Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZEy4Y4JmlrU8i7JPly3kwrUYu6w.roa
File: ZEy4Y4JmlrU8i7JPly3kwrUYu6w.roa (raw, json)
Hash identifier: WgoG2hin8wP7478XP/vqZaSB5orIKxXi4l4S/6zCwJ0=
Subject key identifier: 64:4C:B8:63:82:66:96:B5:3C:8B:B2:4F:97:2D:E4:C2:B5:18:BB:AC
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZEy4Y4JmlrU8i7JPly3kwrUYu6w.roa
Signing time: Thu 15 Sep 2022 02:43:35 +0000
ROA not before: Thu 15 Sep 2022 02:43:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131597
IP address blocks: 106.105.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=644CB863826696B53C8BB24F972DE4C2B518BBAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c8:c1:09:8e:b7:35:3f:12:d0:f8:7c:37:9c:
c9:ad:3e:7e:de:05:88:f3:28:04:9e:ea:d1:af:b3:
b2:79:6a:42:f3:30:52:66:5a:c4:11:8a:c1:6a:6f:
61:7a:c0:c8:48:16:64:1e:48:cb:f2:0d:c0:8a:62:
20:90:b0:c1:d8:7d:1e:c3:2a:8c:b8:75:2b:67:0e:
07:ce:02:e8:05:8a:18:d9:4d:c2:ee:ac:19:c3:7b:
e0:d8:b5:1f:68:28:78:9f:bc:01:8f:e8:91:67:d3:
d7:60:76:32:c8:36:da:30:0d:9a:a7:e8:87:b1:30:
cc:40:e9:4f:2d:d7:96:6c:42:33:cb:eb:2a:d2:6d:
4f:ba:ad:21:cd:dc:be:2e:d5:60:1e:04:b3:05:3c:
35:ef:2f:d0:09:11:62:77:1c:58:d0:cd:53:d6:20:
5b:43:da:49:26:b8:bb:88:5a:76:7b:dd:df:a0:f8:
f0:1a:32:81:8b:66:07:e7:78:21:5b:eb:08:37:c8:
4a:38:9d:d9:a9:8a:eb:ef:30:de:48:f9:39:0d:42:
8c:3f:9a:d5:66:80:80:cd:6b:8a:75:d0:4d:11:9e:
89:1f:c5:9d:63:44:02:df:20:21:00:7e:b9:5e:f0:
b6:10:aa:e9:b4:17:79:64:b5:eb:69:ae:d4:18:1e:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4C:B8:63:82:66:96:B5:3C:8B:B2:4F:97:2D:E4:C2:B5:18:BB:AC
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZEy4Y4JmlrU8i7JPly3kwrUYu6w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.240.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:be:ad:22:75:fc:f9:7f:00:8d:e3:62:51:7b:d5:e9:25:eb:
31:1c:d1:ad:d6:14:8a:19:0a:75:3d:7c:d2:c3:9a:56:73:46:
32:cd:35:af:81:47:ad:54:ab:af:61:0c:f9:52:a2:30:01:89:
55:72:68:48:88:f5:81:98:ce:6a:bf:d4:9d:a7:52:c7:e3:cb:
19:f3:a8:fa:4f:38:bc:43:d6:2b:23:ae:3b:db:89:34:f3:6d:
9b:8a:75:62:b0:c1:62:97:1d:e4:a6:c7:77:71:41:00:9d:00:
af:2e:c6:a6:1c:9e:bc:92:87:00:36:21:fe:ea:86:d1:ba:53:
84:3f:11:66:e6:4d:95:8d:7a:b4:db:36:a2:ab:a6:7e:58:79:
c8:02:94:0b:ba:3c:6d:c6:48:ba:67:10:0a:0b:f4:18:f9:7b:
00:19:3f:36:7c:6b:76:a9:14:91:ac:d5:2e:84:63:23:bd:f3:
2d:d5:2d:c4:a8:a0:87:c7:cb:07:da:ba:2f:23:5b:c8:d0:44:
ca:ec:f1:4f:23:63:fa:e9:3b:2d:a5:43:09:fc:ce:4b:d0:b6:
a7:8b:c4:99:e5:00:50:22:63:e9:5f:ec:34:f0:8e:02:54:06:
59:45:98:5a:f3:55:53:47:f5:da:e6:3e:b4:26:6f:95:d3:6e:
ed:43:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:34 2025 by rpki-client