Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-vMD8SwTuP2fVCqHv_mFJLoJfy8.roa
File: -vMD8SwTuP2fVCqHv_mFJLoJfy8.roa (raw, json)
Hash identifier: H3lvKsJ50E8/BtRhlT1BqJc1ys5VSXNC6T5dx2jtmH4=
Subject key identifier: FA:F3:03:F1:2C:13:B8:FD:9F:54:2A:87:BF:F9:85:24:BA:09:7F:2F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 137D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-vMD8SwTuP2fVCqHv_mFJLoJfy8.roa
Signing time: Fri 01 Sep 2023 09:25:01 +0000
ROA not before: Fri 01 Sep 2023 09:25:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 106.105.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4989 (0x137d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FAF303F12C13B8FD9F542A87BFF98524BA097F2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:fd:80:a0:ae:44:4b:0a:c8:a2:86:49:9e:
0e:0a:c7:0b:9c:87:d2:da:ad:0c:f7:35:0b:c8:8e:
91:75:05:8c:d7:e9:87:e6:ed:20:15:69:24:c0:fc:
26:5b:2e:38:e7:a4:33:f1:28:a5:dd:6c:c9:e1:f7:
cb:a5:e5:fd:d9:74:e2:94:40:71:f6:44:4b:7d:af:
f9:5d:c8:44:29:48:0a:26:30:52:9e:3e:ec:6d:ab:
68:71:f5:bc:eb:53:ff:7f:cd:1b:30:79:83:8f:25:
97:3d:ab:d2:ff:f1:11:d9:7e:ed:93:7d:00:8f:6f:
e9:40:83:eb:c4:16:40:e6:93:66:4e:c1:4d:3a:23:
e2:b8:a3:8e:31:b0:04:c3:3e:fd:fc:11:fd:f3:1e:
5d:c0:35:9a:ce:94:52:0d:c0:b8:09:95:d5:2f:c2:
95:5f:8f:6e:f4:bf:47:1e:9a:5f:4a:7b:95:73:47:
fc:e7:a4:dc:dd:e0:dd:35:92:81:16:87:43:23:3b:
64:e0:48:44:21:69:a2:c2:d3:ff:7a:51:fb:64:15:
a9:90:47:15:3b:7f:15:56:c7:02:62:83:fe:41:b1:
55:09:23:ac:c8:76:b4:ec:eb:0e:8e:da:b7:d0:27:
94:ce:2d:fe:05:86:22:14:57:33:6c:bc:a1:ef:40:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F3:03:F1:2C:13:B8:FD:9F:54:2A:87:BF:F9:85:24:BA:09:7F:2F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-vMD8SwTuP2fVCqHv_mFJLoJfy8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.0.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:8c:12:66:61:9d:a9:b4:83:e3:8e:f6:53:f5:41:1f:3b:66:
8a:66:f7:24:b2:dc:e1:62:ff:3e:d0:75:0c:8d:2d:9f:93:bc:
c1:1b:50:18:0a:c3:fe:4b:82:0f:9c:87:b6:97:42:81:dc:fa:
36:a7:80:fd:c6:87:1a:4f:98:1f:0b:c9:84:f6:00:d6:50:5f:
31:55:0f:81:27:67:d0:79:ac:31:5c:5b:e3:fe:5d:be:8b:d1:
eb:55:6c:28:c3:f8:fd:75:3c:4d:a6:df:04:e5:9c:58:5a:6c:
e1:ad:e6:e9:b9:8a:12:d0:b9:dd:5b:f5:6b:ff:77:ee:7f:6f:
38:e8:d1:b0:31:ac:19:57:a4:8e:d8:48:12:04:f7:41:8c:22:
86:53:1f:4f:ae:25:27:91:fc:08:64:f5:1d:9b:52:c4:d1:64:
53:ba:3f:85:37:a8:0a:fe:26:dc:53:3f:dd:60:7c:19:c7:e0:
0f:4a:ec:d5:d0:55:dc:2b:36:3b:5e:18:90:8c:c0:27:6e:da:
fc:7e:f3:bf:41:67:a3:28:6b:13:51:f8:7d:7d:c0:8e:bb:96:
c7:2d:9a:46:01:a3:5b:57:b5:7a:9f:83:30:e6:85:30:cf:d9:
a9:dd:bd:ca:08:fa:af:8b:73:24:14:ad:3a:94:2c:94:db:f5:
68:99:17:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:25:26 2025 by rpki-client