Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/o2YyzrJsQWq2HUiFeGg5exZzBXw.roa
File: o2YyzrJsQWq2HUiFeGg5exZzBXw.roa (raw, json)
Hash identifier: QHf7P2J2J7IIhpApkwPxHII2oZJYj8RM/vacYnZGqrc=
Subject key identifier: A3:66:32:CE:B2:6C:41:6A:B6:1D:48:85:78:68:39:7B:16:73:05:7C
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E6E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/o2YyzrJsQWq2HUiFeGg5exZzBXw.roa
Signing time: Wed 29 Sep 2021 02:43:35 +0000
ROA not before: Wed 29 Sep 2021 02:43:35 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131584
IP address blocks: 106.105.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3694 (0xe6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:35 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A36632CEB26C416AB61D48857868397B1673057C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:f5:d4:88:b3:eb:5c:ed:cd:42:1c:fa:79:
4d:b7:3d:aa:13:b7:b0:14:9e:6e:0a:7d:15:e3:9d:
c1:ce:5f:35:d7:22:8f:da:41:93:8a:f6:80:86:f9:
52:39:af:c4:23:c7:87:f4:b5:b7:b2:e7:f1:a8:10:
cf:22:79:93:15:4b:04:ee:4d:ac:c2:e1:2c:ba:d9:
0e:c2:c6:18:6a:12:cb:9c:13:da:0c:05:fe:e8:b4:
09:0f:da:2d:38:a4:dc:b4:f9:da:08:d0:7e:5f:89:
37:8f:25:1d:78:87:c7:7d:76:24:37:6f:de:3d:96:
e1:ff:b0:4c:69:1d:e8:9a:70:c6:80:d5:c7:cf:94:
28:50:f1:e3:82:db:ed:57:cf:78:5b:8b:9b:e9:32:
d3:3e:52:99:4c:30:9a:ff:55:9a:90:f6:80:59:8d:
ae:66:0e:23:37:c0:72:43:0b:64:e8:f6:5b:66:57:
15:f2:15:c9:f9:58:9d:2a:46:80:ce:1d:20:c3:51:
c6:95:2f:ca:20:26:35:53:1d:f5:79:ea:98:ec:ee:
2b:09:fa:58:4f:ff:82:78:a8:ce:d5:bd:38:4c:c5:
bf:bf:ce:b5:1f:a8:cd:61:5f:06:ab:39:2b:9f:1a:
f2:30:d3:0b:71:15:e2:7a:8d:ad:ac:c3:12:66:ce:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:66:32:CE:B2:6C:41:6A:B6:1D:48:85:78:68:39:7B:16:73:05:7C
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/o2YyzrJsQWq2HUiFeGg5exZzBXw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.182.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:08:e9:66:dd:72:a7:e9:f7:60:cd:48:ab:ca:5e:b9:e8:41:
db:bf:a6:6e:dd:79:aa:46:97:6c:58:43:07:42:08:d0:63:0c:
39:14:a3:ef:0a:69:b7:d6:46:fd:5b:17:bb:ca:dd:b5:1b:6e:
24:cd:42:e4:e1:7c:ee:67:e6:54:b6:91:82:9e:f3:7e:e4:f2:
78:30:a4:a9:5f:f2:3f:6c:bb:cf:e6:b8:07:39:9f:98:c4:57:
d6:36:5f:96:47:64:08:f5:e6:52:f0:16:bc:7d:ca:d9:76:02:
bb:0e:e0:a4:04:0a:b4:5c:4c:f9:46:f3:f7:5f:3a:16:05:03:
60:13:ef:59:37:15:e5:d2:6a:a4:20:68:1b:90:fd:65:7b:08:
c5:3c:1b:32:bb:7d:37:e0:eb:d8:34:01:44:53:dc:c6:b2:1e:
25:41:00:67:4a:d4:cf:ef:de:34:af:52:bb:43:54:49:21:ef:
fd:84:3f:f5:4b:f8:3e:e3:63:74:6d:b0:42:36:b4:8d:22:37:
64:82:7c:b8:90:8a:30:95:14:3c:5d:be:9e:78:d6:b9:3e:ed:
1a:0e:04:4e:9c:2a:b1:76:fa:79:25:43:f7:18:fc:ad:db:3f:
6d:6a:17:b2:71:3a:9d:e9:26:4d:f6:74:13:7c:95:22:c2:00:
8c:21:a4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:21:26 2025 by rpki-client