Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/t4UdwAR7wFcfK1qW1nX4METwckE.roa
File: t4UdwAR7wFcfK1qW1nX4METwckE.roa (raw, json)
Hash identifier: M7N3vJLsTOJRkuADq3Enhe/++GafotarlbVOS0JA/7c=
Subject key identifier: B7:85:1D:C0:04:7B:C0:57:1F:2B:5A:96:D6:75:F8:30:44:F0:72:41
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 185E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/t4UdwAR7wFcfK1qW1nX4METwckE.roa
Signing time: Mon 10 Feb 2025 14:07:52 +0000
ROA not before: Mon 10 Feb 2025 14:07:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 106.104.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6238 (0x185e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:52 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B7851DC0047BC0571F2B5A96D675F83044F07241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:c0:63:52:5c:21:8a:bb:b4:08:2b:ef:0f:
e5:30:74:18:4b:80:e4:ef:b8:26:9e:04:22:4d:fa:
26:f2:fb:6f:39:94:4d:67:1f:9b:41:19:0f:ef:c7:
ec:3b:11:e4:71:be:97:e9:9f:d7:b5:72:49:f9:bd:
9d:8b:0a:94:6a:e0:de:05:79:39:24:92:99:79:bf:
73:4e:6e:d3:5a:e7:72:d4:f6:cb:6b:0c:0f:46:f4:
f3:99:63:66:3d:14:f2:71:4d:1a:02:c1:44:99:11:
aa:f2:32:fd:a8:48:af:7e:c7:5e:3b:e2:5d:5a:4e:
36:94:f8:d5:b0:5c:91:2a:01:71:b3:8e:6e:4f:c7:
40:bb:0a:52:e2:a8:28:88:42:03:27:bc:f4:61:f0:
75:36:52:47:78:9f:e9:50:22:7f:1f:11:96:e3:57:
ff:73:bc:73:91:2b:f5:e6:59:4d:85:c9:69:1b:23:
5a:5d:c2:6e:c5:e4:ca:55:ea:f6:df:0a:86:ab:4e:
f4:1f:cc:1a:88:5f:6b:42:1c:60:0e:4c:40:f7:e1:
65:e1:68:ca:74:02:b5:ee:c3:67:ec:f7:9c:67:b0:
01:0f:b0:c8:67:fb:94:7a:70:5c:b5:da:c2:59:34:
5e:9c:7f:74:ff:56:26:e2:06:fd:30:1f:b0:bc:39:
37:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:85:1D:C0:04:7B:C0:57:1F:2B:5A:96:D6:75:F8:30:44:F0:72:41
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/t4UdwAR7wFcfK1qW1nX4METwckE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.104.0.0/14
Signature Algorithm: sha256WithRSAEncryption
7a:bd:de:a1:74:5b:25:12:1d:3d:47:00:40:b2:e1:9b:84:c0:
9b:10:c4:27:04:1a:e9:c8:c4:4d:61:57:32:c1:79:87:08:14:
bf:45:2e:b8:e6:49:5c:2b:64:a6:f2:49:52:46:82:31:72:54:
8e:24:fd:7f:5a:be:af:e5:1e:97:b9:97:11:15:9f:8a:e5:2a:
fc:c1:6f:51:5c:85:15:80:94:49:26:03:89:67:3b:96:52:0d:
bb:e0:4f:b8:30:61:0c:40:32:59:cd:0b:77:ac:31:aa:55:70:
6b:9f:1f:01:1d:e2:49:f7:d3:5d:8f:1d:bf:f3:bb:63:0a:79:
d4:e0:b6:e4:aa:08:d3:e1:34:a8:74:6d:71:61:8e:ee:65:43:
14:74:f0:27:09:ad:26:01:36:d0:b3:94:45:29:ba:57:fc:89:
1e:f2:de:dd:9c:a7:24:14:00:b7:06:a5:b4:9a:86:fc:d9:8d:
94:f8:94:d8:df:68:e0:9b:ac:7b:4b:22:01:ba:b0:af:be:10:
0e:57:0c:84:b3:53:e2:0d:89:cc:d9:d4:cd:b7:c2:03:66:53:
9e:5d:f5:19:05:b0:aa:e7:fb:6c:cd:28:fe:50:ad:60:30:86:
23:c0:15:34:90:98:fe:b2:ab:c4:03:2f:a9:1f:6e:65:5d:9c:
24:d1:d8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:24 2025 by rpki-client