Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/35kgclVSYZLTQ_LuUP1Cg2chUFI.roa
File: 35kgclVSYZLTQ_LuUP1Cg2chUFI.roa (raw, json)
Hash identifier: MAg3nS+w7L9kLOvy/v1/pG01AwFm2got/U8G7jj/RPU=
Subject key identifier: DF:99:20:72:55:52:61:92:D3:43:F2:EE:50:FD:42:83:67:21:50:52
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0A10
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/35kgclVSYZLTQ_LuUP1Cg2chUFI.roa
Signing time: Sun 07 Feb 2021 06:38:46 +0000
ROA not before: Sun 07 Feb 2021 06:38:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 192.72.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2576 (0xa10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Feb 7 06:38:46 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DF99207255526192D343F2EE50FD428367215052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e8:21:b9:06:70:bf:b6:c4:9d:69:04:fe:94:
ae:5f:7b:54:d2:73:0c:9b:3c:fd:7f:7f:68:8f:e6:
af:56:57:33:b1:91:32:0c:ac:39:1d:0a:62:7f:ca:
8f:cf:f5:1c:23:2f:45:7d:34:5c:a6:5f:3a:86:ef:
15:1e:8e:01:91:f1:a4:d1:51:55:df:f6:17:41:af:
fe:45:18:ad:7b:c4:bf:8f:26:ef:c1:10:bb:fb:c2:
f7:b3:14:3d:e3:66:c1:53:1f:46:66:60:48:90:b5:
66:bd:81:8a:ec:b4:5e:79:2c:65:e9:14:d6:04:23:
74:ee:c2:14:8d:80:e9:be:a4:61:bb:7c:08:7d:b4:
f2:01:15:e1:3b:7c:f5:c5:2e:06:b8:63:71:b9:79:
46:d5:51:3a:81:e6:8d:c2:8a:22:b2:1f:7b:de:48:
04:bc:a1:67:20:17:30:f3:6f:ab:c0:95:73:38:e5:
a8:00:43:cd:a7:03:86:f7:3a:87:e4:18:9c:db:55:
ca:b8:74:d0:a4:c5:3f:43:ea:79:8c:ed:ab:a8:34:
35:e7:0f:de:81:1f:74:ba:9b:09:50:d6:23:09:d5:
9a:6c:4d:84:56:8e:5e:30:82:9d:5c:b3:7e:88:4f:
99:fc:9f:b4:ff:ee:ee:0f:02:89:06:94:30:ea:22:
9f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:99:20:72:55:52:61:92:D3:43:F2:EE:50:FD:42:83:67:21:50:52
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/35kgclVSYZLTQ_LuUP1Cg2chUFI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.4.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:4c:fd:e7:1e:fe:20:4d:c4:b3:0f:23:d8:78:df:ae:13:70:
3c:f3:55:82:0b:dc:2f:cb:83:d2:a2:31:13:86:7e:3a:aa:b5:
44:2a:8e:c1:97:a3:8a:b1:14:d2:08:ea:82:4f:a7:8f:5c:36:
f9:96:37:9c:3a:17:49:bb:c7:a0:74:c2:7f:4d:3d:8d:c4:40:
08:00:4c:e3:ca:76:80:0f:dc:11:e0:c2:82:5f:e2:c2:85:2e:
8f:7d:0e:cc:45:95:fc:52:19:bc:76:96:9f:3f:b3:3c:c0:f5:
01:58:32:88:bc:78:5d:bb:aa:b2:13:af:91:7d:b0:fb:70:8e:
b9:cf:76:cb:fc:89:a3:05:bd:cf:79:0f:95:d6:0c:89:6c:2d:
e3:04:eb:a2:62:49:f5:c8:2e:5f:19:67:06:0c:49:f0:ed:f9:
4c:f1:81:ca:b9:40:0e:64:da:c1:58:3a:2d:95:31:e9:de:d9:
99:de:a0:b5:16:96:02:c2:2b:01:7b:31:26:86:91:d6:2c:59:
40:15:9c:40:2a:ae:0d:48:52:40:6f:cc:e3:07:31:91:b9:86:
d4:f5:51:e1:72:db:30:8e:2b:f3:93:3a:ef:18:63:85:6d:58:
36:f7:66:09:8d:93:ae:91:4c:41:6f:51:9e:a2:f7:4c:d4:2f:
a0:47:d8:ff
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICChAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB
NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yMTAyMDcw
NjM4NDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKERGOTkyMDcyNTU1MjYx
OTJEMzQzRjJFRTUwRkQ0MjgzNjcyMTUwNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF6CG5BnC/tsSdaQT+lK5fe1TScwybPP1/f2iP5q9WVzOxkTIM
rDkdCmJ/yo/P9RwjL0V9NFymXzqG7xUejgGR8aTRUVXf9hdBr/5FGK17xL+PJu/B
ELv7wvezFD3jZsFTH0ZmYEiQtWa9gYrstF55LGXpFNYEI3TuwhSNgOm+pGG7fAh9
tPIBFeE7fPXFLga4Y3G5eUbVUTqB5o3CiiKyH3veSAS8oWcgFzDzb6vAlXM45agA
Q82nA4b3OofkGJzbVcq4dNCkxT9D6nmM7auoNDXnD96BH3S6mwlQ1iMJ1ZpsTYRW
jl4wgp1cs36IT5n8n7T/7u4PAokGlDDqIp/TAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU35kgclVSYZLTQ/LuUP1Cg2chUFIwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC
1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90
S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMzVrZ2NsVlNZWkxUUV9MdVVQMUNn
MmNoVUZJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsBIBDAN
BgkqhkiG9w0BAQsFAAOCAQEArUz95x7+IE3Esw8j2HjfrhNwPPNVggvcL8uD0qIx
E4Z+Oqq1RCqOwZejirEU0gjqgk+nj1w2+ZY3nDoXSbvHoHTCf009jcRACABM48p2
gA/cEeDCgl/iwoUuj30OzEWV/FIZvHaWnz+zPMD1AVgyiLx4XbuqshOvkX2w+3CO
uc92y/yJowW9z3kPldYMiWwt4wTromJJ9cguXxlnBgxJ8O35TPGByrlADmTawVg6
LZUx6d7Zmd6gtRaWAsIrAXsxJoaR1ixZQBWcQCquDUhSQG/M4wcxkbmG1PVR4XLb
MI4r85M67xhjhW1YNvdmCY2TrpFMQW9RnqL3TNQvoEfY/w==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:31 2025 by rpki-client