Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-GPUo83ipnsDsVo_LWIJVwzp-3M.roa
File: -GPUo83ipnsDsVo_LWIJVwzp-3M.roa (raw, json)
Hash identifier: G9qWx4jBUmubxXijK/sSWO/oIN6VnKum8/3sQzkUtCQ=
Subject key identifier: F8:63:D4:A3:CD:E2:A6:7B:03:B1:5A:3F:2D:62:09:57:0C:E9:FB:73
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 12B0
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-GPUo83ipnsDsVo_LWIJVwzp-3M.roa
Signing time: Thu 12 Dec 2024 03:09:40 +0000
ROA not before: Thu 12 Dec 2024 03:09:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131602
IP address blocks: 210.62.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4784 (0x12b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Dec 12 03:09:40 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F863D4A3CDE2A67B03B15A3F2D6209570CE9FB73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:6f:28:72:0d:5c:38:e7:92:a5:ff:8a:70:
73:63:43:6b:9f:60:4c:07:08:74:06:3c:bb:3e:47:
9a:b2:9c:ad:50:84:60:5d:d5:e0:e2:df:64:9f:1c:
84:99:e5:50:ce:4b:f4:98:b1:43:5b:59:45:3f:99:
68:07:d2:3a:1e:a3:ad:db:c8:eb:4f:ae:8f:a8:0e:
06:a8:f6:a8:2c:42:9e:23:36:70:cf:21:bf:22:64:
e6:59:cb:b7:80:bd:2b:3d:05:a6:ef:d4:8d:6f:fb:
77:cf:18:93:3c:a5:54:1c:d0:4d:43:b7:9e:a5:ef:
a8:6c:35:19:60:12:7d:1a:f7:29:b5:72:f8:6c:03:
28:93:24:ae:3e:60:1f:bf:c0:62:9b:15:d8:51:41:
cf:03:2c:a3:0c:6e:c9:0c:92:d7:1d:a2:f1:19:2a:
de:a2:86:57:28:25:f0:f7:4c:db:6e:54:1b:22:5b:
9d:c4:fc:10:40:52:84:d1:f6:b9:be:7a:d0:f4:3a:
fc:01:1a:15:50:e3:8b:84:35:0c:78:4d:8d:b4:ea:
21:94:66:07:bb:ae:a9:47:a2:27:e6:6f:84:f4:b3:
07:ae:13:8c:14:b6:d7:56:ab:20:7f:43:0a:fb:5f:
3e:61:81:6d:17:ef:bf:bf:b6:6d:a5:f7:d5:61:d6:
1e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:63:D4:A3:CD:E2:A6:7B:03:B1:5A:3F:2D:62:09:57:0C:E9:FB:73
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-GPUo83ipnsDsVo_LWIJVwzp-3M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.32.0/20
Signature Algorithm: sha256WithRSAEncryption
47:09:a2:42:dc:45:a4:5e:b3:77:2f:69:03:d4:a9:5c:06:24:
27:06:79:19:41:e1:02:95:36:80:fd:d9:cd:4b:a6:df:d7:9c:
26:1a:8d:47:be:96:e5:50:6f:33:73:5c:ab:78:0d:66:c5:0c:
54:76:73:39:ce:d8:57:a5:a7:18:0b:b5:f8:89:ea:92:a4:cc:
9a:d7:4d:84:b7:b9:97:17:18:ee:02:76:32:62:cb:51:47:94:
65:72:4e:15:3c:e0:e2:4f:4b:ef:1c:92:56:b9:d2:59:4a:f5:
7d:3f:f6:4c:37:fb:85:9d:cf:de:50:a3:d3:ef:ae:b5:47:9b:
8e:df:bd:89:7e:ed:75:a6:77:36:ea:4a:92:ff:b5:2f:c7:c0:
9b:ed:a3:ee:25:c6:9c:38:07:97:f7:71:18:11:30:75:4b:be:
f4:60:86:69:a9:38:77:38:2c:56:95:81:ff:61:a3:fb:d3:36:
27:80:43:9a:f3:e0:96:98:e2:37:a0:05:74:0a:6d:f0:2c:88:
67:64:1b:6f:c5:e8:57:43:28:55:f5:b9:73:33:cb:eb:fa:cc:
b0:47:dc:d3:77:72:da:df:3f:52:f5:9b:53:5d:18:0d:95:7c:
a4:d1:45:0e:43:1b:2b:d8:d6:d6:3b:3c:51:c3:10:50:96:c9:
83:f1:ad:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:05:01 2025 by rpki-client