:25:ec:f5:3f:79:50:a5:87:70:b3:92:bd:9e:
be:81:e1:ec:4a:70:59:6a:f7:d3:65:e1:2a:7c:ae:
bd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D3:DD:15:DD:DA:45:2F:39:93:E0:56:7B:EC:BA:29:AE:19:32:8D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iNPdFd3aRS85k-BWe-y6Ka4ZMo0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.182.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:60:b8:c2:a3:68:6b:b1:01:d9:f6:af:2d:f6:46:be:a8:9c:
a7:21:c2:b0:35:2c:8d:96:18:21:32:7a:c9:c9:9a:93:b4:13:
04:30:bc:36:30:68:91:ab:63:83:6e:f8:5e:ff:15:7c:00:38:
ba:37:eb:6d:6e:11:17:8b:0f:85:c5:bb:83:60:14:c2:e7:ed:
8f:74:c3:9b:6d:5a:c4:93:a6:51:04:10:5b:87:af:b7:be:5e:
43:6f:1c:00:01:cc:7f:65:5f:27:71:9a:48:39:ae:d4:41:2b:
c5:7b:e2:b3:3f:31:31:38:e9:46:74:9d:b1:b8:6e:96:94:84:
46:57:43:25:67:98:0c:d0:2d:fe:b8:8f:27:05:ee:51:10:f6:
de:49:9d:c7:02:25:e6:13:c0:ed:e0:97:22:5d:67:04:58:29:
86:6f:75:ed:73:ad:67:0e:ca:d5:2b:c7:ea:b5:8a:a0:08:a6:
37:65:57:ae:8d:5e:01:ac:ea:b7:96:da:55:8b:1e:bb:89:b4:
4b:9d:21:bb:f2:a1:73:14:31:01:6c:19:08:a4:f5:5c:f6:25:
ce:64:e2:7b:f3:07:ac:ee:26:1f:1c:83:9e:ef:e7:84:bf:69:
42:55:0e:66:49:93:9e:6e:d2:70:7e:81:3d:75:f6:71:be:e3:
b1:8c:fa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 18:32:21 2025 by rpki-client