Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/MtY5CrLDDGS_SQyIEVJlJjDCr3I.roa
File: MtY5CrLDDGS_SQyIEVJlJjDCr3I.roa (raw, json)
Hash identifier: RY/dBhuSxwxrHhyMid74WIe5ARpe3YzJnFrRsvtJoJ4=
Subject key identifier: 32:D6:39:0A:B2:C3:0C:64:BF:49:0C:88:11:52:65:26:30:C2:AF:72
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0DBD
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MtY5CrLDDGS_SQyIEVJlJjDCr3I.roa
Signing time: Fri 01 Sep 2023 09:25:26 +0000
ROA not before: Fri 01 Sep 2023 09:25:26 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 192.72.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3517 (0xdbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 1 09:25:26 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=32D6390AB2C30C64BF490C881152652630C2AF72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:19:49:9c:1e:5d:e6:85:dc:fb:90:b5:01:33:
22:5c:4d:31:9e:14:d6:bf:fb:fd:58:ce:3b:b5:88:
1c:47:60:e1:f8:ad:31:28:54:00:51:a1:78:30:c8:
4f:9d:65:bf:90:4a:3b:78:50:f3:63:87:52:c8:5b:
77:6e:da:1e:a6:25:ce:28:e9:d7:66:72:8c:40:b2:
c4:ff:b0:16:4f:e0:fe:2b:44:66:78:41:9f:e6:b6:
e9:8c:73:b1:fb:22:c2:e9:28:7b:c0:ae:25:f0:7e:
6c:f1:f5:56:2b:8c:d0:46:a5:e8:ab:bd:79:99:2b:
67:e8:8a:05:46:66:9b:b6:19:7a:16:34:9c:89:b2:
8a:65:a4:4e:cf:4a:b9:55:1f:7a:cb:79:ca:2a:11:
45:53:94:aa:bf:41:02:b3:e5:70:cd:72:d0:07:50:
8e:f9:09:f7:20:17:15:63:a4:1b:95:34:e3:35:55:
af:0f:3e:60:00:da:68:52:62:e6:4a:17:d8:f0:29:
c3:6c:b5:39:dc:de:97:70:6e:62:a6:df:fd:78:98:
40:6f:6d:bc:ec:d4:f6:94:fd:c4:0f:a0:5c:66:e3:
5f:03:bb:6f:23:a4:54:b9:d6:3d:72:89:d9:f4:ca:
09:71:4f:d8:07:e5:ab:ae:f0:76:f1:3f:90:36:5b:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D6:39:0A:B2:C3:0C:64:BF:49:0C:88:11:52:65:26:30:C2:AF:72
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MtY5CrLDDGS_SQyIEVJlJjDCr3I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.224.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:f4:95:d2:38:62:e0:f5:80:30:dd:69:bb:c0:61:f1:e6:4f:
b2:96:ae:4c:62:8b:05:a6:40:7e:70:df:da:f2:5e:0a:ed:00:
ac:0b:cd:f9:5a:76:c4:4b:14:ac:99:0a:f3:28:df:a8:e5:8b:
83:f4:9b:59:0f:7e:7a:b7:02:92:f8:62:b0:f3:25:68:e6:87:
f7:12:34:e8:dd:c6:98:22:54:e5:94:f0:62:11:a9:08:22:02:
11:fa:4b:87:ef:0a:0e:3e:e5:3d:24:e4:9c:df:7e:57:da:10:
9e:e4:e7:d9:ae:9c:9f:c8:f3:5e:70:f7:58:4f:9c:33:60:8f:
41:be:cc:c1:d4:b4:ef:df:d1:d0:ee:3f:f8:51:33:78:0c:a0:
49:6e:9f:42:7a:d3:8a:95:e5:b8:0c:05:ba:87:a2:9f:11:93:
e8:28:8b:e1:8e:57:d0:47:ac:f4:71:17:67:15:72:7c:df:7f:
e2:ee:94:4e:22:43:cf:eb:7f:39:fb:74:1c:f4:fd:cd:df:4b:
42:a4:d9:ab:86:46:05:28:f9:0e:ee:35:b8:17:b5:c8:59:cb:
0e:77:93:a2:bf:23:0f:4d:db:9c:d8:d2:be:74:e2:bb:67:dc:
d9:95:00:c5:84:a4:91:a0:7c:ec:91:8a:65:16:7e:e1:78:a9:
ce:0d:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:06 2025 by rpki-client