Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/RH2kYtKZrf6pJVm37mPMiN91_qA.roa
File: RH2kYtKZrf6pJVm37mPMiN91_qA.roa (raw, json)
Hash identifier: i59N6nyjjYNIJylHXDa68NcLbg2vUhIAtoPhEOwk8oM=
Subject key identifier: 44:7D:A4:62:D2:99:AD:FE:A9:25:59:B7:EE:63:CC:88:DF:75:FE:A0
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1397
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RH2kYtKZrf6pJVm37mPMiN91_qA.roa
Signing time: Fri 01 Sep 2023 09:25:11 +0000
ROA not before: Fri 01 Sep 2023 09:25:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 106.105.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5015 (0x1397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=447DA462D299ADFEA92559B7EE63CC88DF75FEA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:30:c6:2a:7e:76:eb:a7:78:77:2e:c1:b2:
b9:fe:9b:67:8a:f6:a8:c5:91:cf:0a:45:e7:d7:e5:
d3:99:be:87:3b:47:fd:49:c2:5d:87:5b:57:0b:ff:
c0:a4:7b:bf:d8:6d:a6:3b:09:eb:d6:3d:a0:c0:21:
66:b3:d9:59:3f:06:d1:7c:1a:00:8c:7e:f8:17:8f:
a8:1f:8e:8e:2b:92:01:5e:a9:4a:0c:3c:49:06:23:
19:cc:03:03:45:9b:ca:06:26:c7:de:c2:5e:14:15:
be:f9:b5:74:18:68:06:cd:61:32:5a:7f:d1:83:e3:
38:63:84:fb:4e:a5:c0:b0:53:e2:a2:fc:2f:9b:09:
6b:d8:91:7a:62:fc:06:13:79:74:92:56:d1:c8:c6:
03:3e:ed:7f:a0:bc:1c:4d:e9:5d:5f:fc:52:9a:f9:
f1:ca:c2:ed:4c:87:04:fb:41:41:a7:90:6e:04:1d:
28:8b:24:63:0b:99:2c:e5:ca:bf:bf:a8:0a:93:41:
4c:df:34:14:6b:e7:6a:61:61:24:03:87:72:49:18:
55:a3:75:3c:83:e7:1e:4e:08:10:dd:d5:b0:9a:17:
24:64:bf:07:ab:5f:b2:3c:ce:5e:89:4f:58:ed:77:
e6:44:6d:c7:3b:e5:20:ca:5d:6b:04:22:1b:cd:55:
6b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7D:A4:62:D2:99:AD:FE:A9:25:59:B7:EE:63:CC:88:DF:75:FE:A0
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RH2kYtKZrf6pJVm37mPMiN91_qA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.164.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:d7:8f:df:bd:6a:db:9d:f5:3d:ef:6d:08:77:1d:9e:c1:c4:
0c:fe:cb:ba:4e:5a:e8:26:52:a5:4c:24:36:6c:6d:b9:ef:f2:
bf:e2:fc:d6:c1:bf:6e:15:91:6f:46:ca:66:d4:58:e1:1d:87:
71:b7:bb:aa:25:54:79:2f:e8:fd:6c:5e:4d:12:7e:53:9e:3d:
46:26:ae:2f:76:c2:80:72:86:97:4a:ac:93:55:c3:0c:3b:b8:
51:1a:f4:9b:60:1d:4c:99:93:90:bd:72:fd:9f:e4:c8:ce:23:
a4:e9:31:8c:03:87:bb:7c:3b:54:b9:f8:16:eb:4e:5a:20:f8:
6f:20:4c:b4:85:93:2e:33:4c:39:d8:ca:b5:5e:5d:d2:83:11:
69:71:71:95:3a:7a:d8:57:11:92:28:ca:5f:96:46:d5:23:32:
6e:19:cd:c3:19:99:a3:26:f1:2a:62:d6:c2:d3:b8:ca:33:e0:
b4:85:73:2c:43:77:a7:a8:22:8d:b5:43:ce:f7:ec:3d:1d:c5:
58:e2:b7:6a:97:ee:c8:bb:60:1e:80:8a:81:ac:c7:b5:71:42:
5b:bd:2b:4d:d4:a1:b5:47:09:63:9e:da:92:dd:2c:4e:81:7e:
7c:89:7a:73:d1:da:da:24:b9:56:5f:14:84:ee:12:e2:37:ec:
16:66:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:25:29 2025 by rpki-client