Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/YADMAFioNbo8VJrOlFD6CT0_jWw.roa
File: YADMAFioNbo8VJrOlFD6CT0_jWw.roa (raw, json)
Hash identifier: n7cVF1rcqrkoRbR1WinTXy+WuuvKS0WnE5vFC+yYu2k=
Subject key identifier: 60:00:CC:00:58:A8:35:BA:3C:54:9A:CE:94:50:FA:09:3D:3F:8D:6C
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0F6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YADMAFioNbo8VJrOlFD6CT0_jWw.roa
Signing time: Mon 10 Feb 2025 14:08:04 +0000
ROA not before: Mon 10 Feb 2025 14:08:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 192.72.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3951 (0xf6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Feb 10 14:08:04 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6000CC0058A835BA3C549ACE9450FA093D3F8D6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:f6:1a:16:44:91:56:a7:c3:31:0c:20:3e:
7e:b0:3e:e1:0b:0f:da:21:fc:f8:1a:ae:9e:e4:b3:
15:fe:ca:30:40:21:b3:98:10:4d:b3:c8:bb:5a:4c:
2e:8f:ac:9e:94:8b:41:a8:d8:2a:66:8c:0e:a2:2d:
c0:49:ac:ae:83:be:3d:45:a5:ff:77:41:4d:76:d2:
67:07:04:4c:07:07:e8:42:ea:1c:8e:e0:f0:6c:de:
7c:66:6a:9d:8c:a0:d8:b7:aa:2d:4d:24:06:7c:c2:
e6:fa:81:ff:58:67:69:14:14:9a:af:1a:76:38:54:
3f:ef:ca:66:06:94:b4:f2:f9:00:6a:b7:65:4d:7e:
c7:76:80:45:d7:26:6e:f8:f5:e4:f5:f0:a2:83:b6:
2c:7a:2b:98:45:30:93:bb:21:e6:21:f6:25:ec:79:
39:cb:e7:02:5b:cd:01:2c:0a:b2:ac:e0:8d:2e:af:
96:73:f3:42:1b:ed:d5:75:85:ac:9d:37:0b:82:5a:
82:31:af:d8:6a:96:07:59:99:d8:d8:c0:12:cf:ab:
2e:76:88:a2:ff:19:5f:8b:33:da:9e:33:5b:dc:bc:
f0:ff:a5:6b:bc:3b:3d:30:53:c3:87:7d:b2:a2:20:
f7:e6:10:d0:09:94:4d:53:85:7b:56:b1:ed:f6:70:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:00:CC:00:58:A8:35:BA:3C:54:9A:CE:94:50:FA:09:3D:3F:8D:6C
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YADMAFioNbo8VJrOlFD6CT0_jWw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.128.0/18
Signature Algorithm: sha256WithRSAEncryption
9e:d9:61:06:0f:76:13:c5:57:30:8a:d2:d2:99:09:d3:d0:52:
ca:73:c1:eb:97:94:1e:dc:b4:74:4f:54:ce:56:bc:1e:0d:fb:
16:0a:c1:51:d5:5d:9a:5c:0b:0a:09:b1:58:d9:98:fd:6e:3f:
b2:8f:c3:1f:23:af:39:79:c2:05:97:1c:ac:ee:3d:37:68:ea:
d9:8a:a8:77:56:bd:e3:70:0a:bd:1c:ef:84:13:e9:81:35:53:
2d:84:2b:4b:d3:6f:5a:67:22:e3:b7:0f:8b:84:95:d0:92:e0:
6c:0d:56:41:d3:55:60:23:d3:8e:05:27:62:e8:b9:f6:64:de:
aa:00:d8:48:0e:42:ec:0d:90:91:f2:62:43:fd:e1:71:7e:6d:
a6:1a:b1:03:99:14:40:79:b9:c4:c9:d1:e4:42:6e:31:4d:6a:
63:d3:b6:8e:16:af:c0:25:2c:51:7a:86:9a:dc:3c:9f:f6:30:
fc:46:a6:e7:29:21:c1:9e:c0:a1:23:fe:c5:e4:8e:77:d8:69:
01:b6:82:d4:83:07:02:eb:d8:d9:17:26:66:83:b1:d5:d9:b0:
5b:1a:47:55:1c:4b:69:d2:a5:8d:37:63:f3:d9:c6:3f:65:47:
de:10:5d:b5:ae:52:a6:dc:58:95:e0:67:07:3e:f2:c2:f6:97:
bb:f5:eb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:08:03 2025 by rpki-client