Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/pRdrWhSptWN36MNByah6AgvizT0.roa
File: pRdrWhSptWN36MNByah6AgvizT0.roa (raw, json)
Hash identifier: 0jl+sAk4OJ+2aUGbWxfKcmgOHk7mt3ttATbjLXE8/Zk=
Subject key identifier: A5:17:6B:5A:14:A9:B5:63:77:E8:C3:41:C9:A8:7A:02:0B:E2:CD:3D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E66
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pRdrWhSptWN36MNByah6AgvizT0.roa
Signing time: Wed 29 Sep 2021 02:43:32 +0000
ROA not before: Wed 29 Sep 2021 02:43:32 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 106.105.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3686 (0xe66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:32 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A5176B5A14A9B56377E8C341C9A87A020BE2CD3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:2b:27:7b:be:5c:21:f3:ac:70:ca:40:0b:
20:9d:4b:67:67:13:65:8b:0c:2c:62:ff:80:6d:72:
71:dd:1c:c2:25:0a:70:91:c2:c9:43:12:f5:d0:62:
52:51:8f:5e:fa:53:6c:0c:37:64:7d:04:25:8d:ed:
18:47:73:e3:12:c8:b2:72:0a:3d:22:2f:11:4b:85:
91:0c:08:45:f2:21:c6:e1:22:9c:4d:15:5c:e0:7b:
59:2c:72:3e:be:0b:ac:de:4e:f1:b2:c4:50:01:32:
b2:01:82:44:7f:80:cd:7c:97:1f:b7:20:48:d4:37:
63:22:6f:0c:92:0f:64:11:c5:5f:a7:e2:ae:53:63:
09:cd:8b:39:ce:db:5a:fc:58:45:75:ec:f9:02:45:
b2:c3:06:e6:8b:fd:f2:21:c2:4c:e2:be:22:b1:dd:
b7:57:b3:ac:65:1e:54:25:71:3a:87:13:37:7a:4a:
a2:0f:f0:57:40:22:ef:3b:16:e1:ff:cd:69:7d:6e:
1f:34:0d:73:60:d7:7b:54:eb:09:3f:9f:f3:2b:6c:
a4:9d:59:2a:9c:3d:fb:cb:46:4f:9b:33:68:ef:3e:
94:84:83:7d:81:fd:cd:02:0a:de:f4:62:7b:e4:ed:
e7:a5:4e:78:2a:3f:86:ab:38:5c:a4:17:c9:74:b2:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:17:6B:5A:14:A9:B5:63:77:E8:C3:41:C9:A8:7A:02:0B:E2:CD:3D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pRdrWhSptWN36MNByah6AgvizT0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.128.0/19
Signature Algorithm: sha256WithRSAEncryption
58:9d:72:ce:af:a0:5f:23:51:ce:00:89:2c:de:56:7c:9a:95:
53:41:42:48:b3:90:16:7b:c2:9a:c9:18:7f:6b:03:62:92:03:
24:d4:69:ac:cb:e5:20:91:e8:59:d1:ce:5b:6c:d4:fa:0b:f5:
2d:1d:f4:6d:b4:05:a5:d1:bf:82:e2:cf:e4:1c:1e:d5:3a:67:
f4:b4:03:b6:7a:eb:81:0e:97:c0:a2:65:01:f1:a3:72:bc:3a:
04:14:2a:fb:d3:5a:74:23:75:49:22:3e:fc:5c:f4:75:2b:70:
3c:c1:ed:5d:9a:64:29:a3:31:81:42:2c:10:25:19:c3:b3:58:
b8:84:30:da:cf:90:52:17:1e:42:85:ee:a6:97:5c:62:20:0d:
57:63:42:46:3a:5d:b6:cb:e8:26:df:42:34:cf:94:13:00:5f:
75:78:2d:1b:2c:e0:e8:f0:b4:8f:64:97:01:de:ad:d5:99:6a:
75:25:2f:cd:61:bf:39:10:14:c9:1e:57:1a:67:5c:4e:d5:3b:
a7:48:d0:47:d3:32:fb:62:f4:28:91:bb:c4:25:78:41:48:8c:
ba:46:eb:75:d7:10:94:8d:4b:6c:58:32:69:d9:6d:9e:e9:9a:
59:6b:3a:c2:2a:6d:a5:ef:18:d2:4d:01:6c:47:a4:77:08:c3:
e4:08:32:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:21:21 2025 by rpki-client