Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/kaan-RdH5hPvN6Bhd8f7udn9Q9s.roa
File: kaan-RdH5hPvN6Bhd8f7udn9Q9s.roa (raw, json)
Hash identifier: G8imEEkWvm6nr/mNS9Iy2kfJ0w2z/zDvkmJJclOlV4w=
Subject key identifier: 91:A6:A7:F9:17:47:E6:13:EF:37:A0:61:77:C7:FB:B9:D9:FD:43:DB
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 162D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/kaan-RdH5hPvN6Bhd8f7udn9Q9s.roa
Signing time: Mon 26 Aug 2024 05:21:52 +0000
ROA not before: Mon 26 Aug 2024 05:21:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 23675
IP address blocks: 106.105.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5677 (0x162d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:21:52 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=91A6A7F91747E613EF37A06177C7FBB9D9FD43DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:32:28:34:de:fe:90:3b:ba:dc:d6:97:ec:
b7:92:b4:a2:4f:18:62:20:0a:ab:42:8f:7c:a4:e2:
f5:db:36:98:a2:6e:69:25:4b:bf:cd:8c:ee:d2:9c:
8f:16:37:d1:4f:b3:9f:5c:8f:b7:a4:0b:e1:c0:fd:
7a:81:b2:74:52:54:19:6e:0c:c0:11:7f:fe:d0:69:
6c:17:72:2b:c3:8c:e3:f0:59:99:0a:bf:5d:eb:b6:
d8:1d:aa:5e:58:13:e1:61:fb:60:bd:f3:c9:6d:01:
a5:25:61:3d:06:3c:12:7c:1b:52:ab:dd:08:ea:81:
ac:e5:ad:8e:7a:7d:5d:65:62:77:39:71:a5:9d:f6:
63:5c:02:69:69:80:f0:12:cb:36:58:69:b3:9e:3c:
76:6f:6c:99:37:a8:27:c2:e9:ba:4d:d9:20:08:d7:
e1:ac:aa:41:2a:31:2d:72:dd:9d:43:33:46:1a:84:
96:6d:42:ef:d1:26:6e:c1:89:7b:f6:f7:f7:6e:cf:
64:66:6e:ac:8d:f7:56:5c:b4:98:fe:5a:c1:39:56:
86:d1:54:03:8e:86:40:d3:c0:c6:c9:37:a1:88:6a:
a1:fe:c7:ed:34:ce:fc:41:60:d1:be:5a:0a:63:8c:
1b:57:a8:0d:f7:90:70:1b:88:95:c4:5f:b8:02:ec:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A6:A7:F9:17:47:E6:13:EF:37:A0:61:77:C7:FB:B9:D9:FD:43:DB
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/kaan-RdH5hPvN6Bhd8f7udn9Q9s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.110.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:d1:53:8a:3e:44:47:93:a9:2b:52:8c:56:45:08:81:78:01:
0e:9b:06:6d:d4:f9:91:b6:eb:1c:34:38:58:78:2d:04:b5:45:
8c:90:50:5d:e2:e4:09:74:0c:7f:2e:05:7e:38:3a:ae:4a:ee:
23:33:2f:38:51:7e:06:e5:03:81:11:16:d8:35:da:44:db:07:
d3:90:a6:1c:7c:a3:0e:91:03:33:9c:ee:d2:b4:91:01:1a:27:
0f:11:8f:88:65:fe:e4:e2:a7:4d:a7:4d:01:02:25:f1:20:f9:
8f:21:aa:62:bd:86:4d:2e:4c:d5:c4:8e:0f:04:00:fc:74:7d:
7a:a3:af:4e:7e:ef:8d:e4:0d:b7:33:1a:48:1e:00:de:ec:7f:
58:71:93:1e:35:5a:e8:b7:f3:e2:e4:92:56:a2:a3:22:5d:cc:
b8:00:60:2b:25:19:3c:e3:b1:e5:8b:f7:c2:53:5d:5b:76:73:
92:40:c9:74:a3:27:83:89:f5:11:9d:9a:6d:06:e5:ce:ac:86:
d4:08:02:42:64:b8:43:ab:0a:88:f2:9f:d0:3c:5c:3f:d3:56:
7e:36:06:e1:be:8c:6a:75:f0:e7:4d:bd:21:54:40:f8:aa:da:
e2:90:51:e7:e5:4f:aa:fc:00:b5:b8:3a:cf:35:0d:ff:20:bc:
7f:e8:42:e4
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICFi0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw
NTIxNTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkxQTZBN0Y5MTc0N0U2
MTNFRjM3QTA2MTc3QzdGQkI5RDlGRDQzREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCv5DIoNN7+kDu63NaX7LeStKJPGGIgCqtCj3yk4vXbNpiibmkl
S7/NjO7SnI8WN9FPs59cj7ekC+HA/XqBsnRSVBluDMARf/7QaWwXcivDjOPwWZkK
v13rttgdql5YE+Fh+2C988ltAaUlYT0GPBJ8G1Kr3QjqgazlrY56fV1lYnc5caWd
9mNcAmlpgPASyzZYabOePHZvbJk3qCfC6bpN2SAI1+GsqkEqMS1y3Z1DM0YahJZt
Qu/RJm7BiXv29/duz2RmbqyN91ZctJj+WsE5VobRVAOOhkDTwMbJN6GIaqH+x+00
zvxBYNG+WgpjjBtXqA33kHAbiJXEX7gC7KUpAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUkaan+RdH5hPvN6Bhd8f7udn9Q9swHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMva2Fhbi1SZEg1aFB2TjZCaGQ4Zjd1
ZG45UTlzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGppbjAN
BgkqhkiG9w0BAQsFAAOCAQEAvdFTij5ER5OpK1KMVkUIgXgBDpsGbdT5kbbrHDQ4
WHgtBLVFjJBQXeLkCXQMfy4Ffjg6rkruIzMvOFF+BuUDgREW2DXaRNsH05CmHHyj
DpEDM5zu0rSRARonDxGPiGX+5OKnTadNAQIl8SD5jyGqYr2GTS5M1cSODwQA/HR9
eqOvTn7vjeQNtzMaSB4A3ux/WHGTHjVa6Lfz4uSSVqKjIl3MuABgKyUZPOOx5Yv3
wlNdW3ZzkkDJdKMng4n1EZ2abQblzqyG1AgCQmS4Q6sKiPKf0DxcP9NWfjYG4b6M
anXw5029IVRA+Kra4pBR5+VPqvwAtbg6zzUN/yC8f+hC5A==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:21:21 2025 by rpki-client