Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/fqzxGZlbxmcdpTUNFBRm56eRVxM.roa
File: fqzxGZlbxmcdpTUNFBRm56eRVxM.roa (raw, json)
Hash identifier: QmoqXqtVhsOEya6N68mODG9UQ7tL95pyB3uAojc1YQQ=
Subject key identifier: 7E:AC:F1:19:99:5B:C6:67:1D:A5:35:0D:14:14:66:E7:A7:91:57:13
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0DBE
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fqzxGZlbxmcdpTUNFBRm56eRVxM.roa
Signing time: Fri 01 Sep 2023 09:25:28 +0000
ROA not before: Fri 01 Sep 2023 09:25:28 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 192.72.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3518 (0xdbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 1 09:25:28 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7EACF119995BC6671DA5350D141466E7A7915713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f8:ed:1d:e1:dc:66:d5:34:b2:24:db:0f:47:
ca:0b:db:cd:af:76:5d:65:20:34:59:4c:6d:fb:0f:
99:90:a6:51:ba:bf:e2:c0:0e:94:3a:ac:d2:0c:78:
7a:42:da:31:e9:22:9a:80:2b:13:d5:13:e5:68:ae:
c0:65:38:ba:70:29:44:34:6f:58:49:9e:35:c1:f3:
39:28:1c:bf:c6:75:6a:e8:35:31:47:20:c5:26:f7:
24:5a:c1:f5:e5:db:bf:c8:e0:76:8e:51:7f:00:8d:
2b:5d:04:cc:af:f8:c5:06:4b:01:01:f0:ab:50:95:
d2:61:00:ee:61:af:1c:98:6c:10:17:1d:7a:4a:44:
2b:05:b7:9b:25:2b:c2:a5:55:5e:91:d2:f1:5b:20:
ce:ad:d3:cc:7e:1b:f6:30:7a:3c:4b:14:fd:94:de:
d5:fb:a0:e5:9e:8f:70:85:c3:df:32:2c:02:5d:19:
0e:5a:4e:8c:a7:60:a9:02:84:f7:f2:58:a6:d1:8a:
59:b4:01:35:c4:d8:96:23:41:da:10:07:29:00:a6:
59:65:56:c0:03:68:77:96:1b:fd:33:3e:40:2e:55:
1e:e2:e3:28:3d:ff:d3:bc:ec:f5:47:62:a0:b0:0e:
a0:ba:51:b6:a4:3a:f2:da:d4:35:ac:59:f0:04:28:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AC:F1:19:99:5B:C6:67:1D:A5:35:0D:14:14:66:E7:A7:91:57:13
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fqzxGZlbxmcdpTUNFBRm56eRVxM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a4:d5:ef:e2:8d:56:14:cd:d6:d0:f1:d7:f7:fb:77:9e:0c:65:
f0:52:3c:b7:1e:b2:3d:ac:5b:3a:e6:b6:9b:85:7b:03:c1:e4:
77:6f:48:9d:c5:17:4a:df:96:9e:9a:17:87:f5:c8:e9:14:86:
30:0b:f4:a0:e1:9e:f2:18:8b:47:24:4b:16:f8:e7:92:fa:33:
be:f9:bf:c4:b9:82:c5:52:c9:98:ab:4b:56:ab:af:f6:8a:65:
0f:82:13:12:90:fe:76:4c:a7:99:ca:26:00:08:f0:4d:d1:c1:
17:f9:db:24:60:b3:a1:77:79:b1:ab:d5:77:0b:be:86:a8:b1:
02:70:68:ac:c1:40:7f:31:43:04:72:2a:5f:85:0d:9e:46:b5:
cc:2a:21:f0:5c:71:e3:38:a3:b0:ba:a4:de:9d:13:16:7a:a0:
fa:89:34:9a:40:78:9b:36:70:a4:43:62:61:4b:43:a1:eb:74:
e0:2d:35:11:78:0f:c0:84:56:18:68:7e:4b:9e:1a:57:5f:56:
aa:95:6b:dd:70:bd:3f:0c:37:7a:50:44:cf:b3:06:3e:7a:c6:
57:94:cc:7d:02:e0:8b:56:c1:c9:84:d4:78:b1:25:35:8e:70:
a6:ef:ff:64:8f:f0:a3:6b:ad:1c:e5:72:9b:9a:b8:de:22:44:
83:1b:21:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:37:41 2025 by rpki-client