Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/IlenO6gLy_WSup6mEZHn4QkiLgA.roa
File: IlenO6gLy_WSup6mEZHn4QkiLgA.roa (raw, json)
Hash identifier: Dp08m69GCDFKTY1ro9nM4yRCohaYIlR4/OudXrMcgPQ=
Subject key identifier: 22:57:A7:3B:A8:0B:CB:F5:92:BA:9E:A6:11:91:E7:E1:09:22:2E:00
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0F6C
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IlenO6gLy_WSup6mEZHn4QkiLgA.roa
Signing time: Mon 10 Feb 2025 14:08:04 +0000
ROA not before: Mon 10 Feb 2025 14:08:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 192.72.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3948 (0xf6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Feb 10 14:08:04 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2257A73BA80BCBF592BA9EA61191E7E109222E00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:aa:25:63:b9:51:d0:fd:93:8b:ce:51:c5:13:
dc:17:98:fa:58:10:25:c4:7e:42:02:a4:d0:e2:29:
15:b0:88:71:f6:2b:84:91:d8:fd:e6:a6:6d:70:0c:
eb:74:5b:29:35:d6:90:4d:f9:63:25:63:19:80:2b:
ee:06:d3:2b:f6:c2:e0:6b:54:c5:18:ab:f0:69:6f:
b5:54:ea:c1:0f:21:3e:13:d4:4b:3f:ff:92:44:28:
1c:3f:68:58:50:fc:90:44:c5:5e:e8:64:ec:c0:2f:
be:c6:f8:7e:f3:0a:5b:cc:21:ca:e3:c9:a9:96:e0:
96:f8:a6:aa:e2:24:f7:0d:ea:21:42:99:a0:44:bf:
50:98:95:03:13:d3:3f:15:16:8e:79:a3:2e:4c:5f:
37:3d:14:09:a8:67:d4:6b:4d:cf:e9:92:be:fb:46:
02:6c:46:d1:2d:02:62:07:da:3a:78:66:55:57:01:
72:d6:f2:d7:89:ec:93:98:6b:28:e2:b6:04:f5:f5:
fb:fa:5e:8a:d8:b1:a9:00:cf:b9:1a:2f:37:e9:44:
c9:bc:1e:1e:93:6c:7a:fb:bd:56:21:89:f8:08:69:
5e:11:9f:75:30:b3:90:53:34:67:2c:50:b1:33:5b:
9e:f1:03:98:0c:c4:9d:aa:e4:ce:bb:ea:a0:c1:10:
cb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:57:A7:3B:A8:0B:CB:F5:92:BA:9E:A6:11:91:E7:E1:09:22:2E:00
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IlenO6gLy_WSup6mEZHn4QkiLgA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:91:5e:ff:8f:f3:01:d4:44:cb:c0:d2:c4:0d:e0:aa:48:3b:
2f:60:36:24:0c:22:57:b2:e8:08:8d:29:ac:1a:88:14:2e:60:
96:3e:cc:d0:ce:a0:a9:ac:d5:89:7e:52:af:cf:26:87:08:0f:
5c:4b:57:73:2a:4e:80:de:2a:0a:15:4d:bc:f2:db:9c:75:c7:
98:80:04:22:a1:d4:b7:86:fb:5a:50:25:14:11:45:08:e2:01:
06:86:f6:06:7b:8e:2f:c2:79:96:91:eb:6a:30:49:5d:4f:48:
12:7f:ee:dd:5c:76:bf:4e:f7:cc:9b:ed:3f:2d:df:3e:f2:69:
d3:29:e9:60:2d:68:de:dc:f9:ff:39:59:97:56:d6:65:95:d1:
bc:3e:b2:e0:d0:cc:c0:a9:79:93:03:6c:32:1f:2a:8b:84:04:
87:f9:54:16:38:18:56:34:47:a5:e8:47:4f:21:8c:7a:8f:ac:
69:95:38:71:09:f4:b7:cb:61:7e:f6:5b:8e:13:01:1d:1e:7b:
c9:54:b8:16:d1:4c:ca:a8:70:06:7e:43:df:f6:9b:52:60:ab:
56:b1:28:3f:52:12:c0:28:62:88:df:72:62:a2:7f:19:82:b4:
f9:c5:89:ed:09:e4:be:e7:36:d6:9f:a7:b3:91:a8:e8:cb:af:
dd:a2:63:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:32 2025 by rpki-client