Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/T5C1_VDEeq3BeFUGRYSDCOk8Keg.roa
File: T5C1_VDEeq3BeFUGRYSDCOk8Keg.roa (raw, json)
Hash identifier: V6IcciS6DQid62qkm18pKkMRU/Xdrt3gP2GTnW0fgKw=
Subject key identifier: 4F:90:B5:FD:50:C4:7A:AD:C1:78:55:06:45:84:83:08:E9:3C:29:E8
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0EE0
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/T5C1_VDEeq3BeFUGRYSDCOk8Keg.roa
Signing time: Mon 26 Aug 2024 05:22:15 +0000
ROA not before: Mon 26 Aug 2024 05:22:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 192.72.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3808 (0xee0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Aug 26 05:22:15 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4F90B5FD50C47AADC178550645848308E93C29E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:e1:fc:c9:a4:28:d6:c4:97:2e:19:fb:04:
92:a9:ef:0b:0c:eb:04:a0:25:c0:d9:3e:5b:b4:57:
ed:f7:99:86:08:66:cf:1d:8d:5a:bc:7f:63:f6:1e:
42:45:88:95:70:09:a1:75:18:4e:fa:1e:4e:d6:4d:
0d:dc:68:30:17:55:ce:c7:a3:dd:bd:5d:46:25:58:
a7:69:c6:fe:57:3f:ce:31:42:40:6d:bb:ae:25:76:
f0:44:01:7b:4d:50:06:90:3d:66:f2:3d:9b:a9:3a:
7f:76:4e:17:91:02:31:4d:b0:3a:e1:84:0e:a0:35:
92:58:4a:73:e6:40:b1:8e:bc:21:bb:23:a5:12:9b:
13:05:d8:7a:c2:10:13:45:3d:3f:e0:2b:bf:55:17:
9d:f0:b5:54:c7:38:d2:8e:a6:cf:23:3c:41:8c:20:
29:01:6f:bf:67:f2:a7:53:16:06:cc:2d:81:84:50:
08:0b:88:1a:5b:70:44:dc:6e:66:a0:ae:ab:2b:e1:
e2:c7:4d:7a:92:83:40:6f:63:87:44:c4:6d:9a:ea:
1a:fd:63:fa:37:2e:7d:8f:a8:3a:53:ce:68:54:63:
10:87:ae:15:83:05:74:91:af:fd:3b:e9:60:02:67:
61:f3:03:92:1f:ff:47:8f:0f:78:07:6a:36:e1:80:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:90:B5:FD:50:C4:7A:AD:C1:78:55:06:45:84:83:08:E9:3C:29:E8
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/T5C1_VDEeq3BeFUGRYSDCOk8Keg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:dd:a0:2f:93:78:5f:ff:6e:76:ef:6d:4d:b3:6d:8d:52:4d:
cd:34:4e:76:67:cc:ad:70:49:54:c3:67:ae:fe:c5:32:60:16:
a0:8a:57:82:96:ba:c9:60:c9:19:7d:ad:f1:e6:08:04:2b:8b:
bc:00:60:5e:42:c1:26:45:1f:22:0a:9c:da:91:9f:ee:b2:67:
64:da:c6:12:03:f0:a7:a3:1d:1f:d5:c9:68:f6:f1:c3:ec:1b:
41:36:c3:f8:d4:1b:48:3d:5f:65:08:bd:a3:d1:19:7a:85:af:
55:ca:1e:db:47:40:cb:50:3c:ff:6c:44:6a:4c:96:72:3b:02:
5d:37:14:b1:01:8f:22:a2:17:10:5b:85:25:ef:46:cc:b8:3b:
ee:6d:00:3d:e1:1c:47:0e:ce:d5:72:73:2c:8d:b4:e5:fd:e5:
a9:91:47:c8:ba:27:2c:6b:59:d7:51:e3:53:d2:32:63:62:bb:
3d:75:83:0d:9d:b2:a7:07:76:51:84:18:98:45:aa:97:29:a8:
ff:b9:da:be:31:a1:82:7a:18:7c:c1:e4:c1:de:a5:65:a5:e6:
d0:23:0b:cb:b3:54:42:f3:2e:73:5e:e2:9b:5f:8d:f3:b3:ad:
29:e9:71:30:88:6a:5c:04:c0:d3:a1:cb:3f:3f:cf:2c:c8:5e:
ed:cd:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:36:20 2025 by rpki-client