Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/LtGYo5dxvS9LNtI9pm_NYOUs8cg.roa
File: LtGYo5dxvS9LNtI9pm_NYOUs8cg.roa (raw, json)
Hash identifier: gYES8G/hgh6FxvF8bdLfIX+jZFVRPsgwY8PaMmfizd0=
Subject key identifier: 2E:D1:98:A3:97:71:BD:2F:4B:36:D2:3D:A6:6F:CD:60:E5:2C:F1:C8
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/LtGYo5dxvS9LNtI9pm_NYOUs8cg.roa
Signing time: Thu 15 Sep 2022 02:42:57 +0000
ROA not before: Thu 15 Sep 2022 02:42:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 192.72.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3183 (0xc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 15 02:42:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2ED198A39771BD2F4B36D23DA66FCD60E52CF1C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:11:e5:f6:37:ce:0f:ef:ef:f7:4e:74:b7:
d0:25:af:c4:89:36:a4:0e:fd:62:bf:d4:b1:82:1f:
a4:56:48:a3:fc:cf:a9:ca:ee:82:bc:4a:65:2f:bd:
24:4f:ba:69:0b:96:96:10:e5:b6:7e:35:84:70:bc:
f7:47:98:ee:c7:80:d1:81:5b:a9:ef:f3:3a:a9:d0:
2c:de:3b:e0:9e:7b:97:f0:10:e8:a1:58:da:f2:97:
90:43:11:e7:6c:26:cf:a7:ae:02:a4:fa:34:b4:ba:
92:5b:cd:40:9e:aa:c6:41:07:b1:31:12:6e:47:a7:
5c:d0:f2:2a:e2:18:d7:66:69:84:cc:31:9f:0d:ed:
2e:de:ae:89:33:ab:ff:44:10:0e:ca:69:d5:ca:0a:
30:ef:4d:22:4c:5f:44:13:d7:46:78:70:17:77:9f:
1e:7b:9a:e4:e7:3e:c2:1c:26:e3:0e:83:7c:4d:29:
5a:c3:54:17:3f:10:12:55:62:9c:c3:21:e1:5c:65:
c2:c1:90:62:55:fe:e1:8c:04:0b:f3:22:8c:e5:d4:
30:d9:a0:1b:ae:e6:60:67:5e:46:a7:c7:af:f7:71:
6d:45:c1:06:d9:4d:67:0d:96:69:b0:42:8a:25:d9:
d7:4e:e3:7c:5e:df:e9:99:0f:40:d9:b6:f7:58:52:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D1:98:A3:97:71:BD:2F:4B:36:D2:3D:A6:6F:CD:60:E5:2C:F1:C8
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/LtGYo5dxvS9LNtI9pm_NYOUs8cg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.240.0/21
Signature Algorithm: sha256WithRSAEncryption
01:3e:69:e8:c5:d7:c7:89:eb:66:17:31:3a:58:72:b3:d6:8d:
6c:03:b8:d2:20:86:fc:20:ea:5e:b8:f4:e8:9e:b0:94:e6:f3:
7d:bb:69:ae:5e:eb:c1:5c:54:ef:38:a6:50:73:f8:9c:bb:47:
3a:62:63:1f:ee:92:c6:91:41:f4:0f:65:2b:93:90:45:f4:5b:
29:97:6a:50:be:97:28:48:ee:f2:8e:7a:70:bc:6c:ae:26:f9:
e9:0f:0b:24:59:12:6e:58:5c:3c:f6:6b:fa:3f:be:75:51:ad:
7c:82:97:9c:33:1b:a6:68:55:c3:63:75:c3:85:c7:e7:df:ce:
fa:06:4c:95:e6:73:f0:83:27:22:b8:53:43:e1:a9:42:ac:d7:
d0:2a:53:dd:e5:8c:5e:7b:e0:11:dc:1e:e8:87:27:ac:ca:21:
f6:df:28:e2:de:07:8c:e9:ec:26:77:62:a9:5c:78:1b:61:17:
45:18:3b:e9:dc:60:a2:b8:f8:eb:57:c4:d7:37:a4:5d:35:02:
92:ff:3c:72:73:84:31:e3:54:32:d6:8b:05:01:29:ff:d3:f7:
57:8b:1b:d4:67:1d:ce:a3:f5:eb:73:1b:71:33:44:a2:e3:b5:
bc:5d:cf:8b:30:00:df:e3:84:2c:44:e9:29:b6:a1:4e:f7:04:
b8:b6:ee:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:27:57 2025 by rpki-client