Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/vGsbiSciiC6yN_3ytnhi1tVPJWw.roa
File: vGsbiSciiC6yN_3ytnhi1tVPJWw.roa (raw, json)
Hash identifier: MUY/CHz166/wzsxGVp71BURlh0USoc07v/PrneQHJuM=
Subject key identifier: BC:6B:1B:89:27:22:88:2E:B2:37:FD:F2:B6:78:62:D6:D5:4F:25:6C
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vGsbiSciiC6yN_3ytnhi1tVPJWw.roa
Signing time: Thu 15 Sep 2022 02:43:25 +0000
ROA not before: Thu 15 Sep 2022 02:43:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 192.72.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3183 (0xc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 15 02:43:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BC6B1B892722882EB237FDF2B67862D6D54F256C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:01:93:51:62:73:67:fd:e4:7b:6e:11:35:
61:76:a3:f9:98:86:ee:5a:b2:ee:b2:60:26:7a:d2:
fc:6c:82:ae:50:11:e6:33:cc:20:d8:1d:5b:cc:a6:
65:83:36:25:55:e7:8f:2f:98:3b:3d:5d:04:e9:aa:
c7:b1:a1:dd:be:57:54:b8:35:7a:59:f7:30:b7:10:
bb:99:be:1f:3a:59:f7:29:48:dc:48:89:83:7f:b4:
c4:87:ac:2f:43:eb:ad:9f:32:76:2c:93:ac:9e:d5:
3d:d5:5b:64:25:24:41:d5:9e:25:3f:6a:be:db:67:
af:20:25:b4:71:2b:e5:4e:5e:1e:9b:2e:40:04:8d:
77:b0:10:12:ff:a4:3a:a1:50:e3:80:21:1f:e9:64:
cd:ba:6c:49:45:86:16:ad:2f:16:ae:e7:ef:4a:f9:
7a:9a:93:5e:39:9c:75:c6:75:b7:a1:37:1d:2d:02:
ea:46:f2:9a:f5:da:d2:7d:fa:45:a9:34:3b:72:c8:
08:eb:30:2d:c5:58:0d:9e:58:86:6e:16:eb:0e:63:
81:f7:e1:12:64:9e:0e:d9:cd:89:83:ad:71:1d:e3:
bd:f4:a5:65:5f:a6:a1:d7:ec:a8:a8:e4:75:01:67:
94:47:91:9a:f6:49:89:ef:d2:8a:09:e1:54:44:e2:
74:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6B:1B:89:27:22:88:2E:B2:37:FD:F2:B6:78:62:D6:D5:4F:25:6C
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vGsbiSciiC6yN_3ytnhi1tVPJWw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.32.0/19
Signature Algorithm: sha256WithRSAEncryption
34:88:29:1f:14:e5:b4:0c:8c:ec:a4:21:5d:0b:ba:2f:28:c9:
81:83:c1:54:02:32:76:09:2b:da:4a:1e:76:c8:eb:7d:6e:11:
b7:3e:6e:03:33:37:7f:aa:b8:9c:17:e4:cd:4e:03:f4:ca:a3:
97:2b:46:95:4e:fc:56:8f:56:ae:53:9e:5c:81:ee:38:3a:3c:
b9:7b:57:c9:5f:58:0c:23:ae:9b:5d:75:e6:7e:9d:1a:0a:6f:
03:8a:58:97:4c:6f:1e:04:cb:bc:e4:99:a2:a7:2d:e7:b9:2e:
a6:b5:32:9a:87:7b:f7:2e:30:c2:86:82:84:f0:cb:d1:81:9d:
7a:cf:11:cc:1d:33:00:36:da:4e:df:c4:ed:95:b2:74:cb:3e:
d4:ad:bf:5c:eb:fe:05:67:ad:9f:41:84:69:a0:2b:16:d5:3a:
ac:3e:7c:bf:fd:12:47:16:e2:f5:07:83:05:12:df:fd:45:8c:
94:41:3a:c6:c9:99:99:49:6c:35:6e:f9:68:a2:fc:da:68:b1:
b4:99:5f:c1:4b:6e:1b:e6:6d:a4:a1:14:86:38:12:e8:fa:1c:
ee:54:18:4e:4a:9c:d7:73:2c:5f:4e:b1:0c:86:0a:27:43:c8:
23:8b:6f:bf:d7:e1:da:41:d5:eb:b1:73:2b:58:f6:fb:cf:58:
35:89:11:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:59 2025 by rpki-client