Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/G2Tgg57ISX5HxQYygnourBLbhaY.roa
File: G2Tgg57ISX5HxQYygnourBLbhaY.roa (raw, json)
Hash identifier: W7+XrImlbNQrd/vG/VqFFNa6PB3L36kSRV37pDYiI+Y=
Subject key identifier: 1B:64:E0:83:9E:C8:49:7E:47:C5:06:32:82:7A:2E:AC:12:DB:85:A6
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 177A
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/G2Tgg57ISX5HxQYygnourBLbhaY.roa
Signing time: Mon 10 Feb 2025 14:06:56 +0000
ROA not before: Mon 10 Feb 2025 14:06:56 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18049
IP address blocks: 106.107.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6010 (0x177a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:06:56 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1B64E0839EC8497E47C50632827A2EAC12DB85A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:33:c9:d8:e4:34:b3:f2:9a:f1:c9:2c:6f:
89:6e:53:e2:f3:38:ef:ef:d4:e8:15:2e:9e:7c:00:
d6:54:53:40:01:ea:c5:09:2f:2b:89:c2:bd:13:2c:
99:12:df:b7:3f:b8:71:32:d1:09:c9:4e:5b:4d:f0:
da:a2:8a:20:d6:1f:fa:69:8a:9d:52:71:b3:1c:39:
aa:6e:21:aa:c3:9d:d8:3c:6a:bb:8e:83:59:d6:d5:
d5:4c:e9:f7:18:c7:93:b9:45:d9:d2:a3:ec:12:2b:
33:13:8d:9d:eb:11:5c:10:ee:27:c6:94:5a:bd:4f:
0b:49:db:04:8b:73:41:80:7d:a1:be:29:b7:c8:6f:
bb:d4:9f:ee:7f:bc:63:c1:8f:ed:e8:d4:83:80:a1:
9a:e8:f5:89:51:89:f8:24:44:7c:af:cb:4f:2a:68:
e8:6b:c4:3b:bc:54:c5:10:66:33:e0:ca:c3:86:72:
4f:ca:c4:6c:6c:64:9f:c8:b0:26:a9:4c:66:02:13:
0b:40:c9:a5:e4:05:bd:74:76:0f:f5:78:58:d5:03:
6f:96:e0:a0:49:46:6f:2b:5f:12:83:08:3e:3b:f1:
c3:f4:3d:68:b8:77:d2:ed:c9:5b:c2:84:d2:9f:af:
37:f0:64:3e:80:77:8d:bf:d4:f5:d9:1c:0a:28:e0:
ff:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:64:E0:83:9E:C8:49:7E:47:C5:06:32:82:7A:2E:AC:12:DB:85:A6
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/G2Tgg57ISX5HxQYygnourBLbhaY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.240.0/20
Signature Algorithm: sha256WithRSAEncryption
60:80:96:e9:fd:cc:bb:42:f1:24:43:aa:9e:c7:ec:9f:85:52:
34:4e:f7:75:8e:8e:ee:d9:ca:ec:6e:61:24:b3:29:8f:44:6b:
91:49:49:80:e0:83:0d:20:b2:e3:d9:be:e6:c6:eb:ed:ce:7a:
b1:56:a0:0c:bb:41:88:8a:e3:a5:d4:4e:09:17:b9:61:f4:b6:
b7:9f:b5:65:4b:64:8a:96:e2:75:ff:91:9d:d3:4e:32:ea:50:
79:17:58:f9:7c:68:1e:b4:75:60:75:a2:57:2d:51:bb:b0:cb:
db:7f:e9:82:23:7b:95:cc:12:27:c2:b3:35:09:be:b2:97:c9:
d8:d9:77:fd:b9:13:29:4e:96:01:1c:0b:7a:cc:cd:78:29:35:
b8:b1:f2:1a:32:37:9c:87:83:05:da:94:5c:b6:92:4b:d8:e8:
5e:8f:3d:05:73:64:03:ae:90:8e:2e:f7:cf:e3:53:ce:fb:2d:
b5:b2:92:ac:35:b0:89:bf:3a:c8:96:00:35:c5:97:f2:70:c7:
24:4a:40:1d:cf:8a:d3:0b:d6:91:ff:80:28:61:af:a8:41:ae:
88:14:e2:90:46:7e:44:a5:d8:09:27:57:ab:a8:65:e1:a2:65:
3a:38:0e:c7:c4:c9:3b:67:d0:ff:50:be:3b:62:52:49:73:d3:
52:cd:64:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:10:59 2025 by rpki-client