Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/k9lCpM2JMeEx5e2RU01-C7qtJP4.roa
File: k9lCpM2JMeEx5e2RU01-C7qtJP4.roa (raw, json)
Hash identifier: b289ssZiOgJxCaPVFQSvPUkQCRaeuhHV/E3q4dPWtkU=
Subject key identifier: 93:D9:42:A4:CD:89:31:E1:31:E5:ED:91:53:4D:7E:0B:BA:AD:24:FE
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0F73
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/k9lCpM2JMeEx5e2RU01-C7qtJP4.roa
Signing time: Fri 01 Sep 2023 09:36:51 +0000
ROA not before: Fri 01 Sep 2023 09:36:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131611
IP address blocks: 124.9.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3955 (0xf73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:36:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=93D942A4CD8931E131E5ED91534D7E0BBAAD24FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5e:03:ac:d7:0b:69:bd:b6:96:92:e0:79:69:
51:49:16:23:2c:3d:e1:3e:d2:6c:57:c9:76:ec:cd:
a2:50:e7:59:33:1a:b3:e2:0b:50:a3:9b:89:55:c2:
8d:f2:1b:84:0b:35:d4:3b:e7:65:32:36:51:c1:5b:
51:c2:4e:68:94:fd:e9:8e:45:de:98:bb:30:f3:de:
b6:4c:ef:e0:7b:b0:07:dc:51:c9:f6:ae:b7:ea:d0:
c2:bf:f5:c8:2d:a8:53:07:ab:7f:7a:07:49:0d:6a:
4e:e4:71:b9:54:4f:81:cc:2b:e6:c3:b1:92:5c:76:
89:6b:99:c6:3e:82:57:2e:75:9d:c4:00:8e:19:31:
e7:f2:4c:6e:d8:98:b9:33:ef:2b:61:fc:01:f1:60:
cf:c0:55:75:c7:a3:84:85:7c:83:85:0e:0c:71:11:
9e:3f:47:e5:af:38:2f:96:f1:af:db:80:7a:70:25:
1f:3f:9c:fa:b1:61:81:4e:ab:d4:e0:20:32:e2:cf:
95:fe:13:d2:8c:a9:cd:8e:71:65:9f:ce:b4:7a:ab:
16:d8:2f:fb:fb:86:f0:0a:48:7f:1e:fe:40:71:09:
e3:4a:76:9e:b6:ea:6e:77:71:c8:ac:29:4c:9f:82:
e0:3c:f1:9b:f6:f4:30:93:fb:c6:eb:6c:db:b1:51:
8b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D9:42:A4:CD:89:31:E1:31:E5:ED:91:53:4D:7E:0B:BA:AD:24:FE
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/k9lCpM2JMeEx5e2RU01-C7qtJP4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.9.96.0/19
Signature Algorithm: sha256WithRSAEncryption
50:ec:98:e9:93:92:2d:01:58:f9:06:ee:86:42:b7:a9:87:34:
80:8e:1d:25:c2:66:eb:a8:ee:89:76:2a:97:b8:52:02:4d:69:
2c:61:7f:0d:ad:12:42:72:11:be:0d:a3:23:54:cf:89:4f:a0:
c3:84:a0:3f:de:ab:a7:d1:7c:ea:90:e6:28:7c:1a:f6:83:11:
04:c1:7c:20:a5:a5:dc:56:af:9a:96:bc:18:a3:f1:bd:60:2d:
cb:39:3c:4a:61:1a:66:b5:f6:45:b3:d7:98:fe:11:87:2e:be:
25:a5:81:19:81:b0:d4:3c:52:ff:c5:73:d2:bb:ce:d4:ad:de:
26:3c:6d:39:73:3e:14:a8:a4:90:32:d8:63:6f:72:cf:d4:e8:
01:d8:5f:1f:02:c8:6b:f4:70:7b:c2:43:59:7a:4b:2b:c4:aa:
b4:1d:64:29:38:9b:10:20:e3:20:aa:f4:d0:b0:eb:b7:2e:a1:
8f:fb:5c:47:bb:1a:0e:42:fe:db:0a:b7:b7:7c:74:5a:24:22:
e1:4d:bb:78:24:43:7a:2f:2a:84:58:e7:e3:ee:b9:67:a9:e4:
4d:c6:ea:8b:6f:49:1b:6f:27:41:da:31:da:6e:0e:82:19:0b:
42:8d:1e:58:3b:eb:a9:bb:5b:f6:51:c7:81:27:95:a2:a9:17:
e3:16:15:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org