Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/oSiVxBNp_5ZxxRhMKx_8ys2NuPo.roa
File: oSiVxBNp_5ZxxRhMKx_8ys2NuPo.roa (raw, json)
Hash identifier: 3gG1+wjeLYbJOW6Jcpr9AK7owyQlkPScUdsLFffYf3U=
Subject key identifier: A1:28:95:C4:13:69:FF:96:71:C5:18:4C:2B:1F:FC:CA:CD:8D:B8:FA
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E36
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oSiVxBNp_5ZxxRhMKx_8ys2NuPo.roa
Signing time: Wed 29 Sep 2021 02:43:19 +0000
ROA not before: Wed 29 Sep 2021 02:43:19 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 106.105.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3638 (0xe36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:19 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A12895C41369FF9671C5184C2B1FFCCACD8DB8FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:43:45:66:32:0d:e9:5e:39:28:4a:b5:c3:
96:e3:56:29:64:06:f3:74:92:f0:cc:32:14:01:5b:
30:37:a5:89:26:08:36:03:d0:ce:43:52:87:dd:2a:
db:51:5e:47:2a:c0:34:e7:55:93:c6:28:d1:87:e4:
fd:cf:31:34:02:30:92:a4:29:09:48:68:88:d7:e1:
06:5b:e8:b3:ff:68:46:71:5c:a1:9d:ad:1f:33:ab:
06:62:b2:24:43:3b:91:cd:71:f3:fa:76:fa:1d:a9:
93:be:e1:2d:21:80:be:68:11:42:dd:6f:5d:77:d6:
91:62:c4:fb:34:56:3d:68:00:7e:7a:0b:27:38:90:
82:71:c8:84:13:5a:9f:89:d2:99:17:9d:68:fd:96:
74:52:d0:38:66:47:11:59:50:0d:b5:24:e8:95:b6:
c8:b9:93:f1:2b:16:f1:71:e6:86:5a:1c:c3:e8:48:
f4:f2:02:bf:d2:49:0d:99:60:93:e5:68:62:e4:3f:
2e:b0:f8:b2:e5:81:ac:44:56:45:00:f8:27:e3:a4:
e8:74:98:8d:9c:1d:be:75:9b:5a:56:b7:97:db:0e:
e0:1b:be:89:73:6e:b6:88:3a:9a:b4:63:b4:ce:e2:
13:1a:d0:22:61:39:03:94:2d:67:2a:66:57:6e:c9:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:28:95:C4:13:69:FF:96:71:C5:18:4C:2B:1F:FC:CA:CD:8D:B8:FA
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oSiVxBNp_5ZxxRhMKx_8ys2NuPo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.104.0/22
Signature Algorithm: sha256WithRSAEncryption
42:d7:14:14:66:36:4f:73:c8:5c:8d:ae:57:8b:12:4e:2f:9f:
c8:a6:16:47:75:49:19:89:12:e0:33:b1:62:d6:1c:ac:15:2e:
a1:68:65:57:bb:fb:64:93:be:6c:74:f2:96:68:1d:9a:62:01:
fb:34:7e:01:2d:c0:ad:14:23:2e:3b:f8:da:44:55:29:82:b6:
73:cc:3c:05:d2:56:e7:61:cb:3d:9a:4c:60:79:7b:72:e8:5e:
29:89:0d:37:26:d1:1c:04:88:e5:2b:07:b8:f4:05:91:cd:03:
0b:5a:b4:b5:37:97:26:8d:80:6b:be:40:2b:d3:66:df:48:55:
ac:2f:a7:6d:c6:e2:02:ea:f4:a1:9d:0d:c9:2c:3b:3f:e0:e2:
a0:51:db:16:43:a0:e9:98:9f:9a:b1:98:41:99:f5:23:34:bb:
50:4a:b5:93:6b:ad:f7:79:09:99:7a:3b:51:ec:0e:84:86:d7:
f5:e5:fc:ba:77:c6:15:3d:51:a3:c0:dc:af:3e:6b:39:9a:d0:
81:08:f7:a4:96:a9:66:92:7a:0d:10:95:6c:6b:95:f5:ec:a7:
f7:2c:8a:ef:9c:60:5c:46:9e:e7:6c:de:f1:a0:38:27:1c:76:
e7:13:83:74:ac:0f:4a:cb:c1:e1:82:d0:5a:a3:a9:b9:15:99:
6d:ef:78:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:18:37 2025 by rpki-client