Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/UEh3ZvlRfBDTf3P2sLTUjLPPZX0.roa
File: UEh3ZvlRfBDTf3P2sLTUjLPPZX0.roa (raw, json)
Hash identifier: YDMsvkkb2gik4hjM+xVq+CLTKZclDAcZNeGYuiE3vAw=
Subject key identifier: 50:48:77:66:F9:51:7C:10:D3:7F:73:F6:B0:B4:D4:8C:B3:CF:65:7D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E7E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UEh3ZvlRfBDTf3P2sLTUjLPPZX0.roa
Signing time: Wed 29 Sep 2021 02:43:40 +0000
ROA not before: Wed 29 Sep 2021 02:43:40 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18049
IP address blocks: 106.107.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3710 (0xe7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:40 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=50487766F9517C10D37F73F6B0B4D48CB3CF657D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:19:52:97:4a:f0:ad:6e:c5:4e:80:23:b7:03:
fd:4a:fd:3a:2c:37:8e:fb:7c:92:c5:36:20:32:73:
9d:c9:43:e1:df:c8:4a:53:7c:c8:98:85:73:6e:b0:
15:94:56:6f:9a:cb:2f:1e:1b:cd:30:d0:6f:7e:70:
a5:d0:c1:4a:a0:dd:1d:14:72:0d:b5:a3:38:c3:9e:
d2:3c:b9:49:8e:17:b8:8d:16:0b:c5:03:1d:ed:aa:
2c:ff:62:f0:7a:4c:46:7d:26:57:56:21:5c:39:26:
b2:cc:ee:3f:aa:28:d9:fa:8f:49:51:35:d9:b4:02:
4c:39:f5:87:dc:d5:bf:cc:d7:ad:51:37:33:62:85:
bd:02:45:a3:55:c1:68:cc:68:13:e5:4e:86:54:3f:
ec:bf:5e:38:3d:60:72:e6:04:f0:53:80:5a:3a:65:
51:13:b8:02:74:58:09:88:6d:c7:85:b8:69:35:91:
ff:03:b8:8c:f1:81:b0:58:c0:ae:f8:7e:c4:5b:2e:
35:c5:ef:2d:0a:64:ed:e4:c6:fe:80:ac:71:b4:88:
83:56:8f:a8:df:cf:fa:28:03:4e:3c:29:6d:08:30:
68:34:4c:fb:c2:a2:bf:25:30:12:c1:35:ef:48:c3:
36:c3:3b:01:13:c6:bc:55:db:e7:7b:5b:f7:07:56:
24:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:48:77:66:F9:51:7C:10:D3:7F:73:F6:B0:B4:D4:8C:B3:CF:65:7D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UEh3ZvlRfBDTf3P2sLTUjLPPZX0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.176.0/20
Signature Algorithm: sha256WithRSAEncryption
c0:03:39:30:ba:5d:27:2e:12:4c:25:5c:d5:21:45:7f:a5:3c:
3d:e7:7d:e2:9e:11:e4:20:21:da:28:e6:35:94:26:8c:6d:91:
6a:8a:60:a5:22:af:32:d0:72:61:e2:98:34:33:0d:01:d5:bc:
eb:29:f1:47:18:d9:23:95:4e:e0:8a:5e:42:0c:42:bd:b4:a7:
63:35:c0:fd:1b:3d:e7:7a:de:44:8f:d4:93:86:4c:56:55:00:
ec:6f:15:28:f5:06:2e:64:ba:7c:4b:68:82:d4:5c:8a:37:b7:
b0:2d:04:e8:4f:b4:67:9f:86:6f:74:0d:e6:5a:b7:5e:49:70:
6e:cc:bf:c4:8a:f6:14:2a:0a:81:92:21:3e:a0:7c:03:4a:5b:
45:bc:cd:b9:71:80:64:d8:11:09:42:89:ff:62:b5:89:f8:23:
ec:98:d2:20:73:56:3d:69:c0:34:e9:54:a2:61:5c:5f:54:82:
76:37:55:36:88:bc:58:77:f0:7d:53:19:33:fe:37:25:17:68:
8c:6e:9e:21:9f:82:94:72:88:c7:8a:21:28:e8:54:49:73:e6:
2d:46:4d:44:d6:65:20:af:c7:f9:8a:c0:33:17:eb:74:90:c2:
f7:d8:22:42:a7:ab:90:8b:93:96:15:ff:14:c5:a9:3e:ea:ef:
4e:17:05:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:13:47 2025 by rpki-client