Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/myKjY9G6NdnU-TvqlRzCfk7Y08E.roa
File: myKjY9G6NdnU-TvqlRzCfk7Y08E.roa (raw, json)
Hash identifier: 1yGY/K4r3Js/u8mYLhrsKZzT47ln9+Tdlo15dMKEO8U=
Subject key identifier: 9B:22:A3:63:D1:BA:35:D9:D4:F9:3B:EA:95:1C:C2:7E:4E:D8:D3:C1
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10CC
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/myKjY9G6NdnU-TvqlRzCfk7Y08E.roa
Signing time: Wed 01 Feb 2023 10:29:03 +0000
ROA not before: Wed 01 Feb 2023 10:29:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 106.105.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4300 (0x10cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:03 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9B22A363D1BA35D9D4F93BEA951CC27E4ED8D3C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:76:58:f1:59:cf:96:4a:76:df:a9:5b:0a:
3f:e7:7c:54:69:c4:d8:99:d4:8e:91:45:81:f0:ab:
69:2d:8f:23:f5:3f:ac:ed:6d:a3:00:65:4a:cc:c0:
5b:b3:53:b4:4b:f5:53:96:0b:a0:40:7b:56:24:eb:
cf:34:43:29:1d:75:65:09:a0:7f:eb:c7:84:a6:4b:
53:94:22:2e:b3:00:14:77:45:20:c4:cc:9e:60:bb:
7d:bf:d9:52:0a:b6:d1:5d:13:3d:f7:99:99:66:32:
27:3c:54:ae:6b:59:26:8c:2d:cc:42:9c:6f:91:68:
88:a5:e7:46:00:a9:12:70:ba:75:b1:8e:47:5a:b6:
10:de:ad:59:5f:cd:72:bc:f0:14:b7:f4:d2:b1:0f:
85:8a:e3:a4:cf:d8:71:a2:9f:f9:b5:58:f3:5b:52:
69:3a:70:ac:fe:3d:11:30:3a:db:de:67:98:77:9c:
57:cf:26:87:bf:04:f1:97:a9:61:8f:53:c4:73:a9:
32:ba:b9:7d:35:06:6b:ce:df:e9:f9:7c:aa:c2:52:
0c:97:69:02:fd:d9:93:4d:62:4b:43:c9:f7:b6:43:
56:9c:81:d9:6a:26:f3:da:e0:0d:94:91:0e:7c:1c:
0f:13:37:b7:79:17:92:ca:3e:e8:73:a6:eb:9e:5b:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:22:A3:63:D1:BA:35:D9:D4:F9:3B:EA:95:1C:C2:7E:4E:D8:D3:C1
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/myKjY9G6NdnU-TvqlRzCfk7Y08E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.164.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:b8:27:6f:f0:17:cf:cb:3b:b1:58:e1:34:6e:d3:53:51:e3:
5f:0c:02:b1:33:74:48:4c:50:b5:7a:67:cb:29:88:0a:cd:6b:
ac:d2:66:5b:c2:83:8a:39:de:ae:a6:67:b1:80:1f:1f:c3:ec:
83:72:ff:01:c8:7b:71:4d:b3:73:63:84:d6:c9:eb:1e:c3:bd:
7b:3d:4d:9b:66:cb:5a:b8:09:26:29:4d:33:92:1a:ef:79:56:
e4:36:1e:9c:54:fa:23:39:82:1c:2d:dd:4f:43:37:41:ad:77:
78:4f:de:17:c9:c7:f4:31:32:9e:40:3e:c9:b4:1f:e9:f0:ed:
a4:7a:59:04:d2:68:80:43:98:81:23:e5:b7:a9:02:10:ab:6e:
ac:39:19:c7:88:86:90:f2:76:e5:91:0e:c2:1a:21:b4:01:db:
2b:c6:44:1d:86:44:7c:7b:74:79:6b:fc:b2:19:fa:40:aa:84:
8e:c6:c7:12:dc:ef:9f:c6:9b:35:9d:ef:ff:c9:23:c9:05:f2:
8f:1c:d2:60:df:2e:2d:ea:47:41:6d:8f:4f:d4:d0:69:21:4b:
c7:ce:c6:cb:06:42:08:6e:70:af:61:cc:c2:26:a2:01:8d:93:
59:b5:6c:83:fd:1e:47:fb:7f:64:c4:06:37:d4:d9:d7:fe:37:
bc:fe:59:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:23:06 2025 by rpki-client