Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/F6t2fZVGpwlvEJkZfN25N3uPErA.roa
File: F6t2fZVGpwlvEJkZfN25N3uPErA.roa (raw, json)
Hash identifier: mG2dT8vPPKgRDgNNJBqlhFXY1RZZIv5sllPq8XD6lGA=
Subject key identifier: 17:AB:76:7D:95:46:A7:09:6F:10:99:19:7C:DD:B9:37:7B:8F:12:B0
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C8D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/F6t2fZVGpwlvEJkZfN25N3uPErA.roa
Signing time: Sun 07 Feb 2021 11:43:56 +0000
ROA not before: Sun 07 Feb 2021 11:43:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 106.105.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3213 (0xc8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:43:56 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=17AB767D9546A7096F1099197CDDB9377B8F12B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:d8:66:5f:9f:9a:59:cb:89:29:08:73:cb:
df:e6:a7:4f:a1:65:6d:85:e8:68:30:94:be:03:35:
58:cd:35:0f:67:a1:6f:71:d8:22:c2:b2:dc:37:8a:
ad:26:69:8d:62:96:c3:e9:da:2f:32:ad:59:14:94:
8b:96:05:72:7f:2c:28:45:45:9e:d7:1c:ac:ba:50:
b8:2d:b6:77:3f:89:4e:1d:92:ea:c2:46:ac:e5:bb:
c2:f8:7a:ce:88:71:30:7b:b1:e6:0a:34:c9:d5:fa:
03:53:33:89:87:bc:be:da:ff:d0:0b:aa:77:63:7c:
45:ab:fb:75:09:6d:45:dd:8c:2b:21:fe:85:19:b3:
51:df:af:e3:64:81:a8:b2:91:15:23:1e:7f:d7:41:
0d:66:25:92:83:16:85:fc:d0:b8:e2:6b:9f:56:8c:
f5:c1:c0:1f:9b:2e:44:77:b5:75:4a:05:73:fa:2a:
6b:b0:ce:45:88:97:06:6c:84:ba:fa:f9:3c:81:d7:
9e:ec:ec:47:14:d2:92:51:5c:19:83:f6:e8:bc:79:
dc:89:2c:bf:19:74:2b:ca:1b:c4:4e:c4:ed:e3:de:
92:fc:88:0c:9d:4d:80:b9:0e:67:ae:8d:ca:19:30:
4e:dd:e9:0c:5c:f9:d6:9e:b1:11:01:17:17:26:4f:
d2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AB:76:7D:95:46:A7:09:6F:10:99:19:7C:DD:B9:37:7B:8F:12:B0
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/F6t2fZVGpwlvEJkZfN25N3uPErA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.250.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:67:21:31:bf:56:a1:a2:d2:46:8b:c7:b0:38:88:30:06:42:
77:64:46:63:c1:05:2b:60:f8:d4:41:09:a3:91:47:19:fe:3f:
29:30:ae:96:61:d7:5b:47:0b:ba:55:5c:bd:55:6c:e9:6f:dc:
55:90:d5:8e:80:55:0d:f0:0a:06:b8:91:01:46:24:45:8b:7a:
82:c2:16:83:71:8a:94:26:94:be:40:70:a9:40:7c:15:40:73:
ab:d1:33:d3:01:44:dd:8f:b8:e5:c6:52:81:06:5f:89:6a:49:
ce:f4:ca:bd:36:58:fc:ce:9d:d2:68:a2:8a:ac:db:e0:ff:fc:
4a:4a:cc:23:1a:97:06:6f:18:d6:45:09:19:43:25:7f:75:b3:
d1:b8:cc:89:27:d5:3b:3e:7f:17:02:a0:94:f5:f6:99:60:df:
42:a1:51:18:d2:ea:6f:07:00:0d:61:67:a5:45:39:49:24:ce:
f9:e7:aa:81:f1:39:8a:a1:de:69:95:4e:6a:9f:c3:7b:a6:88:
a6:0a:39:0d:24:ee:5b:a4:ce:5a:7a:9d:54:2b:60:90:b7:f5:
be:56:6a:61:8b:c2:f9:7b:d3:fd:95:89:97:68:b4:2e:83:f9:
00:00:63:b5:ce:46:ae:15:ea:d6:53:60:00:67:12:5c:c8:50:
3f:5f:a7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:04 2025 by rpki-client