Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ofp6Wb_n6bhZWkIzRb3gQgbT6f0.roa
File: Ofp6Wb_n6bhZWkIzRb3gQgbT6f0.roa (raw, json)
Hash identifier: 47xA1EeKROAHW2taQdNnm9WDAoZo3ORqJT8PpZVManM=
Subject key identifier: 39:FA:7A:59:BF:E7:E9:B8:59:5A:42:33:45:BD:E0:42:06:D3:E9:FD
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 078C
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ofp6Wb_n6bhZWkIzRb3gQgbT6f0.roa
Signing time: Tue 29 Sep 2020 09:52:51 +0000
ROA not before: Tue 29 Sep 2020 09:52:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 192.72.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932 (0x78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 29 09:52:51 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=39FA7A59BFE7E9B8595A423345BDE04206D3E9FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:fe:b5:a9:a3:90:ca:a5:d4:72:d0:fc:85:
21:3b:99:b5:f9:0e:43:ed:15:40:14:39:1d:d1:b2:
3e:b6:a6:3a:8c:f1:83:77:5e:32:b7:94:e8:02:0c:
91:68:43:d9:e7:f0:98:00:69:0a:e1:e1:4f:ad:df:
38:36:7b:e7:3d:ae:41:03:15:f9:b4:83:7e:34:1f:
bb:63:3a:30:bd:b4:f8:37:f3:71:12:3c:c2:d4:e6:
ff:d6:f2:67:36:15:3a:a9:ea:48:2f:a4:56:c4:60:
64:25:15:a5:e1:48:6a:37:66:95:4a:c6:ea:27:5f:
7b:db:8c:6a:02:6f:3b:33:94:fd:07:06:bd:47:5e:
e4:22:26:3a:f0:d2:fa:2c:c0:38:f3:42:0a:a8:4a:
3a:10:b8:5d:fb:f1:72:b3:3c:ce:0e:70:54:97:a4:
06:4f:ca:da:8e:aa:80:e0:3f:75:a4:97:94:6b:a4:
dd:91:19:c1:a7:f4:41:72:4d:2a:46:6a:90:69:f3:
6b:f3:3c:a2:37:0f:9e:44:0e:c5:5f:a0:85:9e:59:
03:92:f4:db:b7:eb:da:00:8e:b2:f0:b5:b6:02:7d:
e5:f8:c8:05:51:9d:0c:e9:e1:c2:b6:e4:a2:21:bc:
11:cc:a2:c5:92:97:d2:1f:0d:0c:18:e2:ed:fe:99:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FA:7A:59:BF:E7:E9:B8:59:5A:42:33:45:BD:E0:42:06:D3:E9:FD
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ofp6Wb_n6bhZWkIzRb3gQgbT6f0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.32.0/19
Signature Algorithm: sha256WithRSAEncryption
49:e8:0b:71:27:09:8c:f0:ba:23:6e:fd:af:42:05:90:7f:9c:
02:69:01:77:e2:81:c8:e9:57:e1:21:5b:bb:ab:34:eb:4d:53:
06:34:0e:c5:7e:0d:ae:bc:15:2f:32:73:a8:e3:aa:b9:34:9b:
f2:f5:18:6d:04:65:58:47:82:4e:3c:09:a9:ce:91:73:ba:cf:
66:4c:9c:11:ab:04:99:b1:ef:bf:b8:7f:36:91:52:78:a3:fb:
93:48:02:e5:de:46:eb:d8:5a:7d:a0:18:d2:7f:81:ed:23:d2:
e5:2d:b3:20:6b:00:f0:d1:a5:0c:21:47:b5:ab:e9:33:3b:e8:
2b:28:52:ca:8a:8d:3a:84:2c:ac:1b:b3:62:cf:1f:62:c7:a0:
e4:95:98:be:b9:b1:15:11:3b:07:24:d6:77:74:a7:38:8f:77:
e1:00:e1:d5:ac:07:4d:be:46:7b:52:4b:8d:2f:a1:24:0f:36:
22:ff:40:46:d9:5e:e1:a5:47:d4:ba:3f:37:09:c0:66:b5:76:
df:b0:c7:72:45:51:0d:8b:8c:6c:91:5a:ce:d2:14:58:db:9c:
cb:d2:05:cd:2a:fe:5d:0c:b7:40:89:6b:e6:81:9d:ca:a1:5e:
af:33:6f:b1:a2:ee:36:80:a7:a1:1b:81:87:f4:0b:6f:30:bb:
6a:79:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:25:26 2025 by rpki-client