Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-3mojNGovCNEkoYc8AAaXrYOhhg.roa
File: -3mojNGovCNEkoYc8AAaXrYOhhg.roa (raw, json)
Hash identifier: P3U43WRDdH+2w8X4l9fE15b3jQxarMelz383c25wM8w=
Subject key identifier: FB:79:A8:8C:D1:A8:BC:23:44:92:86:1C:F0:00:1A:5E:B6:0E:86:18
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0F8E
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-3mojNGovCNEkoYc8AAaXrYOhhg.roa
Signing time: Fri 01 Sep 2023 09:37:01 +0000
ROA not before: Fri 01 Sep 2023 09:37:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131634
IP address blocks: 124.108.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3982 (0xf8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FB79A88CD1A8BC234492861CF0001A5EB60E8618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:08:9d:16:9e:5e:e6:5a:5d:d1:3c:a8:db:
cf:c5:79:5f:09:83:ea:ec:ed:26:c6:ba:57:96:f5:
18:34:85:ce:e1:d6:ce:fb:e9:e7:ac:91:98:c2:09:
c9:15:ae:ec:73:81:9b:6a:c3:37:1e:b9:1f:7d:e8:
ff:22:26:76:81:ff:2b:05:56:3f:d1:62:a5:52:a0:
c5:03:64:cc:b2:a2:6d:4a:c4:79:da:73:5d:a9:0f:
ed:ee:b7:7e:1c:94:4f:ca:ee:69:07:6b:12:79:67:
7d:dc:81:2b:a7:dc:ef:b2:11:a3:33:32:c5:f4:5c:
77:ee:97:cc:59:0c:33:2b:fd:cd:67:71:b4:8e:91:
97:06:46:6d:10:0d:68:41:a5:db:04:25:32:88:9d:
c4:f4:e5:9f:fa:f7:be:6c:61:91:6c:f2:dc:53:f5:
96:b4:c7:a1:30:7a:ee:62:9b:04:8d:47:37:a0:16:
c7:98:0c:14:b1:1a:b8:27:b5:05:b6:eb:67:29:6e:
95:4d:b2:46:9d:40:5b:d7:54:ee:c2:cb:5e:74:fb:
a6:8d:ad:13:55:b3:ad:03:d9:1e:0c:7b:a6:43:ef:
f7:44:9e:74:42:01:27:f6:e8:46:be:46:47:de:14:
1a:3c:96:75:af:41:d5:04:f1:7c:40:0b:5e:f9:1e:
65:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:79:A8:8C:D1:A8:BC:23:44:92:86:1C:F0:00:1A:5E:B6:0E:86:18
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-3mojNGovCNEkoYc8AAaXrYOhhg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.108.174.0/24
Signature Algorithm: sha256WithRSAEncryption
99:95:fd:ab:35:5e:6b:ee:05:dc:9e:c8:da:2b:25:24:d6:a3:
67:e9:fa:bc:d4:ce:a7:ce:5a:a9:34:7f:e2:7e:27:aa:03:dd:
2d:c9:d4:a3:5e:3e:aa:4d:d8:1e:02:38:29:58:79:f6:f1:c5:
45:23:83:e7:9c:1f:48:3e:a5:d0:9c:22:56:b7:e5:0e:f0:36:
b1:93:7b:f4:c5:f0:fb:de:b9:77:98:c0:1b:49:af:b9:19:ee:
0f:05:c7:e5:ce:ed:7f:5f:b5:87:0f:13:fb:00:2a:9b:d1:52:
07:fa:5b:f9:5f:2f:e7:3b:b6:ac:1f:2a:6d:3e:71:09:60:11:
1f:dc:a2:84:91:bf:2a:b7:f0:a2:89:d5:7a:0a:36:06:16:a8:
13:bb:b5:30:e5:ae:73:18:4e:01:c6:b2:da:cd:49:ba:65:03:
3e:69:55:1a:88:64:84:8b:82:e8:19:bf:0a:67:ce:0c:f4:28:
2c:b7:b1:ad:f7:75:83:74:0b:bd:2a:58:90:58:3e:f9:a7:c8:
6b:88:08:c0:17:d6:57:d5:6f:93:2b:e1:5d:e6:9f:24:9e:a9:
73:d7:65:e9:c1:34:16:8e:b1:96:0d:22:fa:92:77:2a:fc:06:
e5:75:3c:b5:4e:34:4c:1f:44:59:b4:5b:8f:7b:29:a1:e6:44:
a5:80:60:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org