Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/tUuQn7_sXA1P7pXly20c2Dds7-g.roa
File: tUuQn7_sXA1P7pXly20c2Dds7-g.roa (raw, json)
Hash identifier: iXR7/ZnYXnXLZ0uBMQpxD8VI51m9XqKlTmMMZo4c8/w=
Subject key identifier: B5:4B:90:9F:BF:EC:5C:0D:4F:EE:95:E5:CB:6D:1C:D8:37:6C:EF:E8
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 184E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tUuQn7_sXA1P7pXly20c2Dds7-g.roa
Signing time: Mon 10 Feb 2025 14:07:48 +0000
ROA not before: Mon 10 Feb 2025 14:07:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131602
IP address blocks: 106.104.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6222 (0x184e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B54B909FBFEC5C0D4FEE95E5CB6D1CD8376CEFE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:ef:e5:30:84:2e:d7:7f:67:4b:f3:46:33:
7e:1e:f0:4a:16:3e:77:79:50:30:33:9b:2c:df:75:
e2:16:62:47:4d:e5:6f:7d:9e:0e:b8:e5:74:10:be:
5f:95:46:47:a2:da:aa:3f:d2:65:1e:f5:2b:1f:55:
3d:e0:74:4f:74:34:5b:50:0c:79:11:dd:44:7e:b3:
df:96:d5:96:36:ce:56:c1:49:c9:8f:04:30:22:47:
bc:ad:6b:d5:4c:e8:5a:5a:4e:a7:50:99:d9:b7:ac:
85:5c:41:b4:b0:b2:6c:cc:5c:a0:0f:b0:3c:03:e4:
29:d5:cf:0d:c2:24:6b:1d:5d:58:52:14:39:2d:2d:
c8:83:cc:b0:04:ff:c1:e6:0e:f2:4d:f4:e3:ba:5f:
d0:66:26:7a:cb:89:06:c2:46:dd:11:5a:7c:8c:cb:
f5:31:33:64:cf:ce:24:47:ed:bb:e5:ba:26:dd:24:
7d:56:1d:51:e8:9c:17:37:b2:fb:f9:cf:17:4d:b6:
bb:5e:69:63:7f:53:5e:87:39:50:eb:60:28:7f:49:
fa:4a:8e:a4:33:61:24:0a:1d:d4:9a:bd:15:1a:9c:
77:fa:3f:da:0d:2f:45:7a:0f:8d:ee:2a:3b:d8:28:
97:59:3b:c7:0a:0b:9a:23:89:82:30:44:68:33:40:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4B:90:9F:BF:EC:5C:0D:4F:EE:95:E5:CB:6D:1C:D8:37:6C:EF:E8
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tUuQn7_sXA1P7pXly20c2Dds7-g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.104.236.0/22
Signature Algorithm: sha256WithRSAEncryption
66:fd:a1:65:6d:19:09:78:af:99:06:8d:6f:14:80:91:99:de:
0d:45:d7:7a:61:48:1d:4b:c8:f0:57:91:60:d9:f7:a2:a3:db:
91:2b:95:69:81:35:78:a1:17:cd:6b:e2:92:1a:42:94:b9:80:
8e:20:5f:2d:2b:a2:9a:cd:15:73:9f:a4:7e:98:76:ab:6f:84:
e7:05:50:02:84:9f:4c:9b:a9:1d:b5:19:7f:c2:05:2a:e5:c7:
15:3d:96:93:e0:fe:c5:8c:9a:a5:a4:7a:b8:1c:57:05:7e:f0:
d0:d2:41:14:d5:8b:6f:fd:b8:d9:d1:fb:4e:2b:49:44:52:c1:
f5:69:2f:c1:2f:00:1f:6b:8e:2c:17:4d:ee:c7:d7:6c:d3:5a:
f9:92:89:72:5c:e7:ea:0e:66:2d:dd:15:63:04:90:87:22:cc:
08:a6:96:4b:cd:ae:5d:dd:cc:66:f8:e8:a2:fe:3d:f4:7d:05:
44:37:ba:1d:0a:b7:57:a9:64:c9:fe:af:7f:e2:3d:e6:36:ef:
41:50:e8:49:5f:a4:0d:9e:9c:0a:bb:46:43:dd:7d:26:33:86:
e8:38:34:fe:e6:fc:e9:fe:19:eb:bf:c9:43:bc:15:2c:e9:03:
fd:38:ff:65:cf:8d:9b:82:f5:7b:1d:57:42:94:eb:f0:ae:de:
91:a3:ec:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:05:34 2025 by rpki-client