Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/FA24L_cTMfPtkLBeaq8vMgSPR20.roa
File: FA24L_cTMfPtkLBeaq8vMgSPR20.roa (raw, json)
Hash identifier: RMbnfGe/P6Z8Mr29/5OZgL6QG9/DwftKrwPj4Veiq+k=
Subject key identifier: 14:0D:B8:2F:F7:13:31:F3:ED:90:B0:5E:6A:AF:2F:32:04:8F:47:6D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1376
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FA24L_cTMfPtkLBeaq8vMgSPR20.roa
Signing time: Fri 01 Sep 2023 09:24:58 +0000
ROA not before: Fri 01 Sep 2023 09:24:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 106.107.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4982 (0x1376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=140DB82FF71331F3ED90B05E6AAF2F32048F476D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:48:22:16:e8:1c:4f:33:59:19:c0:64:5a:
0b:aa:18:0b:f5:c1:4a:f0:ef:db:d3:66:57:21:6a:
49:f8:c9:20:3d:6b:ce:62:58:c2:f2:85:bd:66:46:
4d:fc:f8:19:c2:07:a4:73:eb:5f:e1:e9:7b:57:48:
5f:e4:74:a1:6f:4b:b2:29:0d:79:d7:7b:a8:03:24:
63:9e:cd:0e:8b:6e:62:09:05:b6:2c:0c:f8:6b:00:
cb:58:7c:0f:79:29:32:9e:10:7d:f8:b1:f4:2d:4f:
03:4f:c9:5a:20:d2:ed:8e:e4:48:e7:98:ba:9b:c6:
53:0d:7a:36:4b:ec:10:20:b3:47:28:a6:e0:de:46:
5e:64:18:d9:7f:61:15:76:a3:83:5c:94:d1:82:02:
89:9b:03:8f:a5:4a:7d:79:fb:2f:1a:f1:34:a2:9b:
82:b0:61:0d:3d:9a:7c:1a:f0:9e:0f:26:d8:36:fd:
9c:cc:46:14:f9:fb:79:5a:0e:8b:7b:54:31:b2:a2:
b4:5b:db:c4:4b:a3:e2:66:55:72:51:81:8a:e9:81:
48:c0:e3:d4:84:51:01:1c:9e:bb:66:da:cd:83:51:
97:b4:f5:70:bb:bf:e8:7b:9f:c4:31:bc:f3:75:c6:
8a:12:cb:46:5e:82:14:bf:d6:70:18:9f:1a:8d:06:
7f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0D:B8:2F:F7:13:31:F3:ED:90:B0:5E:6A:AF:2F:32:04:8F:47:6D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FA24L_cTMfPtkLBeaq8vMgSPR20.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.144.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:20:0e:46:d2:8a:13:52:78:f4:37:de:b6:a3:63:51:8b:84:
5c:7b:ef:21:be:2f:7d:73:99:fb:0f:02:72:41:88:a8:15:a9:
2f:f7:1f:6c:30:25:b0:35:c5:c3:48:b5:36:f0:64:ef:6d:ce:
11:a1:1f:5d:bc:cc:da:d5:ae:29:1b:56:87:4c:ec:86:64:f6:
59:8a:3e:76:5c:c4:76:9d:58:34:e9:04:f0:35:d3:48:4e:b1:
fc:3c:d0:47:34:c4:6c:8c:dd:95:79:52:c5:59:f7:97:12:47:
08:01:08:03:94:f6:cc:90:91:0d:31:5c:94:ea:b3:e6:21:5b:
20:65:28:ea:25:99:ee:fc:b2:7c:18:ee:88:79:fb:be:38:d6:
04:b0:18:66:da:b4:4d:ee:2b:d9:31:28:87:ca:04:f7:cb:6a:
e9:bd:0c:77:89:2c:95:82:38:16:73:44:b2:dc:d6:62:ad:6f:
84:74:cd:54:e1:fb:19:69:58:11:98:dc:a6:47:02:4f:d3:08:
ac:9f:9e:2a:97:00:8a:fe:ac:94:cf:9f:87:8c:06:6e:d0:bc:
a6:ec:ec:62:79:42:94:bf:87:c7:ce:1a:31:cf:08:62:dc:95:
3a:90:10:ab:3b:b4:da:eb:1a:8a:8a:8f:0c:94:56:5d:9d:44:
60:50:2a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:13:49 2025 by rpki-client