Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/2liZJRMnUbHpbpKz6PBtxr_c_c8.roa
File: 2liZJRMnUbHpbpKz6PBtxr_c_c8.roa (raw, json)
Hash identifier: TL1kBAu5cD9mAYuaaMdq+8Z+sbEnX57XiQV1ltCXUxQ=
Subject key identifier: DA:58:99:25:13:27:51:B1:E9:6E:92:B3:E8:F0:6D:C6:BF:DC:FD:CF
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E46
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2liZJRMnUbHpbpKz6PBtxr_c_c8.roa
Signing time: Wed 29 Sep 2021 02:43:23 +0000
ROA not before: Wed 29 Sep 2021 02:43:23 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38851
IP address blocks: 122.146.108.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3654 (0xe46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:23 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DA589925132751B1E96E92B3E8F06DC6BFDCFDCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:17:53:52:3d:06:6a:4a:be:a8:80:cc:db:
a5:bc:9e:68:ed:8d:cf:a5:4e:4e:1e:46:c7:87:cb:
e9:68:51:de:6c:64:66:70:24:27:78:09:9f:97:c0:
e3:42:13:b2:f4:ec:1b:f6:1e:80:8b:c0:4c:b3:41:
b8:47:50:6f:8f:2a:8e:dd:57:40:66:25:6c:45:b9:
1c:08:92:50:96:da:6e:c0:9c:90:61:ee:54:b5:fe:
dd:ef:58:ed:26:6a:b0:17:39:38:14:d1:03:6d:d2:
d2:1b:3d:a7:2f:e4:0b:36:aa:6a:6d:6a:02:35:72:
eb:ba:df:eb:3d:8e:02:44:17:da:74:ca:aa:47:f8:
37:5a:ed:98:59:a3:3c:94:e3:a0:92:e1:c4:65:6c:
38:51:b4:ff:a9:a8:a9:e5:9a:ee:30:74:68:38:57:
f5:2b:fd:da:72:78:62:01:61:b5:1e:6d:84:d1:c2:
c8:a5:e9:98:fe:28:df:35:1e:3d:74:95:bd:e7:b5:
30:65:3e:a9:52:2d:44:41:a3:f9:56:2c:07:e3:cf:
8f:b8:56:b4:e3:74:82:91:67:a6:f6:44:d1:80:ec:
f0:09:c0:5b:63:e6:23:77:5b:84:45:b7:73:9d:bd:
14:96:50:ae:3e:18:97:43:17:ae:66:e9:9c:7b:86:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:58:99:25:13:27:51:B1:E9:6E:92:B3:E8:F0:6D:C6:BF:DC:FD:CF
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2liZJRMnUbHpbpKz6PBtxr_c_c8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.108.0/23
Signature Algorithm: sha256WithRSAEncryption
39:1d:fc:f1:a5:f9:bf:ae:ed:44:69:77:b6:0a:95:e5:62:52:
27:3f:60:d3:13:af:4a:94:a1:6d:0e:81:48:61:22:df:32:ea:
06:18:54:10:91:a1:ba:69:c6:4a:49:e5:7d:63:48:94:76:6a:
db:2c:48:30:c1:71:2c:1d:e3:0d:56:90:f3:63:ff:e3:29:06:
b7:a3:b0:4c:ad:44:47:21:92:1d:e5:10:89:94:88:be:e4:e3:
9a:87:db:23:5b:58:28:f6:a0:19:88:44:fd:b0:47:c6:3c:af:
d1:b0:00:bb:7b:b9:07:8c:36:ce:b3:21:3a:a7:9f:f8:e3:fd:
2d:47:dd:a3:7f:6f:84:6c:95:6c:6e:31:ba:ea:67:9b:d2:b0:
c0:69:20:ca:98:66:75:a3:07:2d:8d:0c:83:26:df:aa:75:b1:
af:85:8c:42:7b:40:bd:e4:b5:62:cf:a7:a9:85:ac:4a:6a:fb:
44:7c:c3:54:b1:0d:90:35:ee:fc:54:32:06:c0:1e:48:23:d2:
16:29:47:e7:18:ff:13:3f:37:d1:9f:c2:ec:8a:6e:a0:13:03:
02:d9:5c:03:00:b4:09:af:57:48:c7:0a:70:74:ed:8f:10:c2:
9a:19:3a:12:27:46:b6:0e:55:a0:89:cb:f5:2b:67:af:70:f0:
89:da:3e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:13:43 2025 by rpki-client