Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/fJbCEYYAPElU5LChoENcAWbZIMc.roa
File: fJbCEYYAPElU5LChoENcAWbZIMc.roa (raw, json)
Hash identifier: oFO3KnP3LHiD5Y7rztrwnoqWpOhLA0VSLZ+g+q25ucA=
Subject key identifier: 7C:96:C2:11:86:00:3C:49:54:E4:B0:A1:A0:43:5C:01:66:D9:20:C7
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fJbCEYYAPElU5LChoENcAWbZIMc.roa
Signing time: Thu 15 Sep 2022 02:43:44 +0000
ROA not before: Thu 15 Sep 2022 02:43:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9674
IP address blocks: 106.107.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7C96C21186003C4954E4B0A1A0435C0166D920C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:99:52:0c:b1:ef:21:61:7d:85:ea:1d:a8:
4a:be:ea:fa:0a:74:dd:f6:3f:f1:95:64:88:3f:14:
25:73:6d:0f:9d:08:e0:00:41:b3:43:d2:f6:3e:5d:
12:33:50:73:64:8d:cc:54:fe:88:0f:a4:a3:ce:31:
24:2a:70:ea:3f:64:75:6b:16:89:c3:c7:bf:2c:49:
92:30:c9:da:bd:49:87:32:4f:22:a6:d4:ba:71:b5:
a7:52:f7:37:cd:50:6d:bc:20:d2:5a:60:db:2d:a1:
67:fe:dd:aa:f6:d9:0b:58:9a:70:44:bd:ea:b7:98:
37:15:4e:87:9e:81:09:9c:e5:9a:96:24:02:6d:ed:
dc:d1:48:00:ce:f7:3b:23:b4:80:d7:b0:10:54:96:
7b:6d:a5:9a:1e:69:52:87:1e:ee:cd:e7:c1:ec:79:
96:e9:34:bc:44:3d:7c:ab:57:ab:9a:f0:3c:ea:23:
e9:1b:09:94:f1:3d:36:ab:25:cd:30:0c:49:8f:de:
76:9e:f4:8a:c8:13:35:c9:b7:c4:a8:99:9b:78:88:
38:f3:48:6e:cb:b3:27:3f:0d:1c:33:63:1e:46:34:
e7:15:3d:6e:26:fe:c1:c2:75:5a:5b:25:81:86:9b:
c7:70:74:d6:45:00:32:88:f2:06:fe:18:fe:e5:87:
30:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:96:C2:11:86:00:3C:49:54:E4:B0:A1:A0:43:5C:01:66:D9:20:C7
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fJbCEYYAPElU5LChoENcAWbZIMc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:92:38:4d:ce:2f:a4:58:7f:71:31:56:a0:e7:ae:1c:f1:9a:
f0:cb:5c:f2:64:aa:1e:48:4f:74:ce:3f:6a:76:24:05:8a:94:
73:a7:2a:6b:e4:1e:c2:72:61:0a:dc:65:65:f9:9b:80:6a:70:
09:9f:43:95:f2:70:36:4a:7d:ef:6b:18:7b:69:dd:65:17:0c:
c3:90:10:78:3a:df:b7:34:12:45:89:dc:b0:8d:88:96:e3:db:
9a:d7:d7:f7:8b:72:b9:78:e8:83:bd:a7:08:c7:ab:45:14:7f:
f1:a2:df:8a:42:79:1c:6b:2b:ee:b3:e4:b4:2e:44:a2:1d:72:
a5:58:8a:5e:4d:3a:13:bc:8d:eb:48:22:2d:92:86:be:65:27:
df:7f:de:d0:54:2d:80:9c:cb:8a:8f:db:0b:1a:5d:2c:01:2f:
6c:84:32:74:54:b3:64:b8:9f:0a:4d:1a:2f:36:d3:5a:de:b9:
ad:e4:12:f3:ac:d8:7b:ec:5d:f7:64:43:9e:18:83:df:89:34:
3a:74:73:d0:11:dc:41:94:c9:f5:7d:3a:02:91:c1:9d:69:38:
be:01:0d:8f:b1:7e:d3:27:ff:a7:46:40:11:5a:a1:28:cc:24:
6f:d0:a2:7c:9c:55:d3:05:8d:7e:f8:9e:27:d9:0e:99:f7:3d:
8e:d4:07:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:13:45 2025 by rpki-client