Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCCC/2gUnCbXgVlSLSvxP1aHuIjCmuNs.roa
File: 2gUnCbXgVlSLSvxP1aHuIjCmuNs.roa (raw, json)
Hash identifier: X073YL1wdmnfyT9qjdjNpFjRDAfJEsPtPq6CK5w3/Mk=
Subject key identifier: DA:05:27:09:B5:E0:56:54:8B:4A:FC:4F:D5:A1:EE:22:30:A6:B8:DB
Certificate issuer: /CN=07E36A3D219A8AFC84F88B30553E638CE6C2CECE
Certificate serial: E2
Authority key identifier: 07:E3:6A:3D:21:9A:8A:FC:84:F8:8B:30:55:3E:63:8C:E6:C2:CE:CE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/B-NqPSGaivyE-IswVT5jjObCzs4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/2gUnCbXgVlSLSvxP1aHuIjCmuNs.roa
Signing time: Wed 22 Jan 2025 00:29:32 +0000
ROA not before: Wed 22 Jan 2025 00:29:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 198949
IP address blocks: 157.20.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07E36A3D219A8AFC84F88B30553E638CE6C2CECE
Validity
Not Before: Jan 22 00:29:32 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DA052709B5E056548B4AFC4FD5A1EE2230A6B8DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:ea:79:af:ac:82:b7:85:75:29:37:e0:8a:
f8:47:4e:81:b1:b8:68:6f:75:77:d8:48:6c:8c:5c:
3e:12:57:e1:6e:10:82:fa:17:62:b6:d2:38:68:4e:
ac:92:dc:2a:93:c7:fe:61:75:98:b5:e7:46:61:c8:
bd:4a:e7:cd:62:58:c0:e2:97:17:e0:0c:69:bf:24:
d9:5a:4a:c5:79:26:08:d5:88:44:df:4f:40:45:d3:
3d:c6:72:43:ec:33:ea:08:66:24:c4:32:43:4b:e7:
8b:53:ea:9d:0a:e2:4f:a2:bd:fa:32:cc:44:35:2f:
b8:67:a6:1c:ea:c9:64:89:3f:b6:84:63:cd:9b:eb:
f8:7b:14:43:d8:4c:09:2b:a4:1d:f2:de:3a:7f:03:
58:d5:d5:68:23:32:40:e1:e2:7d:8f:b1:f7:60:7b:
86:da:05:ce:62:35:dd:fd:59:65:4d:d2:1b:c7:4d:
ab:fd:26:a2:5f:03:eb:32:85:ae:0c:f1:3d:5c:f9:
bf:fe:a9:e0:3b:ae:7b:a3:e0:a8:97:14:fe:ce:1b:
8b:91:b6:b6:b9:81:cb:03:d3:0c:84:33:ce:2a:a7:
66:4d:ee:a3:4b:a4:c8:a9:04:ac:fb:6c:bc:f7:4f:
b4:ff:68:6b:c8:5d:da:5c:04:f4:8b:c6:e7:28:a8:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:05:27:09:B5:E0:56:54:8B:4A:FC:4F:D5:A1:EE:22:30:A6:B8:DB
X509v3 Authority Key Identifier:
keyid:07:E3:6A:3D:21:9A:8A:FC:84:F8:8B:30:55:3E:63:8C:E6:C2:CE:CE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/B-NqPSGaivyE-IswVT5jjObCzs4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/B-NqPSGaivyE-IswVT5jjObCzs4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/2gUnCbXgVlSLSvxP1aHuIjCmuNs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.106.0/23
Signature Algorithm: sha256WithRSAEncryption
14:55:83:8a:3f:48:52:6b:0c:5b:05:8d:cc:fb:9d:23:c0:ce:
7b:2f:39:d1:25:23:0d:bf:92:dc:d1:99:62:cd:08:26:c6:b9:
ca:d3:bf:6e:3d:23:e6:bb:43:ec:4f:63:69:a0:1e:b9:84:0c:
0c:91:4b:5a:fe:15:50:06:22:13:b1:89:8c:18:03:7c:34:c8:
46:3b:25:a3:bd:47:0c:ac:ff:af:46:0e:8d:c2:0a:81:bc:8d:
4b:b2:f9:35:37:94:3f:56:a6:62:f9:8b:69:7c:09:7b:67:3a:
c5:8d:30:f4:23:5d:b2:b7:d3:2a:e9:23:93:75:54:55:01:43:
71:26:14:d1:a3:0f:98:cd:eb:de:b8:dd:0a:f3:64:bf:de:4d:
8f:14:b5:69:25:31:a5:0d:2d:9a:86:c6:fb:b3:52:18:4f:7d:
65:a0:97:41:50:2b:eb:cf:4b:2e:ea:fe:1a:19:8a:68:fc:7e:
f6:2a:66:ea:02:e0:c4:6e:2b:22:6d:7a:06:e9:c1:0a:24:b9:
ab:c4:6b:01:ac:85:0f:fa:d8:f7:34:a5:49:4e:9c:9e:c1:13:
40:18:00:03:20:34:e2:7e:89:08:fb:d6:99:ae:c5:b7:3b:80:
ad:2d:68:2e:f5:0e:d0:66:0f:3d:c7:d4:ef:a2:27:c9:52:14:
da:b1:fd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:32:47 2025 by rpki-client