Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/QPVNTHPZNkIXbripIbJGZj1g_8I.roa
File: QPVNTHPZNkIXbripIbJGZj1g_8I.roa (raw, json)
Hash identifier: tUBvjFCHCEU2/ICK8cNhZkrd0CcVNBNjgpU78Dklc7k=
Subject key identifier: 40:F5:4D:4C:73:D9:36:42:17:6E:B8:A9:21:B2:46:66:3D:60:FF:C2
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 177F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QPVNTHPZNkIXbripIbJGZj1g_8I.roa
Signing time: Mon 10 Feb 2025 14:06:57 +0000
ROA not before: Mon 10 Feb 2025 14:06:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131584
IP address blocks: 106.105.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6015 (0x177f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:06:57 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=40F54D4C73D93642176EB8A921B246663D60FFC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a5:d3:63:3d:18:93:35:07:79:a0:3e:b0:5d:
36:57:cb:4e:07:0f:69:6e:9e:7f:54:f8:69:06:45:
cb:c9:f7:34:6d:5b:d4:0c:87:c9:c3:4d:9a:73:52:
5a:2a:12:67:be:4a:43:06:11:ab:04:3c:71:4a:50:
2f:a3:ce:68:37:e0:7c:80:2e:ff:e4:c1:d9:ea:58:
5e:a2:24:9c:03:2e:ac:3b:1c:05:1b:f6:2c:a0:94:
70:a9:cc:c9:c5:03:0e:a9:51:c1:61:f4:8f:92:64:
25:75:11:88:fa:0a:db:5a:00:63:f2:f9:8a:dd:f7:
bd:4f:02:9c:d2:47:3f:58:c3:f6:1b:11:04:ae:b2:
bd:c8:05:05:79:85:22:b9:25:bc:e5:2a:26:a2:ed:
52:cb:0f:94:0e:de:21:5c:b9:2e:60:b4:49:7c:71:
69:0a:4b:2f:48:5a:22:2e:58:35:5e:4c:93:80:f5:
33:6a:44:e8:8d:f7:d8:1b:05:a0:03:37:93:34:f9:
bd:2c:57:56:d1:d1:4d:af:09:13:e7:ea:88:b1:90:
d4:89:00:14:c9:0e:00:e4:32:96:5f:9c:24:d3:37:
7b:83:6c:5a:db:ea:72:8e:c2:e2:09:7f:46:e3:2a:
2a:ca:ec:aa:a8:f6:8a:de:90:ec:da:6b:f2:cc:c3:
09:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F5:4D:4C:73:D9:36:42:17:6E:B8:A9:21:B2:46:66:3D:60:FF:C2
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QPVNTHPZNkIXbripIbJGZj1g_8I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.183.0/24
Signature Algorithm: sha256WithRSAEncryption
82:4c:4f:a6:6d:05:0d:03:8c:f9:d9:d5:40:47:d8:ca:6a:30:
a9:36:23:f4:c6:30:93:cd:37:98:3a:e4:77:18:91:7a:a0:fa:
4d:11:98:ef:ab:55:f2:25:e4:50:be:ed:5f:6e:e9:32:ac:af:
71:67:b6:7e:a0:7e:d7:8b:26:6a:42:cf:f8:5b:2d:b1:67:3e:
08:18:21:0c:25:0b:c0:a4:74:25:96:49:cf:55:c7:d7:32:0c:
86:e8:aa:22:63:57:55:36:3c:f4:07:0d:c1:ff:e0:d0:fd:0f:
7f:18:78:d7:0c:a6:6e:19:60:81:1c:f1:07:2b:ee:ea:c0:ad:
9e:05:81:fc:3d:03:81:d8:67:b3:9f:22:dc:f3:1f:85:4b:61:
e6:ac:22:01:bb:45:60:aa:89:e8:13:1b:7c:36:49:19:55:70:
6a:ef:32:9e:29:b5:48:26:64:c7:4b:36:68:21:a7:04:d8:cd:
99:e5:c5:f3:f5:75:f9:90:bd:03:d2:40:a9:7b:11:f8:1c:f0:
4c:a4:f3:f5:53:07:07:5b:50:0e:f3:87:39:fb:93:16:4a:21:
99:f8:48:f4:00:36:27:ca:a1:03:19:d4:46:59:09:ef:6f:3b:
45:b5:5f:7f:7e:45:89:db:fb:15:c0:20:d1:c3:23:43:81:81:
36:7e:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:33:52 2025 by rpki-client