Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/s2nYkHG8p6ORHXXGJlR0ndw2TyA.roa
File: s2nYkHG8p6ORHXXGJlR0ndw2TyA.roa (raw, json)
Hash identifier: 7BrjyBoT2KGCd1EXqvMfnQKd5L/o/EPj0vI02jCXHAI=
Subject key identifier: B3:69:D8:90:71:BC:A7:A3:91:1D:75:C6:26:54:74:9D:DC:36:4F:20
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 181E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/s2nYkHG8p6ORHXXGJlR0ndw2TyA.roa
Signing time: Mon 10 Feb 2025 14:07:35 +0000
ROA not before: Mon 10 Feb 2025 14:07:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18049
IP address blocks: 106.105.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6174 (0x181e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B369D89071BCA7A3911D75C62654749DDC364F20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:33:a8:2c:64:77:53:b6:0e:c1:ae:2b:1c:fa:
f1:a8:fa:b2:ad:35:38:4c:fc:66:73:c7:18:37:36:
ec:47:14:55:c8:e0:b1:32:d9:3e:36:f8:52:8a:01:
04:6e:67:94:e7:cb:31:ff:e9:e6:3f:33:2f:c6:3f:
c7:63:9a:b1:7e:b5:46:df:f6:66:21:05:19:6c:68:
55:bd:7e:a8:7a:5e:e9:58:e4:15:f3:8d:88:62:79:
9c:f7:64:3a:87:8d:63:aa:32:91:01:50:46:38:cd:
fb:5e:aa:54:ca:34:9f:2a:1d:60:07:28:5a:98:9a:
e0:91:8c:1a:cf:3d:06:d2:f1:90:4b:b2:32:e5:e3:
6c:7b:2b:0f:98:10:51:fe:1c:03:6a:70:1c:15:95:
75:77:23:92:3e:cc:cf:0c:af:50:8c:cc:bf:bf:5f:
3e:ee:2a:ac:71:cc:35:5e:7c:26:21:cd:f3:08:5b:
f9:4f:09:cb:f5:3c:b0:9e:03:d2:ab:2a:27:e2:b5:
3a:ad:96:83:fb:c5:1f:37:53:a0:36:c2:46:df:84:
48:2f:be:2b:62:17:0a:78:03:52:cb:e5:16:4c:f3:
29:f3:6a:0c:8a:ea:b5:42:b5:d7:de:5b:ae:f0:6e:
55:3f:2d:19:1c:44:6c:71:5f:30:d1:dc:17:b9:2f:
0d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:69:D8:90:71:BC:A7:A3:91:1D:75:C6:26:54:74:9D:DC:36:4F:20
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/s2nYkHG8p6ORHXXGJlR0ndw2TyA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.88.0/21
Signature Algorithm: sha256WithRSAEncryption
75:f2:23:30:a0:9b:06:e6:18:c4:36:fa:83:65:8d:46:95:fa:
07:07:1c:1d:f5:2f:0c:5e:a1:df:93:d5:14:59:bf:af:f5:18:
90:4e:75:0c:44:3d:d9:50:5a:f4:e7:57:cf:a2:fd:e8:bc:70:
77:76:f2:69:74:ab:72:37:6d:ec:5f:49:db:07:93:89:e8:0b:
d9:b4:e9:ca:8a:bd:5a:41:10:87:f6:da:f8:e4:a9:44:9a:14:
ae:8c:16:b5:cd:20:a9:a7:33:e0:d8:4a:6a:5c:cb:31:1c:73:
21:3c:ef:80:f2:d5:be:93:0f:53:b2:ea:86:82:fc:f4:9f:ec:
d9:76:14:dc:9a:92:df:18:ea:00:cf:18:18:61:07:c2:9f:b9:
9c:29:3c:94:2b:5f:c7:ff:f8:bf:92:a8:31:77:f6:ba:c7:b2:
94:ac:a5:6d:3f:dd:d3:44:cb:9d:ca:cf:c7:62:4a:cd:a0:e5:
28:3f:d8:94:62:15:7e:3c:d5:92:4f:d7:7f:1a:df:f3:95:d1:
07:ef:cb:3a:b3:e6:4f:b4:11:3a:f8:22:f0:f6:d8:76:55:60:
90:21:81:f2:8b:15:7f:4b:c0:ea:bc:8e:6e:81:7d:8b:28:9e:
fd:ec:52:42:66:e6:5a:9b:ec:db:ad:d4:74:cc:75:ad:dd:3a:
21:73:7c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:04:21 2025 by rpki-client