Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/22tGqLukUs75NqqrPvuxM9K1--s.roa
File: 22tGqLukUs75NqqrPvuxM9K1--s.roa (raw, json)
Hash identifier: K2Hm+Q0iqOmjEoyhQ3VsyJ3lkSBv0apenGZXHsxylfo=
Subject key identifier: DB:6B:46:A8:BB:A4:52:CE:F9:36:AA:AB:3E:FB:B1:33:D2:B5:FB:EB
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 13D4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/22tGqLukUs75NqqrPvuxM9K1--s.roa
Signing time: Fri 01 Sep 2023 09:25:30 +0000
ROA not before: Fri 01 Sep 2023 09:25:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 106.105.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5076 (0x13d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DB6B46A8BBA452CEF936AAAB3EFBB133D2B5FBEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:6f:cb:04:6a:4e:42:8d:0c:89:62:9c:f9:
33:5c:35:34:2a:aa:09:ea:c7:0e:14:c5:a4:1b:4b:
48:32:6d:2c:0c:21:1d:b8:36:98:5f:ad:36:46:0b:
87:0a:d5:55:bb:cf:57:c3:14:ac:25:46:6b:dc:90:
94:4b:77:8b:34:9b:93:2a:cf:31:82:6b:7c:2e:33:
d1:42:3d:d6:1e:f0:4b:ef:ce:56:c4:9b:a5:72:99:
60:c7:93:c1:46:a0:91:aa:d9:00:9a:dc:78:75:f1:
45:0a:c8:68:68:51:be:08:48:65:b8:7c:8f:09:2f:
ef:ec:c0:b6:b7:6e:d3:43:20:d8:26:d6:be:0d:56:
f1:9a:c0:95:18:9b:e6:58:c4:cf:e4:b6:63:37:cf:
68:b2:d7:51:91:4c:6d:67:37:2b:91:86:22:ce:f1:
18:03:e0:03:4d:8f:fb:a0:ba:65:43:fe:23:64:57:
30:8a:15:70:90:62:7c:3b:5f:ba:76:ad:b4:bb:18:
42:86:20:7d:7e:c9:a5:a0:6e:4e:2a:fd:01:94:44:
dc:41:9d:1a:3e:54:76:90:ac:54:ab:19:99:a2:34:
28:68:59:f0:37:f4:18:a1:94:60:6c:58:fc:59:9f:
79:ec:05:f7:52:af:a4:19:20:63:42:f6:0b:72:65:
61:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6B:46:A8:BB:A4:52:CE:F9:36:AA:AB:3E:FB:B1:33:D2:B5:FB:EB
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/22tGqLukUs75NqqrPvuxM9K1--s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.112.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:df:2a:c9:7b:68:22:ed:66:fd:91:4f:90:4f:b9:cd:fb:73:
db:23:ed:19:4e:34:84:7f:d8:c3:46:02:10:62:48:3e:6d:43:
38:e9:40:cc:d9:ec:6c:c5:71:61:4d:ff:f1:27:17:50:25:c9:
63:69:29:dc:bc:88:6c:85:b8:21:c5:57:5d:54:92:ac:db:1f:
7b:8b:88:5c:4f:83:4b:89:95:e1:0e:81:46:75:2f:f3:13:fb:
1e:06:61:8d:5c:bf:ab:2d:77:bf:7e:ff:77:fa:56:c1:61:3d:
f5:18:72:f7:b2:e9:fb:96:ba:cd:68:43:87:00:d8:c4:11:be:
e0:34:67:ed:34:27:25:a5:b0:7d:84:8b:e8:d2:6a:f0:52:c1:
cc:ea:e0:7d:1b:9e:3f:de:4d:d8:81:52:d9:f3:c6:e0:9b:a4:
e0:72:d0:7f:a0:bf:4b:7e:89:5a:e5:15:ef:ea:17:5b:f0:a2:
64:1a:dc:1e:f5:a2:cf:cf:84:d5:45:38:c9:9e:d2:46:9c:4f:
df:6a:f3:16:8d:64:f3:14:75:4d:20:3d:6a:b5:91:33:99:40:
b0:27:c0:7d:cc:dd:61:2f:f0:be:c9:6a:a6:80:52:4d:4e:a3:
e3:b9:82:77:29:71:99:26:af:02:c9:de:6d:fa:87:94:57:24:
61:0b:7c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:05 2025 by rpki-client