Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/VN9HrL6AGisEuybJk91W0uqArx0.roa
File: VN9HrL6AGisEuybJk91W0uqArx0.roa (raw, json)
Hash identifier: HGFoBGLVUJD4TUhsZK3fXCFnw1jXXV4N/m+rfIr+vTk=
Subject key identifier: 54:DF:47:AC:BE:80:1A:2B:04:BB:26:C9:93:DD:56:D2:EA:80:AF:1D
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0ED0
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VN9HrL6AGisEuybJk91W0uqArx0.roa
Signing time: Mon 26 Aug 2024 05:21:42 +0000
ROA not before: Mon 26 Aug 2024 05:21:42 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 192.72.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3792 (0xed0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Aug 26 05:21:42 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=54DF47ACBE801A2B04BB26C993DD56D2EA80AF1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:22:4e:9c:d9:c0:90:f8:92:c7:45:a8:17:
66:61:93:69:56:35:c7:0f:b7:15:08:d1:52:0b:62:
33:f7:f0:22:16:a8:39:ce:4e:2a:da:a7:53:6f:7c:
65:56:3c:9a:29:cb:64:ca:74:9f:d0:f5:3e:19:e5:
40:25:e7:d0:a8:54:73:74:3d:b2:d2:65:54:27:9c:
02:49:ae:2e:34:31:03:f1:cd:8c:d3:30:d3:12:99:
19:72:9b:ff:9b:13:db:8f:12:c3:d2:9b:70:e0:e9:
b0:e1:50:6b:0c:64:75:b1:9b:e8:ef:55:4c:d3:95:
64:f7:33:00:13:d2:5c:d3:ad:b7:1b:b5:98:c7:e0:
17:90:c0:91:16:00:c1:1e:1e:56:b0:63:9b:82:1f:
40:c4:b4:71:df:7b:ef:b4:b2:c7:a9:4b:a0:a2:9c:
69:cb:a4:f6:8c:13:22:ce:b2:b1:25:1b:70:53:01:
6a:68:6f:7f:b0:3f:ff:88:97:d8:e6:74:15:81:98:
c5:bd:ad:54:73:90:67:0b:da:a6:c3:dc:6b:08:1a:
22:c4:ed:4a:42:3d:ab:b7:4f:bc:3a:9c:a3:13:2c:
2b:02:ca:26:3b:88:6f:cf:15:b6:f9:3b:6f:6b:8f:
59:00:dd:03:51:51:3a:68:e2:50:33:24:da:a1:38:
3e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DF:47:AC:BE:80:1A:2B:04:BB:26:C9:93:DD:56:D2:EA:80:AF:1D
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VN9HrL6AGisEuybJk91W0uqArx0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.4.0/22
Signature Algorithm: sha256WithRSAEncryption
73:b2:e0:8b:a1:4a:ee:a2:60:b3:29:1f:76:ca:ca:f4:16:3f:
85:d1:f6:06:25:d9:3f:af:5c:67:bb:1c:64:42:bd:22:b5:2f:
a2:52:62:c3:ee:f8:95:4f:ee:00:1f:c2:1f:ab:66:9b:06:97:
9c:95:82:6c:87:60:45:fc:12:21:af:ab:e9:21:15:c4:58:d3:
46:67:b1:81:9b:df:32:39:c8:9e:32:55:7f:39:a7:cf:fb:93:
c8:ec:b7:87:98:6a:99:6c:5f:62:62:04:14:7b:ef:77:49:6d:
d9:7b:68:56:28:e1:a1:a5:3d:2c:e7:b6:0c:21:d1:41:df:87:
34:40:16:3f:c0:c6:c1:f4:ca:a3:62:9b:71:b8:3c:ed:28:9c:
0c:db:ae:a8:b4:0b:b0:bf:03:e6:5d:f1:35:a7:e9:a9:f3:8e:
e1:7b:99:9f:0c:01:d5:9c:0c:e5:51:14:f6:80:50:7c:eb:45:
57:b3:85:1d:50:5b:1b:99:43:4e:9e:24:b1:89:aa:a0:25:b3:
7c:6f:14:cd:d0:d1:be:a6:f6:e1:78:78:ea:fd:ac:c5:26:2f:
e9:d7:ca:4f:bc:b0:17:5f:3f:50:fc:96:5a:b2:7d:aa:7c:45:
b7:18:54:39:68:6b:dc:90:e1:3a:9e:d4:3b:cd:62:a5:75:e5:
18:95:a7:6d
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDtAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB
NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNDA4MjYw
NTIxNDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU0REY0N0FDQkU4MDFB
MkIwNEJCMjZDOTkzREQ1NkQyRUE4MEFGMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCt/iJOnNnAkPiSx0WoF2Zhk2lWNccPtxUI0VILYjP38CIWqDnO
Tirap1NvfGVWPJopy2TKdJ/Q9T4Z5UAl59CoVHN0PbLSZVQnnAJJri40MQPxzYzT
MNMSmRlym/+bE9uPEsPSm3Dg6bDhUGsMZHWxm+jvVUzTlWT3MwAT0lzTrbcbtZjH
4BeQwJEWAMEeHlawY5uCH0DEtHHfe++0ssepS6CinGnLpPaMEyLOsrElG3BTAWpo
b3+wP/+Il9jmdBWBmMW9rVRzkGcL2qbD3GsIGiLE7UpCPau3T7w6nKMTLCsCyiY7
iG/PFbb5O29rj1kA3QNRUTpo4lAzJNqhOD6JAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUVN9HrL6AGisEuybJk91W0uqArx0wHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC
1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90
S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvVk45SHJMNkFHaXNFdXliSms5MVcw
dXFBcngwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsBIBDAN
BgkqhkiG9w0BAQsFAAOCAQEAc7Lgi6FK7qJgsykfdsrK9BY/hdH2BiXZP69cZ7sc
ZEK9IrUvolJiw+74lU/uAB/CH6tmmwaXnJWCbIdgRfwSIa+r6SEVxFjTRmexgZvf
MjnInjJVfzmnz/uTyOy3h5hqmWxfYmIEFHvvd0lt2XtoVijhoaU9LOe2DCHRQd+H
NEAWP8DGwfTKo2Kbcbg87SicDNuuqLQLsL8D5l3xNafpqfOO4XuZnwwB1ZwM5VEU
9oBQfOtFV7OFHVBbG5lDTp4ksYmqoCWzfG8UzdDRvqb24Xh46v2sxSYv6dfKT7yw
F18/UPyWWrJ9qnxFtxhUOWhr3JDhOp7UO81ipXXlGJWnbQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:33:30 2025 by rpki-client