Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Y2wpbK9J4dxAA6CCIicr4QBi4TI.roa
File: Y2wpbK9J4dxAA6CCIicr4QBi4TI.roa (raw, json)
Hash identifier: fKjEfjuPjea/hhZe4AgIS6FEBxBgPgOc1FRuJalzP7o=
Subject key identifier: 63:6C:29:6C:AF:49:E1:DC:40:03:A0:82:22:27:2B:E1:00:62:E1:32
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1784
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Y2wpbK9J4dxAA6CCIicr4QBi4TI.roa
Signing time: Mon 10 Feb 2025 14:06:59 +0000
ROA not before: Mon 10 Feb 2025 14:06:59 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 106.105.108.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6020 (0x1784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:06:59 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=636C296CAF49E1DC4003A08222272BE10062E132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:c6:34:fd:d0:7d:34:2a:d9:98:11:7d:ce:
56:91:77:b1:f9:cd:50:2f:0e:99:d9:15:44:fa:39:
a5:e0:f3:b9:65:45:15:58:5e:76:4c:a3:94:65:0f:
6c:4b:8b:84:3a:ad:80:b9:09:d9:fd:46:9b:98:ea:
b3:52:49:18:a2:b1:d5:22:98:19:d4:e9:51:2c:82:
3d:55:1d:af:6b:e6:cd:93:d8:ba:46:3d:62:ec:4a:
cf:c1:3a:85:56:0c:de:68:0f:30:de:d7:21:23:e8:
ac:b9:54:72:af:af:16:20:e5:9c:3b:ab:83:dd:83:
ac:ba:d7:3c:da:98:d0:7b:d2:76:79:ef:07:23:a9:
65:c9:2c:7e:5e:3e:19:a2:2c:d0:d7:94:e4:b8:de:
b5:cf:cb:c6:9b:44:88:b7:ef:b6:24:9f:16:49:7a:
f5:b5:ea:5b:e8:eb:37:77:48:4c:a0:13:b6:31:85:
df:ae:fc:f4:15:20:12:bf:37:8b:bb:ad:63:ab:94:
f5:f3:57:33:a2:8a:e9:e1:9c:01:dd:36:45:1b:41:
cd:d4:f2:b2:75:7f:72:38:ee:04:80:0b:59:38:1f:
bd:fb:60:0e:3c:c0:fd:23:72:62:b0:80:fc:5e:ff:
ea:16:5e:b3:ef:96:48:08:2c:5f:0b:1e:d4:3f:f5:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6C:29:6C:AF:49:E1:DC:40:03:A0:82:22:27:2B:E1:00:62:E1:32
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Y2wpbK9J4dxAA6CCIicr4QBi4TI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.108.0/23
Signature Algorithm: sha256WithRSAEncryption
33:ba:77:9b:12:d0:90:7e:e0:54:84:c9:aa:4b:49:03:4d:18:
0a:6d:09:9c:ad:96:7d:c4:19:3e:08:62:6d:88:01:b9:1d:b9:
21:96:72:70:9e:b1:e3:79:98:b1:6e:1f:90:6f:de:6e:86:fe:
47:72:93:70:5c:dc:11:e3:be:74:22:20:3a:1c:53:6f:cc:51:
87:ca:37:9f:4b:6b:07:24:92:45:a6:b6:d8:fb:cf:8b:f2:c4:
c9:54:85:5b:6e:83:25:e8:14:f8:40:75:76:59:19:bf:e9:0a:
8e:b0:5e:cf:61:36:29:f4:cf:26:21:23:d8:7d:95:46:a8:70:
6a:03:cf:4e:57:d5:85:9b:75:df:81:f3:cf:30:b9:57:fb:7a:
51:0c:57:62:49:c9:60:4a:72:92:2d:7a:47:94:2c:0d:66:d0:
8f:72:cf:b3:f0:ee:1e:75:ed:84:e0:bf:82:3a:1e:ed:91:a8:
78:2a:19:a5:92:68:11:b3:99:f2:c2:e0:e1:89:da:b7:f6:b1:
7c:cf:da:c2:ad:d9:3b:19:e3:c8:73:27:86:dd:e4:c1:6a:77:
a4:42:a7:c6:6f:b1:a7:80:e4:92:6c:59:fd:70:e0:ea:a7:49:
19:9c:9a:14:2d:a6:9a:74:3c:aa:8f:5b:3b:17:c7:ff:06:e1:
98:21:e1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:07:56 2025 by rpki-client