Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/xBOKJgtJm0gA6R0cBVJL6a2DFQ4.roa
File: xBOKJgtJm0gA6R0cBVJL6a2DFQ4.roa (raw, json)
Hash identifier: 9XfBCIxTzOIjrMjmlRavLNWteaKH4+3q6mX6MobdtDI=
Subject key identifier: C4:13:8A:26:0B:49:9B:48:00:E9:1D:1C:05:52:4B:E9:AD:83:15:0E
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 12EA
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/xBOKJgtJm0gA6R0cBVJL6a2DFQ4.roa
Signing time: Mon 10 Feb 2025 14:08:53 +0000
ROA not before: Mon 10 Feb 2025 14:08:53 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131634
IP address blocks: 210.17.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4842 (0x12ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 10 14:08:53 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C4138A260B499B4800E91D1C05524BE9AD83150E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:09:a7:02:6e:47:d2:d9:4d:23:5f:08:40:
29:4d:e2:b0:82:b7:ee:de:c8:7b:37:e8:d6:86:46:
c6:69:92:30:18:7d:b3:b7:88:8d:1e:b7:69:ff:d1:
ef:12:7d:2d:d6:6c:97:93:e5:4f:2c:ed:95:5c:d8:
6e:9e:00:c4:4b:1d:fb:8d:70:e5:0d:c6:d9:f8:aa:
9f:04:50:36:a6:b9:7d:66:9b:e3:9f:73:a9:17:b4:
20:c8:a8:43:a0:4d:2c:9c:07:75:e2:f8:63:ee:a9:
68:aa:84:f4:1a:1d:97:ea:34:85:e3:18:78:67:6c:
6e:47:37:86:d7:9d:37:d0:c6:b3:9a:f2:98:8f:1e:
f0:f1:27:69:c9:9e:a8:e4:91:26:c6:30:f9:80:42:
b8:35:05:af:7f:0b:14:02:93:d6:93:f8:39:ee:ac:
f7:16:d7:14:f8:5a:c1:c4:e9:6e:bc:1a:43:f9:6b:
f2:bf:54:d7:5e:c2:7f:f2:ce:74:59:b2:3f:b7:15:
65:80:f3:e2:c2:78:4b:c5:bf:d6:81:1d:03:b8:fb:
b5:5d:f7:9c:7f:01:44:fb:44:80:69:4d:70:e6:9a:
60:5e:53:53:07:77:8d:76:5e:7f:af:48:fa:de:21:
fe:3a:3c:73:5c:5e:5b:4f:e8:9e:3c:c3:f9:fc:c1:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:13:8A:26:0B:49:9B:48:00:E9:1D:1C:05:52:4B:E9:AD:83:15:0E
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/xBOKJgtJm0gA6R0cBVJL6a2DFQ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.80.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b4:5a:d2:9b:26:cc:49:e4:4f:15:6d:c6:4b:cd:ec:23:b6:
27:82:79:2a:87:c2:c3:65:db:47:9e:04:c6:87:ad:f0:5f:13:
69:b7:51:79:c7:f8:25:b9:6e:57:b3:b5:74:ff:16:cf:05:d8:
8c:75:14:93:30:b8:c2:ac:02:eb:c6:cd:45:18:99:13:ff:45:
af:55:f9:d2:be:5e:f1:7c:62:90:f0:c1:15:9e:ae:73:8a:ba:
97:1e:d0:5b:e5:64:12:b8:e5:11:3f:40:65:de:e9:0b:6d:14:
8c:83:97:34:95:42:b5:9c:d5:6e:2f:15:05:54:3d:20:d6:7d:
ee:52:b7:2b:2a:91:d2:76:b6:17:a1:40:32:5f:78:3f:b5:0b:
1a:6c:e5:84:87:31:a3:fe:36:ef:6b:47:bf:b3:2d:96:5f:37:
e9:65:57:42:2c:f9:11:e1:80:c9:29:c1:fc:f2:da:8e:65:f4:
40:a1:57:47:f1:d0:37:ad:78:78:dd:05:c6:0b:de:48:31:6b:
14:af:3f:bd:16:bd:de:bd:c1:b7:7a:b3:b4:01:ed:9d:87:a5:
b9:74:86:e1:a2:7c:b5:b1:e3:19:03:23:94:cd:c2:a1:b6:28:
d3:2c:8c:0d:64:a0:ca:9d:17:03:e9:dd:37:2e:b7:d5:f5:b6:
af:09:97:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:46:57 2025 by rpki-client