Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wql8Yqy1gMB85ymJ1wfytb82WcA.roa
File: Wql8Yqy1gMB85ymJ1wfytb82WcA.roa (raw, json)
Hash identifier: 2pvbfuW3A7fK3xFvF7JaDfRA0fjfc8EzXUqo8V9C4SE=
Subject key identifier: 5A:A9:7C:62:AC:B5:80:C0:7C:E7:29:89:D7:07:F2:B5:BF:36:59:C0
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1812
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wql8Yqy1gMB85ymJ1wfytb82WcA.roa
Signing time: Mon 10 Feb 2025 14:07:33 +0000
ROA not before: Mon 10 Feb 2025 14:07:33 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18049
IP address blocks: 106.107.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6162 (0x1812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:33 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5AA97C62ACB580C07CE72989D707F2B5BF3659C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0e:87:c3:c2:b3:81:02:54:ca:02:cc:80:a7:
65:94:6e:c0:e1:20:41:ca:8c:64:ec:a0:4d:47:96:
04:e4:25:fd:35:0e:cb:3b:43:f6:c0:cf:5c:3b:bb:
26:c1:78:2e:51:05:26:07:31:06:19:1e:3c:01:6d:
15:ee:b2:ca:c0:81:35:2e:34:fd:3e:91:eb:bf:d9:
6f:44:84:63:25:86:d8:db:49:dd:71:4c:d0:6e:e7:
eb:00:3e:36:9a:67:29:5d:9f:cc:70:16:b6:d4:40:
49:35:57:bd:1d:ea:3d:09:7f:76:36:49:9c:ff:37:
e3:3d:7f:05:7c:17:87:b5:98:6d:9b:af:b3:6e:4f:
33:39:7c:c1:b7:89:4d:a5:b0:61:9c:bf:04:55:6f:
4b:a0:5d:15:df:44:53:55:45:b8:27:08:69:27:f5:
33:9e:14:87:cc:c0:58:1f:17:ff:02:e6:ab:92:f8:
f8:8a:ef:bd:df:de:01:7c:41:a2:f1:6d:5b:fb:50:
db:ea:26:dc:f1:eb:81:ea:c7:85:21:79:50:ef:9f:
6c:0b:88:e3:1d:b6:3e:3a:3d:0e:79:a8:a4:e5:3f:
be:7c:21:6e:07:3b:c4:78:15:cd:87:6a:49:70:2c:
ae:06:78:1f:75:e3:e4:f0:9d:22:d4:34:e2:5b:bd:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A9:7C:62:AC:B5:80:C0:7C:E7:29:89:D7:07:F2:B5:BF:36:59:C0
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wql8Yqy1gMB85ymJ1wfytb82WcA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.176.0/20
Signature Algorithm: sha256WithRSAEncryption
88:41:1e:b1:a0:82:01:46:fa:ce:9d:16:66:1a:a9:3b:05:7f:
5b:18:e0:64:86:a9:45:3a:cf:74:db:24:2a:e4:4c:c5:06:98:
22:e3:c5:62:41:9c:d7:12:ca:28:b3:c5:95:50:25:0c:82:c3:
2e:7d:8e:2f:f2:65:7b:f8:61:7d:c7:6a:1c:88:0e:78:91:72:
bd:20:2d:65:25:4f:6c:bd:c1:4f:d8:d7:12:bd:0c:4d:b6:dc:
8c:b4:6a:e4:b6:f7:cc:08:cd:34:5a:65:7e:07:09:20:e6:6c:
11:25:c7:c0:d6:fa:1a:ee:41:e3:ac:84:c5:1d:16:51:6b:5d:
9b:45:20:55:7b:52:d1:fa:d0:9a:00:24:82:0a:33:da:e5:91:
4f:11:49:43:7d:38:43:73:33:bd:a2:08:00:3b:42:e3:d0:d7:
c4:66:b4:68:14:ed:83:17:f0:40:69:11:ab:9f:73:d4:2a:fe:
6d:0c:13:c0:64:30:4a:0f:04:cb:87:ca:1c:71:0f:44:42:5b:
ff:2f:d3:ad:aa:02:0b:b3:66:7d:80:ac:2b:74:0b:c3:83:72:
1c:31:3e:bd:b0:73:e9:61:5c:37:96:68:b0:6b:32:8c:4a:18:
06:57:a3:9e:b2:07:fa:bb:41:88:46:b1:88:28:59:ff:8a:9f:
1d:09:3f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:04:35 2025 by rpki-client