Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/9w-6jESqGnNfYjILBAwD3NnAAOo.roa
File: 9w-6jESqGnNfYjILBAwD3NnAAOo.roa (raw, json)
Hash identifier: wJgEJusqndYy4kgQsKc1CdRPsvagGWkvm5fRLqfx00Q=
Subject key identifier: F7:0F:BA:8C:44:AA:1A:73:5F:62:32:0B:04:0C:03:DC:D9:C0:00:EA
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 177E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9w-6jESqGnNfYjILBAwD3NnAAOo.roa
Signing time: Mon 10 Feb 2025 14:06:57 +0000
ROA not before: Mon 10 Feb 2025 14:06:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131597
IP address blocks: 106.105.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6014 (0x177e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:06:57 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F70FBA8C44AA1A735F62320B040C03DCD9C000EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:f0:bb:2a:9f:6e:11:76:0d:9e:08:e9:3e:
00:8e:3c:fd:fe:e2:27:08:0c:1f:5e:a7:0a:26:9b:
57:d9:df:86:de:fc:71:1b:74:25:27:9a:35:86:de:
f2:db:7e:b6:cb:f4:ef:34:d0:e6:27:8e:93:96:b7:
28:1e:a3:6d:9e:e1:a5:8d:ff:e3:79:01:44:d6:d3:
d4:b1:95:79:3d:74:73:0d:3a:d3:ea:0f:a4:5a:c0:
81:0e:af:71:02:9d:c4:4a:24:de:0d:2c:ba:f1:a9:
36:dc:99:cb:5e:d2:d5:ea:da:19:07:4f:ed:cd:a1:
44:95:e0:b2:b0:e0:02:3e:2d:4c:7b:96:26:74:a0:
2c:44:b4:93:49:63:81:a5:67:57:da:02:ec:10:9b:
1e:b0:54:2f:83:26:6a:85:0e:2c:7c:76:bf:23:ac:
33:45:7b:b1:2c:8c:9e:95:96:b4:5d:21:ab:03:cd:
23:6d:33:7e:33:e1:6f:55:75:b6:aa:3d:00:e1:89:
fe:be:2f:bb:87:a2:48:0d:ca:7e:33:1a:9a:ef:aa:
6c:8c:82:b0:8e:26:b0:75:47:d6:02:b7:9c:f2:43:
38:0c:77:06:7d:77:ad:71:0f:a6:7b:2d:38:b1:f0:
85:dc:19:8c:35:7d:89:3c:74:55:20:03:8e:73:88:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0F:BA:8C:44:AA:1A:73:5F:62:32:0B:04:0C:03:DC:D9:C0:00:EA
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9w-6jESqGnNfYjILBAwD3NnAAOo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.224.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:bc:38:9a:f9:9e:b1:a1:a8:bd:34:d7:99:36:37:b4:76:3a:
56:20:ee:f5:f9:be:f2:92:94:d2:5e:2b:dd:ef:6c:e7:c6:25:
d7:81:29:aa:26:fd:1c:c0:dd:34:bd:a3:4d:d4:90:5a:ff:1c:
bc:93:f3:95:1d:bd:af:d9:60:16:e7:7e:ce:22:16:54:d6:31:
6b:66:2e:57:ff:bf:a3:70:4e:53:37:80:38:0e:5b:a9:7e:5d:
16:3c:ce:67:30:b6:70:b1:34:a8:6c:24:2b:10:1f:86:54:c6:
c2:04:1a:81:0b:9c:8e:4f:f9:87:df:db:a5:ca:94:71:af:c2:
f3:df:95:06:2a:9d:14:1b:f2:6c:3d:0f:9f:c9:6f:6b:b8:c9:
25:5a:c5:74:50:86:c5:b7:eb:c2:5c:3c:7d:73:e2:9d:33:2d:
58:ae:a6:9e:42:53:6e:6f:71:d8:a1:4f:78:eb:41:2f:af:1b:
23:01:77:b0:ad:8d:32:c8:9b:26:e3:22:ec:eb:8b:cb:ab:f4:
a2:23:44:6c:21:18:d0:dd:66:2a:28:56:d5:d7:c3:da:8e:da:
a9:90:14:96:6c:44:e0:69:27:7c:f1:75:43:cd:f2:08:a5:58:
25:e8:c9:77:28:98:28:26:01:c8:48:48:4c:35:8d:c2:4f:8e:
d2:95:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:08:26 2025 by rpki-client