
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/A7n0vXQ5JC_UCQAsb_KnD7ou83s.roa
File: A7n0vXQ5JC_UCQAsb_KnD7ou83s.roa (raw, json)
Hash identifier: rDIcknPxNgymNGnk8S5LSQMSOEeVEg5ijJcWDPvjXg4=
Subject key identifier: 03:B9:F4:BD:74:39:24:2F:D4:09:00:2C:6F:F2:A7:0F:BA:2E:F3:7B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 131D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/A7n0vXQ5JC_UCQAsb_KnD7ou83s.roa
Signing time: Fri 01 Sep 2023 09:24:29 +0000
ROA not before: Fri 01 Sep 2023 09:24:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 106.106.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4893 (0x131d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=03B9F4BD7439242FD409002C6FF2A70FBA2EF37B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:54:6e:01:8d:cb:76:6a:64:3f:7e:22:0c:
22:44:71:bc:0d:f3:73:01:85:ac:cc:99:4b:2d:0b:
e6:ae:95:87:ca:80:b5:2d:6b:51:aa:34:dd:6f:2f:
78:f0:57:58:98:da:24:15:09:cb:c4:95:4c:c7:b8:
1f:96:f8:14:ed:3d:c6:24:7e:90:a4:2f:b0:32:35:
3b:b3:24:20:f8:47:81:d8:49:d4:04:ef:2e:62:93:
c9:e9:7a:69:ef:8d:45:51:3b:89:9f:2d:a2:59:7f:
0a:42:95:da:57:e9:49:0c:59:4e:3f:ca:72:d4:9d:
01:3c:45:52:f9:bb:ac:77:d0:64:e3:bb:5d:5d:af:
14:19:8c:8c:ac:ab:b5:fb:1c:89:ca:67:4e:2a:a2:
a3:41:dd:2f:4d:02:9e:c5:b2:a5:dd:1b:53:20:95:
1d:a9:be:20:a8:3c:e1:55:1b:54:78:1e:e5:bb:95:
c0:af:c0:19:8e:29:5d:81:d7:24:16:6f:22:c3:20:
ba:18:f2:fc:27:ad:8a:d2:47:11:32:53:4c:92:c2:
02:83:cd:98:cd:04:36:1d:11:0e:d3:60:96:44:be:
1a:1a:c5:40:a6:45:98:cd:6a:45:48:37:5e:79:b6:
02:30:8c:e5:ba:d1:0b:3c:8f:bd:48:1d:18:4a:f0:
f2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B9:F4:BD:74:39:24:2F:D4:09:00:2C:6F:F2:A7:0F:BA:2E:F3:7B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/A7n0vXQ5JC_UCQAsb_KnD7ou83s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.106.236.0/24
Signature Algorithm: sha256WithRSAEncryption
09:bc:be:15:d3:b6:66:6b:86:47:4d:b0:02:5b:a2:7c:5a:40:
55:50:50:a5:3c:f2:07:bb:eb:2a:d4:95:9d:bb:45:00:88:16:
74:72:50:50:25:1c:9c:bd:9b:f9:75:3c:f7:01:6f:99:6c:de:
bd:c9:81:21:2a:8a:2a:34:af:2a:2a:5a:e8:b2:a7:17:92:a8:
c2:22:c1:27:31:1f:a2:0a:32:ae:8a:74:48:14:b7:a8:85:62:
1f:19:18:8d:02:ec:a1:25:8f:97:2a:95:c0:e7:4a:db:38:87:
d0:2b:00:3d:50:6a:84:fe:2a:12:c9:32:cc:19:64:4c:22:b5:
6b:b2:12:bc:5c:68:b3:fd:37:0d:38:a5:47:e7:13:f4:f6:29:
34:8e:6b:89:11:fc:c0:6e:32:10:04:29:7a:72:99:f1:a5:56:
d3:41:0d:73:c1:f0:3b:3e:4e:61:38:b3:a8:ab:41:20:ff:c8:
91:d6:32:3e:64:6b:6d:5e:dc:38:5c:bc:21:79:c1:4c:81:19:
32:69:f8:0a:64:51:f1:cd:86:1d:a7:3f:48:c9:76:81:fd:84:
eb:df:18:1e:c7:1a:16:bc:f9:78:59:45:30:82:04:db:fc:55:
9f:17:be:83:98:f4:5f:ab:b0:24:13:9f:7e:5b:c5:23:aa:2f:
29:df:2f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:06 2025 by rpki-client