Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/x1Y3kCc1Yz_Ntgqyf7OTQbW8jSI.roa
File: x1Y3kCc1Yz_Ntgqyf7OTQbW8jSI.roa (raw, json)
Hash identifier: e1MoB22twT/pcy9Ugtd/mzQBcUySReZhPZYINJbZA/4=
Subject key identifier: C7:56:37:90:27:35:63:3F:CD:B6:0A:B2:7F:B3:93:41:B5:BC:8D:22
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1305
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/x1Y3kCc1Yz_Ntgqyf7OTQbW8jSI.roa
Signing time: Fri 01 Sep 2023 09:24:23 +0000
ROA not before: Fri 01 Sep 2023 09:24:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 106.105.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4869 (0x1305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C75637902735633FCDB60AB27FB39341B5BC8D22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:27:11:72:ae:3a:30:a8:da:e1:2b:d3:e3:
d5:c5:f9:4b:97:5a:00:b1:fa:4f:1d:44:13:5e:7a:
b7:f0:79:94:6c:6f:56:4b:25:38:cb:3b:95:3f:91:
77:ad:41:36:5c:a2:e4:2c:66:20:9a:81:14:2c:13:
45:21:0e:b1:79:50:a2:18:d4:79:00:7e:50:03:d7:
e1:bd:62:0f:a0:18:9d:da:02:49:2b:57:2e:8e:4d:
4c:49:90:ce:79:54:59:35:d4:7c:aa:ab:34:04:e7:
11:a1:52:d6:2c:ed:b1:14:23:3e:dd:23:50:dc:df:
e6:3c:35:9f:ce:b2:e5:6d:e8:90:ad:ce:f2:46:59:
30:bc:6e:0c:5d:e5:79:10:f8:00:42:ff:ef:a0:30:
0f:0a:16:58:51:f9:fe:96:14:2c:88:4a:24:e0:19:
90:b9:47:c4:a2:f5:bb:77:14:2a:9d:f2:9d:bf:60:
23:6d:c8:c6:43:2d:80:2c:6c:1d:0b:6c:2f:aa:2c:
39:7f:90:3b:8e:02:f5:83:f4:c5:37:b1:0a:87:a4:
37:ea:15:97:f4:6c:71:1b:6e:61:5f:7b:44:af:fa:
f3:a6:ab:f7:44:1d:f3:11:69:03:51:30:ae:0a:30:
d2:3c:3e:a0:65:99:5d:0c:f3:20:0b:59:95:30:57:
a6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:56:37:90:27:35:63:3F:CD:B6:0A:B2:7F:B3:93:41:B5:BC:8D:22
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/x1Y3kCc1Yz_Ntgqyf7OTQbW8jSI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.250.0/23
Signature Algorithm: sha256WithRSAEncryption
55:36:1b:1e:74:dc:02:0a:95:3d:dc:d8:05:e3:f6:47:e3:74:
12:b6:72:2f:43:51:1f:68:71:44:f2:a7:2a:94:c7:d0:41:3b:
34:dc:d6:18:71:01:b3:ed:dc:ae:fe:08:f7:bb:7f:b3:f0:15:
92:e7:60:9b:cf:ca:f9:3a:6b:79:db:9e:94:b5:e8:91:91:87:
3e:f7:8a:bd:c2:5c:08:53:5e:e1:a5:c4:bf:23:67:e1:09:8a:
6b:82:fd:49:64:d6:8b:b5:c6:72:2b:a5:d4:c2:cd:e7:ea:50:
57:da:6a:3f:e5:c5:a9:a5:bd:07:d9:6c:04:81:a8:2e:91:3b:
63:a6:e4:c0:09:1d:bb:c2:28:c3:6c:36:4f:a8:59:93:86:05:
5b:70:30:63:4f:8c:32:64:9c:87:6d:43:dd:a0:a5:4e:4e:32:
d4:48:0f:8c:21:4e:6b:59:5c:f4:c5:36:81:21:6f:22:aa:f2:
f8:fa:c6:57:6e:87:e7:76:05:97:06:78:db:a0:a6:2d:c7:a9:
7d:f7:e1:23:65:71:38:ff:96:bc:46:88:3b:99:a7:14:b8:90:
1b:7c:4d:14:60:8a:3a:75:12:74:e9:81:1a:ab:aa:88:99:63:
27:98:d5:18:45:1c:5b:2c:d7:8e:8b:fc:b4:45:03:9b:18:9c:
bc:11:95:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:13:53 2025 by rpki-client