Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_6lx53SZGJi7gemirUAjkhG1vK4.roa
File: _6lx53SZGJi7gemirUAjkhG1vK4.roa (raw, json)
Hash identifier: T/pM//GrpHV29ZttJSynIV2hBeOwYjfgJ4FLQTYGp4A=
Subject key identifier: FF:A9:71:E7:74:99:18:98:BB:81:E9:A2:AD:40:23:92:11:B5:BC:AE
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0F73
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_6lx53SZGJi7gemirUAjkhG1vK4.roa
Signing time: Mon 10 Feb 2025 14:08:06 +0000
ROA not before: Mon 10 Feb 2025 14:08:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 192.72.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3955 (0xf73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Feb 10 14:08:06 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FFA971E774991898BB81E9A2AD40239211B5BCAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:29:75:09:51:d9:58:4e:84:42:98:84:ea:
fb:17:68:06:bd:f8:ed:ab:c0:12:0d:0e:01:73:7f:
a3:49:d6:d6:22:98:ed:18:a2:6b:22:ba:f9:4e:6f:
5f:84:c4:67:ac:26:3f:92:b9:e4:6d:1d:72:64:cb:
05:f5:34:eb:40:c1:ae:6b:3d:f8:3c:48:c1:fd:b5:
13:cc:bc:fb:70:eb:60:d3:49:3a:08:fc:d9:97:d7:
83:88:85:c2:27:57:16:52:05:b6:14:bb:31:6e:c9:
97:9b:c2:38:c3:e6:b6:f0:18:e6:5d:de:1a:d9:8e:
e9:d1:b4:9b:fd:20:b6:1a:f5:7a:4a:00:3f:90:90:
9c:92:71:3b:bb:c0:33:36:43:68:12:03:cb:91:08:
a1:2b:0e:13:4f:35:eb:35:da:2d:0d:b0:0b:32:21:
68:e4:df:b6:0b:1c:67:0f:31:74:21:3a:10:6b:55:
4c:66:ef:a2:67:4d:c7:c0:a2:a6:df:3d:b2:5c:ab:
11:cd:8b:55:ac:b0:d7:34:00:e7:e6:3b:9f:ec:92:
d5:09:19:d1:5f:8f:28:9c:a5:1c:16:22:0e:72:99:
c2:93:16:3e:d8:7e:77:90:03:20:31:be:0d:0f:66:
8b:00:49:1c:46:c7:80:0e:69:f1:6f:9c:ea:80:e5:
94:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A9:71:E7:74:99:18:98:BB:81:E9:A2:AD:40:23:92:11:B5:BC:AE
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_6lx53SZGJi7gemirUAjkhG1vK4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.32.0/19
Signature Algorithm: sha256WithRSAEncryption
26:03:3c:99:16:4d:7f:66:0d:32:40:cc:bc:8e:b7:c3:14:32:
23:ac:67:40:83:7e:7e:6a:3c:e3:8a:bd:11:25:5b:e3:26:8a:
c3:0e:e8:18:28:1f:4a:f6:c3:8b:0a:f5:8f:2d:72:34:00:b5:
ae:9e:11:a6:85:cf:ba:fd:89:a3:00:98:4c:2d:e4:10:e4:e4:
86:14:03:b8:ba:94:fa:bf:b1:a0:25:59:e9:8f:08:37:15:a4:
58:64:63:3b:23:b0:ee:aa:24:5a:f0:38:3c:72:52:39:72:7e:
5e:0e:a4:ce:6f:da:58:06:45:e8:9d:ed:ef:86:bc:86:97:f2:
d4:2f:c3:30:a2:83:31:81:e4:5d:6d:e1:49:d6:bc:ef:dd:f7:
80:22:24:af:bf:e5:b0:5e:f7:0a:3e:14:78:85:b6:b3:2b:61:
72:92:e5:e7:b8:ac:76:32:87:1c:17:b1:45:c3:b9:14:09:16:
65:85:79:4c:dc:c6:62:c4:e2:da:2b:7f:cd:a8:40:97:5f:db:
c4:a9:2c:9e:13:66:6e:08:70:fe:cb:ed:ec:6d:e1:09:c9:e7:
3b:1d:ab:26:65:f7:c3:21:30:54:36:4d:2a:e2:c2:b5:42:05:
82:ed:47:14:d1:ea:51:de:15:c3:5a:e9:47:33:9e:98:84:ae:
d0:7d:09:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:06:28 2025 by rpki-client