Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_J7x95U18PYFQxgwArVVX2agGBM.roa
File: _J7x95U18PYFQxgwArVVX2agGBM.roa (raw, json)
Hash identifier: W6dwmA217FfdnT+TuSBCVvtWqAm1kIgnL1d4HR+SuzA=
Subject key identifier: FC:9E:F1:F7:95:35:F0:F6:05:43:18:30:02:B5:55:5F:66:A0:18:13
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0A02
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_J7x95U18PYFQxgwArVVX2agGBM.roa
Signing time: Sun 07 Feb 2021 06:37:01 +0000
ROA not before: Sun 07 Feb 2021 06:37:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 192.72.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2562 (0xa02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Feb 7 06:37:01 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FC9EF1F79535F0F60543183002B5555F66A01813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:80:9b:c6:ec:37:8e:b4:6e:f2:d5:91:8f:
eb:cf:51:ce:05:c4:76:50:00:e9:ec:7c:31:a9:13:
12:e5:e8:9c:9e:97:76:0c:1e:ad:c9:8c:10:83:ef:
dd:1f:24:c3:06:a6:79:8f:c1:b6:ef:26:86:2e:ce:
48:9e:8d:97:ba:c2:97:d9:6e:05:7c:8e:33:06:40:
c4:1a:08:b7:9d:8b:54:33:89:47:54:2a:b3:00:fe:
01:9c:7d:c6:1a:e8:3b:28:cb:39:b7:95:1e:8a:5c:
da:81:8c:0f:f8:2a:d0:20:86:49:33:b0:39:27:12:
28:d8:71:48:4b:be:64:f3:2c:04:c3:98:3f:47:8f:
e7:87:6c:d7:41:2a:12:6b:de:8a:c4:ad:7e:50:f1:
94:a2:35:01:a2:ca:f2:bf:dd:cc:c4:c1:b8:5a:10:
2a:1a:34:2c:f0:34:82:11:96:3d:35:c0:7f:11:20:
95:39:a1:f5:f9:1d:7c:8d:6f:a1:e7:3a:e3:ba:43:
69:5a:de:14:ea:19:65:0a:45:1b:8d:ca:a0:eb:39:
88:97:90:34:33:fc:2b:1e:43:e2:67:54:fb:49:77:
54:0b:43:ca:65:fe:74:88:7f:d0:19:3b:c0:56:60:
04:22:73:88:37:ef:8c:c9:04:74:8b:c9:05:8f:a2:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9E:F1:F7:95:35:F0:F6:05:43:18:30:02:B5:55:5F:66:A0:18:13
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_J7x95U18PYFQxgwArVVX2agGBM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.224.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:4b:35:9a:26:3d:e6:61:62:3f:64:8d:ca:ca:1c:be:87:16:
5c:41:cd:e7:69:52:49:ea:fc:34:f7:c8:d4:ef:e9:ed:57:6e:
0d:de:cb:a8:ba:0e:e5:a8:da:11:88:d7:ce:a0:0d:9e:de:52:
61:9c:d7:2b:96:f2:a8:67:8e:be:c0:3a:56:b5:49:66:69:65:
df:97:ba:28:32:c4:f6:54:36:94:23:2c:a9:b9:55:b8:9d:b9:
d3:57:29:c0:8f:2d:b6:2c:f4:be:06:84:4a:08:3a:a2:f5:6d:
8d:dc:75:0f:24:fe:74:71:c1:77:7e:3a:80:fd:72:51:91:d0:
ea:5f:82:aa:3c:b5:af:86:9a:0e:3c:23:e8:43:8a:1e:95:a3:
2f:3e:8c:50:fd:ae:2f:58:1c:c9:65:ff:d3:fe:37:c2:f9:fb:
a6:36:21:c1:14:eb:3d:85:f8:81:dd:0f:a2:d7:6d:af:15:8d:
d6:ee:bc:2f:1c:d2:4f:b0:fb:21:7b:4c:0d:fd:3f:04:fc:35:
53:c2:9f:8d:c0:99:7a:98:f0:f8:2d:67:d3:29:44:7d:93:99:
b3:55:fe:62:06:6d:8c:9c:b4:3d:db:ed:c6:06:83:52:40:a0:
ff:92:3e:4b:11:3c:49:42:32:b4:18:80:bc:12:a2:2f:d9:52:
3e:08:6c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:27:51 2025 by rpki-client