Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/6WyqSpu9WnMjHWVvz9eOv5cOd0Y.roa
File: 6WyqSpu9WnMjHWVvz9eOv5cOd0Y.roa (raw, json)
Hash identifier: NwzkQnJs1WTDReKfaDX2FwuuZzu3CndyD2qF64xkDiY=
Subject key identifier: E9:6C:AA:4A:9B:BD:5A:73:23:1D:65:6F:CF:D7:8E:BF:97:0E:77:46
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E3E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6WyqSpu9WnMjHWVvz9eOv5cOd0Y.roa
Signing time: Wed 29 Sep 2021 02:43:21 +0000
ROA not before: Wed 29 Sep 2021 02:43:21 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18049
IP address blocks: 106.105.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3646 (0xe3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:21 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E96CAA4A9BBD5A73231D656FCFD78EBF970E7746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:5c:81:35:04:e3:cf:8b:48:8f:ed:9d:21:
2f:7d:be:98:e5:3f:bf:1a:be:54:05:79:2d:59:a8:
19:b1:27:d1:40:50:9e:35:fc:d1:46:00:8b:9b:39:
11:14:f2:17:a8:ab:a4:01:24:8f:ba:8e:f8:b4:dd:
ff:e8:5a:a9:a0:d0:1c:6b:98:a1:91:92:b5:78:5a:
09:41:a4:54:4a:27:45:09:99:37:3c:91:99:28:43:
4b:62:bf:3c:74:fb:4e:f9:c7:23:47:a2:b4:81:4f:
7a:99:a8:c2:1b:c4:8d:8e:af:de:e7:23:c8:36:6a:
3c:ed:90:7d:35:c3:4d:70:ab:fd:32:aa:b0:f6:dc:
0c:1c:e1:9e:7a:c2:d3:a9:aa:bf:37:8f:a6:9f:7e:
45:8e:3c:99:93:86:ec:ae:2b:ab:0b:43:ba:d5:ef:
d1:5f:40:f3:4a:83:50:40:79:9c:f6:b2:df:22:3a:
a7:e3:3e:06:6a:1e:23:fb:9a:71:3a:61:db:72:8e:
7b:3e:b6:e3:4d:6b:66:1d:3d:e0:14:05:d4:fa:b2:
9e:9c:5a:68:96:e1:5a:6e:b4:a4:70:88:d6:ad:e7:
21:72:63:71:ef:a7:9f:74:39:b0:86:86:7c:2f:57:
57:e2:58:cd:d5:89:28:85:6e:08:61:21:f8:dd:72:
db:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6C:AA:4A:9B:BD:5A:73:23:1D:65:6F:CF:D7:8E:BF:97:0E:77:46
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6WyqSpu9WnMjHWVvz9eOv5cOd0Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.0.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:64:a3:f0:0c:ca:ea:c7:5c:e1:8c:a0:10:03:ee:ea:2f:ef:
2e:a1:44:66:fa:ed:ea:04:1d:5e:18:6b:1a:70:d3:c4:41:53:
b0:0c:b8:8c:77:2d:4f:ae:a2:e0:6f:00:4d:32:7f:db:58:55:
dc:3f:59:24:90:c2:77:b5:9e:3c:6a:de:3d:2e:2f:f0:e0:ea:
9b:28:47:a5:5b:54:5c:86:d7:b2:75:05:88:1f:18:7a:b4:ed:
eb:b9:8e:cc:9f:5c:c8:de:fd:f1:e1:25:d8:f8:02:d6:12:59:
5a:86:8d:0f:6e:60:aa:d9:f7:d4:40:45:63:99:bc:72:bc:92:
47:7c:87:e0:e1:a9:38:2b:8a:ee:59:18:20:cd:02:d7:13:18:
f9:6b:34:94:b7:fc:b6:47:f9:e8:11:2f:29:6e:8e:93:e9:2a:
42:12:8c:62:14:15:cb:c9:9c:50:2d:b3:9a:73:19:fc:8b:63:
c2:cc:4b:41:74:e4:47:44:d3:74:17:2e:66:22:81:3d:96:ec:
ab:0a:57:1c:b3:f9:db:12:b0:63:3a:d1:9f:61:50:18:85:59:
7f:f5:27:13:ae:eb:0c:00:c4:54:91:9d:88:f3:07:dd:0a:8f:
68:6b:ba:5a:e8:0d:f3:53:bb:6a:b5:51:05:4b:11:c6:d3:5b:
25:24:1d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:35:29 2025 by rpki-client