Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/XSeymmSqH5RlHFHNm4RBJIFKoRM.roa
File: XSeymmSqH5RlHFHNm4RBJIFKoRM.roa (raw, json)
Hash identifier: 5fnNkimk9uIcqw9eOXwalmvBQHlR1yAO3O2TkQm0pYk=
Subject key identifier: 5D:27:B2:9A:64:AA:1F:94:65:1C:51:CD:9B:84:41:24:81:4A:A1:13
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/XSeymmSqH5RlHFHNm4RBJIFKoRM.roa
Signing time: Thu 15 Sep 2022 02:42:50 +0000
ROA not before: Thu 15 Sep 2022 02:42:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 192.72.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3183 (0xc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 15 02:42:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5D27B29A64AA1F94651C51CD9B844124814AA113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:42:7a:7a:03:b3:44:19:56:4d:a2:5e:0e:
63:aa:7c:f5:80:0e:3e:37:97:b9:3a:fa:b8:b1:32:
6b:ef:c0:53:d6:92:b8:df:a2:a2:2e:aa:96:69:2b:
af:63:d8:af:4e:f8:ce:53:2a:bb:59:58:e0:e7:63:
fa:82:62:ad:71:17:4e:f4:c3:e9:97:72:22:02:7f:
93:d4:94:bd:f3:ec:85:ab:9d:58:99:5e:14:cb:8b:
ae:4e:22:71:63:12:f6:80:27:38:41:e3:09:5e:8a:
82:ef:06:8e:5d:d9:cf:0d:1e:98:0c:b2:9e:eb:39:
64:b3:42:d0:d8:b1:1d:cc:e5:f3:37:63:1e:40:36:
ec:76:da:53:a9:7d:ea:00:ab:f3:55:86:15:28:51:
db:ab:d5:06:60:a3:7e:04:f2:4a:99:ac:f8:af:94:
e4:46:e4:97:f6:d1:bc:69:c3:41:6e:6f:07:0f:6b:
f8:ac:43:9b:66:52:26:33:97:d7:27:32:30:42:0e:
84:c9:ec:19:25:15:6b:c2:dc:84:ca:42:b5:05:ed:
f2:ea:9e:1f:29:34:74:58:03:c0:c8:7b:2f:5c:4a:
24:82:2b:37:d1:c5:ae:ac:cd:0f:35:be:ed:60:bc:
3f:9f:02:fe:3c:a3:36:1c:f6:04:7e:43:c8:08:38:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:27:B2:9A:64:AA:1F:94:65:1C:51:CD:9B:84:41:24:81:4A:A1:13
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/XSeymmSqH5RlHFHNm4RBJIFKoRM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.192.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:11:bc:7e:5a:45:e4:b7:f1:59:5f:b6:f8:12:e2:53:67:57:
36:37:b2:84:75:f5:2a:fa:7d:ec:0f:56:a9:81:97:84:d4:5b:
59:59:71:a4:f9:31:7d:28:53:fc:6a:74:fc:3b:e4:7d:ba:dc:
6d:22:6c:b5:1d:4c:8f:af:b6:8a:a5:1b:d6:a9:dc:1b:7d:37:
90:df:98:3a:67:38:83:fa:33:9c:ca:a6:31:e5:07:3e:c9:63:
2d:fa:55:07:b6:f6:8e:97:d5:3e:fb:9e:9c:c8:e6:d4:24:8a:
88:5b:22:a1:f0:81:04:74:4d:06:d8:eb:e0:1a:34:fc:25:2b:
38:fe:75:82:85:44:a9:ed:c3:e3:70:7d:29:48:30:f3:96:6d:
3d:42:83:52:95:6b:99:fb:cc:48:5f:fc:13:33:3c:24:81:b2:
48:9a:6a:25:f0:42:45:89:68:ca:6c:ff:67:43:c2:b0:94:44:
a6:4b:4f:dc:f8:de:90:05:47:97:e8:33:19:57:14:84:1c:8f:
b9:9f:11:95:a9:2b:fd:f9:f5:32:ba:0d:ff:80:94:93:a6:cb:
ca:59:7c:e9:7d:57:5d:aa:d7:c4:b0:32:89:2b:7c:c9:46:8e:
68:eb:64:74:af:9f:e3:96:f2:a9:b1:85:12:e0:fd:5c:a7:5f:
70:1d:4d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:21:24 2025 by rpki-client