Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/PO9B_N6HkTc8HDAn7bqJ60iGZs4.roa
File: PO9B_N6HkTc8HDAn7bqJ60iGZs4.roa (raw, json)
Hash identifier: m6WLggCbVau7FInDBqkZNXtz7tWV6HKwANWLyaeJKus=
Subject key identifier: 3C:EF:41:FC:DE:87:91:37:3C:1C:30:27:ED:BA:89:EB:48:86:66:CE
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E65
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PO9B_N6HkTc8HDAn7bqJ60iGZs4.roa
Signing time: Wed 29 Sep 2021 02:43:32 +0000
ROA not before: Wed 29 Sep 2021 02:43:32 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 106.105.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3685 (0xe65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:32 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3CEF41FCDE8791373C1C3027EDBA89EB488666CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:44:ce:68:37:28:0d:f6:24:3d:58:ef:1d:
33:2a:22:93:42:3b:b5:ea:05:5e:c0:4d:0c:c9:d9:
8c:94:93:06:85:f6:be:24:22:e1:27:44:67:a3:24:
df:70:95:8d:9a:67:33:62:16:7c:b2:13:e4:88:f3:
30:e0:11:c4:f8:98:3d:d9:0c:45:e2:ea:7b:db:d9:
e6:1f:ce:20:2c:0c:8f:a6:45:83:25:c6:cb:61:06:
b6:e5:24:2b:b2:5e:95:a4:0b:95:1c:0a:21:29:ba:
92:38:cf:58:ac:c2:07:82:fc:3e:38:44:b4:fc:68:
20:a3:cb:64:30:62:51:39:43:91:7c:05:6c:05:6f:
05:16:dc:3f:c6:19:cc:b2:ac:16:88:ce:a1:ff:03:
f4:5b:59:19:b0:bd:96:5c:5a:b7:c8:04:95:2d:06:
43:e6:61:2d:0a:e2:5d:83:c2:1f:24:d4:6f:d6:1c:
33:c4:2d:81:b2:79:7c:7b:9f:06:5a:f4:7e:11:88:
dc:6b:c4:be:e0:e9:5f:3c:28:67:8d:21:3a:81:d0:
84:cd:0c:7d:98:b1:e9:f6:65:4e:42:0f:65:9e:a2:
3b:ef:68:7e:59:9b:1a:fb:af:9d:37:2a:7f:5f:a6:
7b:73:dd:1e:95:6b:b6:44:1b:7f:41:c0:9c:99:26:
1c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EF:41:FC:DE:87:91:37:3C:1C:30:27:ED:BA:89:EB:48:86:66:CE
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PO9B_N6HkTc8HDAn7bqJ60iGZs4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.96.0/19
Signature Algorithm: sha256WithRSAEncryption
2f:37:eb:65:25:4b:6c:51:8b:d8:9e:03:5d:b7:27:3b:93:33:
56:23:bb:02:29:87:78:d3:b6:2e:16:d3:e2:fb:19:45:5b:79:
c8:5f:42:f7:b1:ba:d7:72:69:99:5e:8c:dd:0d:1f:bf:62:8b:
dc:71:22:36:2a:25:5e:05:94:1f:fd:17:e9:22:0d:a0:4b:4b:
4c:71:0c:8e:9c:34:08:f1:bb:7a:27:55:45:35:3a:f9:57:13:
fc:21:78:2c:46:a7:fb:b9:89:f7:24:6f:67:3c:1d:80:18:58:
70:33:3e:07:6b:2c:41:3e:67:b1:b4:30:ad:45:1e:5e:34:b7:
33:1b:81:7f:07:b3:46:6e:49:74:42:22:d3:bd:4d:67:2b:28:
8d:66:ee:f2:7b:87:a7:19:37:5c:1c:3f:40:41:82:82:c8:71:
28:f4:a3:de:4d:e0:dd:17:f5:5b:21:3c:8c:73:85:ca:18:a6:
33:c4:65:36:44:c6:5f:c9:95:bd:4e:17:1e:2b:0d:42:31:6d:
30:c3:60:63:f2:ca:87:25:be:30:d1:91:1d:7d:75:84:f1:63:
2d:0b:85:69:aa:3c:28:aa:28:1a:fe:c7:c9:2d:bb:25:7e:08:
b2:ce:2a:b4:d3:48:93:f0:20:80:76:9a:e2:bb:bd:18:d2:80:
7c:ce:92:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:09 2025 by rpki-client