Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/9BTLCUzW_cSeDRmr-xkKKBVNFFA.roa
File: 9BTLCUzW_cSeDRmr-xkKKBVNFFA.roa (raw, json)
Hash identifier: egOWplg1oXc3PaQOdQXvJKGvZ08etiR34ytcpn9Y+Pg=
Subject key identifier: F4:14:CB:09:4C:D6:FD:C4:9E:0D:19:AB:FB:19:0A:28:15:4D:14:50
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0EDA
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9BTLCUzW_cSeDRmr-xkKKBVNFFA.roa
Signing time: Mon 26 Aug 2024 05:22:04 +0000
ROA not before: Mon 26 Aug 2024 05:22:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 192.72.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3802 (0xeda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Aug 26 05:22:04 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F414CB094CD6FDC49E0D19ABFB190A28154D1450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d8:7a:9b:a1:6f:f3:d0:92:34:ef:d7:bd:a9:
0e:cb:04:5d:fd:de:da:99:71:5e:2c:ac:19:a3:ec:
06:35:8d:f8:b1:8e:b3:52:1c:a9:6a:da:fa:0c:85:
09:dc:21:07:48:08:c9:9b:dc:bc:3a:99:ce:8b:82:
1a:bd:08:e5:9d:ac:d9:24:71:55:81:ba:ac:2e:09:
91:62:7f:62:b9:f1:3c:74:63:a0:a3:49:28:23:9b:
2f:af:ac:7c:6d:58:f5:d7:18:8f:c0:1a:93:79:b0:
a1:4b:9b:2f:83:00:e0:38:1a:da:8f:a6:e4:d7:40:
13:e2:d4:7b:2f:fd:ef:a4:f2:29:23:29:b9:12:91:
b5:25:94:10:2a:8b:1e:7a:74:db:34:51:6b:69:8d:
c5:f1:91:42:b2:8f:88:e1:86:6e:8f:0e:48:0d:19:
88:4c:28:77:36:07:d6:69:2f:be:a1:a3:37:f3:27:
f8:51:cb:af:ff:f1:8a:96:40:15:44:4b:6d:97:0d:
70:e8:d4:0d:33:b1:e9:fa:50:b7:99:f0:ed:d8:2d:
4c:32:0b:36:a4:b2:6b:df:e7:bf:2d:c1:c1:0b:c0:
88:2d:b4:b7:3b:e4:82:83:aa:1e:6d:b4:a8:29:7f:
f5:33:c7:6e:28:4e:64:5a:54:f7:e0:52:61:e3:c3:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:14:CB:09:4C:D6:FD:C4:9E:0D:19:AB:FB:19:0A:28:15:4D:14:50
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9BTLCUzW_cSeDRmr-xkKKBVNFFA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.32.0/19
Signature Algorithm: sha256WithRSAEncryption
38:a1:1f:3d:e3:7d:44:75:00:45:22:fe:47:db:46:64:bc:16:
ef:0c:41:5a:8a:d7:09:34:99:e6:2b:ae:24:18:e5:b9:5b:f9:
05:02:28:32:53:c8:c2:af:89:6e:83:77:ca:ee:4a:5b:0c:82:
05:f1:5f:df:a5:5a:f9:19:6c:52:68:98:ba:47:e7:6f:bc:ab:
97:d0:b9:93:f9:c6:1d:f7:fd:ff:0d:09:69:d6:4c:45:e5:f0:
3f:8f:fd:b2:12:13:f0:cb:c6:1f:ad:26:a1:aa:cb:47:ef:0d:
b5:23:f5:39:c8:4d:ce:d0:4b:ef:a2:7b:cc:d7:81:5e:73:4d:
48:0a:ff:69:b9:5f:45:90:a1:b1:72:54:44:36:f5:5e:fc:03:
cc:46:a0:32:67:96:e2:0c:57:08:ab:2f:2f:de:3d:90:af:2f:
87:55:69:45:d6:8f:0c:ab:d1:ff:85:ac:d6:b6:92:78:f3:ae:
2c:53:6a:40:ec:e8:18:00:ed:43:d0:85:d2:f2:77:60:29:4f:
97:3e:6d:3c:ad:3c:02:5c:d1:86:69:41:83:44:17:09:cd:16:
2a:7e:88:a2:5e:f3:ed:e9:42:92:2f:5c:40:05:73:ff:88:0f:
cc:45:67:be:56:ea:67:d1:24:77:66:47:ee:b4:c2:1b:c2:75:
e8:88:de:53
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB
NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNDA4MjYw
NTIyMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY0MTRDQjA5NENENkZE
QzQ5RTBEMTlBQkZCMTkwQTI4MTU0RDE0NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDy2HqboW/z0JI079e9qQ7LBF393tqZcV4srBmj7AY1jfixjrNS
HKlq2voMhQncIQdICMmb3Lw6mc6Lghq9COWdrNkkcVWBuqwuCZFif2K58Tx0Y6Cj
SSgjmy+vrHxtWPXXGI/AGpN5sKFLmy+DAOA4GtqPpuTXQBPi1Hsv/e+k8ikjKbkS
kbUllBAqix56dNs0UWtpjcXxkUKyj4jhhm6PDkgNGYhMKHc2B9ZpL76hozfzJ/hR
y6//8YqWQBVES22XDXDo1A0zsen6ULeZ8O3YLUwyCzaksmvf578twcELwIgttLc7
5IKDqh5ttKgpf/Uzx24oTmRaVPfgUmHjwxTpAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU9BTLCUzW/cSeDRmr+xkKKBVNFFAwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC
1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90
S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvOUJUTENVeldfY1NlRFJtci14a0tL
QlZORkZBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcBIIDAN
BgkqhkiG9w0BAQsFAAOCAQEAOKEfPeN9RHUARSL+R9tGZLwW7wxBWorXCTSZ5iuu
JBjluVv5BQIoMlPIwq+JboN3yu5KWwyCBfFf36Va+RlsUmiYukfnb7yrl9C5k/nG
Hff9/w0JadZMReXwP4/9shIT8MvGH60moarLR+8NtSP1OchNztBL76J7zNeBXnNN
SAr/ablfRZChsXJURDb1XvwDzEagMmeW4gxXCKsvL949kK8vh1VpRdaPDKvR/4Ws
1raSePOuLFNqQOzoGADtQ9CF0vJ3YClPlz5tPK08AlzRhmlBg0QXCc0WKn6Iol7z
7elCki9cQAVz/4gPzEVnvlbqZ9Ekd2ZH7rTCG8J16IjeUw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:23:05 2025 by rpki-client