Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/zYh6wHA_R6CIxsdQrDvy0zwahEs.roa
File: zYh6wHA_R6CIxsdQrDvy0zwahEs.roa (raw, json)
Hash identifier: TRo8ho6XYxKNu+GS6aWyc/vQpzBfR4qHKxPIGv+iYM4=
Subject key identifier: CD:88:7A:C0:70:3F:47:A0:88:C6:C7:50:AC:3B:F2:D3:3C:1A:84:4B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0904
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zYh6wHA_R6CIxsdQrDvy0zwahEs.roa
Signing time: Tue 29 Sep 2020 09:52:42 +0000
ROA not before: Tue 29 Sep 2020 09:52:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 106.105.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2308 (0x904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CD887AC0703F47A088C6C750AC3BF2D33C1A844B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:8a:31:01:dd:f6:d9:d6:85:6e:31:4e:85:
6a:37:83:90:c1:f5:f3:72:dc:b6:fa:df:c2:a1:f3:
9c:20:12:39:d8:9c:e0:81:e5:73:a3:76:d1:7d:36:
29:20:16:3c:45:74:1f:f5:79:d4:1a:da:4e:47:cb:
38:9c:f7:36:12:e3:dc:37:12:62:c4:02:85:66:24:
ea:ec:49:e7:b9:73:6a:71:51:c4:b9:8a:47:54:65:
ec:7b:1c:d4:58:81:40:04:c2:bd:62:d9:87:ae:be:
d7:ce:a7:f3:5d:e2:e7:90:dd:fb:de:c7:20:26:f3:
8d:79:4e:8e:ac:06:cf:30:c6:15:cb:58:eb:93:20:
e2:f5:13:fb:6a:15:a3:0a:0a:e2:ed:f5:1e:1e:25:
4b:22:c8:52:01:0d:be:9f:3a:89:91:61:44:a9:c4:
57:b9:18:7c:30:ae:19:df:16:67:dc:2a:94:07:4b:
fc:93:b8:a2:a1:36:44:99:89:3f:f8:81:3c:70:cc:
c2:25:a3:bf:07:8a:d6:18:87:3f:a8:39:bf:38:8e:
e0:1a:79:34:e5:8c:4f:56:6c:73:34:99:d3:8c:6e:
b5:dc:db:b5:1e:01:87:97:bf:e9:a7:59:3d:44:d3:
57:86:91:22:39:44:1e:e1:92:a4:54:a0:9d:75:c7:
87:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:88:7A:C0:70:3F:47:A0:88:C6:C7:50:AC:3B:F2:D3:3C:1A:84:4B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zYh6wHA_R6CIxsdQrDvy0zwahEs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.64.0/19
Signature Algorithm: sha256WithRSAEncryption
67:60:99:73:3a:fb:72:b3:ae:b3:10:9d:0a:49:10:22:b9:5e:
65:a3:2f:50:9f:49:3c:3f:15:70:25:13:10:83:5a:33:6a:f8:
80:b2:d0:79:b6:5f:c4:95:28:34:dd:61:8a:82:db:62:af:f2:
4f:fe:e4:7d:65:8c:94:90:1d:2d:20:1d:37:9a:3a:c9:8a:da:
3f:f2:43:60:00:5f:17:09:1c:63:bb:a4:f5:cf:9b:3e:40:7c:
c7:d8:07:7b:78:f0:97:a9:3e:34:56:36:69:3b:d0:1b:d8:f2:
9b:27:a1:62:d9:ed:9b:5b:da:0a:ba:f4:a4:57:1e:ed:5b:82:
7e:9a:87:35:96:1c:08:6c:23:3d:c4:9a:6b:8a:44:fd:35:13:
ff:90:81:35:49:aa:7b:84:cb:78:ad:ce:74:bd:9c:98:12:cd:
8e:5e:69:1b:7f:61:25:59:a8:df:d5:74:5a:65:a2:58:c3:d5:
b7:64:e3:a6:a4:86:35:bc:4e:dc:0d:3e:9a:77:23:b3:83:6f:
62:89:16:b0:7a:c0:52:b1:04:32:fa:8b:a7:9e:36:fe:8c:30:
55:e1:17:51:c4:95:4b:70:3a:d7:f1:bf:d4:d7:4b:61:36:8f:
2b:d8:1c:15:da:2e:c9:21:49:d2:ed:a3:d1:45:38:04:eb:38:
27:d5:09:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:04 2025 by rpki-client