Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/yUk0kIFkypL7qGO5e_b98Rzmf74.roa
File: yUk0kIFkypL7qGO5e_b98Rzmf74.roa (raw, json)
Hash identifier: V5tSoM4945Orkst7ggO/PJeQN5Dmpfds3IdJ1c7Jv5M=
Subject key identifier: C9:49:34:90:81:64:CA:92:FB:A8:63:B9:7B:F6:FD:F1:1C:E6:7F:BE
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0B75
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/yUk0kIFkypL7qGO5e_b98Rzmf74.roa
Signing time: Wed 29 Sep 2021 02:44:14 +0000
ROA not before: Wed 29 Sep 2021 02:44:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 192.72.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2933 (0xb75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 29 02:44:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C94934908164CA92FBA863B97BF6FDF11CE67FBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:cb:3a:3f:f9:c1:8c:94:0c:6c:5e:2f:00:
6b:a8:d0:1d:c9:6f:fd:cb:68:33:1e:1d:a8:49:00:
ae:64:49:79:d7:e3:b3:24:42:40:75:64:f7:53:85:
b0:da:b9:43:34:d0:69:18:82:bb:df:73:b1:05:f3:
8c:17:05:95:ac:9e:be:bd:12:74:e7:13:c1:af:83:
70:a2:5a:e0:e5:eb:9a:29:03:47:12:c9:b8:aa:44:
5c:88:34:a7:56:a1:eb:cb:89:4e:ca:95:02:eb:b6:
75:0a:4c:8f:fa:6d:b2:4a:e2:cd:72:d3:0c:14:68:
8e:24:e4:33:9b:45:95:7a:e0:a3:13:59:91:bd:99:
4d:6f:32:d3:3d:e7:68:e5:12:1c:7f:ab:84:33:48:
98:54:8e:f8:7d:6b:fd:87:e9:93:93:ec:9f:86:c5:
e1:94:a5:b5:40:fc:c9:06:9c:a4:dd:f4:1d:cc:40:
45:62:a5:ce:5f:f2:8b:b8:33:26:72:74:d4:1a:03:
cf:0a:11:47:45:15:2f:46:15:dc:e3:1c:50:d8:10:
e5:3a:f8:72:46:a0:b9:ee:b6:08:02:eb:08:75:eb:
1f:08:bf:db:ea:bd:bb:90:11:8e:23:65:48:f2:82:
6e:af:73:97:52:4a:16:88:a7:fd:c0:b6:f5:18:0e:
c5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:49:34:90:81:64:CA:92:FB:A8:63:B9:7B:F6:FD:F1:1C:E6:7F:BE
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/yUk0kIFkypL7qGO5e_b98Rzmf74.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.248.0/22
Signature Algorithm: sha256WithRSAEncryption
80:e9:f5:30:88:1b:ab:35:4b:d6:8d:c0:b7:76:d9:28:c1:75:
9c:03:cc:8f:ff:ec:f2:aa:02:6e:9f:6f:44:41:34:97:1d:65:
91:05:1f:c0:50:a0:5e:83:5d:c0:51:e0:34:13:8b:93:cc:c3:
d4:56:fd:54:c3:09:b2:a2:08:de:d3:09:f7:de:bf:20:6f:50:
f5:18:9a:d8:6c:ae:9b:c7:61:87:2d:a6:c3:f6:e2:6c:74:52:
da:4b:5a:2c:2c:0c:0f:34:af:91:dd:62:50:85:e0:40:cb:90:
60:80:37:8b:4a:23:76:c8:b9:db:2b:d5:e2:fe:06:80:c8:06:
b8:cd:8b:ca:d1:0e:e5:4e:45:98:2c:59:c4:e6:ce:59:b3:75:
13:22:f1:f8:82:49:c2:bf:c4:be:89:52:9f:91:2e:42:70:69:
89:04:65:aa:e5:de:73:f0:c5:f7:af:6d:7c:9b:bf:e3:88:2f:
91:77:93:c4:71:13:d6:da:af:5d:72:f2:32:5d:4b:8c:65:36:
9e:96:94:39:ec:a2:04:fa:d9:b7:46:27:27:4e:fc:c9:57:73:
96:48:20:4f:2a:f6:5b:f9:d3:d9:bd:0b:44:ff:8b:4b:25:06:
5f:42:1f:af:04:f6:35:0d:64:5a:3b:e2:55:e5:d2:c3:fa:7b:
48:f7:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:36:14 2025 by rpki-client