Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-IhtUkBxLTUSKIhFWnDJc2SHgjQ.roa
File: -IhtUkBxLTUSKIhFWnDJc2SHgjQ.roa (raw, json)
Hash identifier: noebujE9J8DkGohqoOzvMppIrdjPxuz2LLRVnrGNKW0=
Subject key identifier: F8:88:6D:52:40:71:2D:35:12:28:88:45:5A:70:C9:73:64:87:82:34
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FEE
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-IhtUkBxLTUSKIhFWnDJc2SHgjQ.roa
Signing time: Fri 01 Sep 2023 09:37:31 +0000
ROA not before: Fri 01 Sep 2023 09:37:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 202.145.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4078 (0xfee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F8886D5240712D35122888455A70C97364878234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:1c:39:9b:50:49:3a:2c:89:21:dd:1e:7d:
b3:83:40:cb:95:f9:9c:53:ec:e3:f5:28:19:9e:2e:
6c:1c:31:55:cb:b5:31:e0:f2:c8:36:1d:53:38:c2:
76:c7:50:8c:5d:23:6b:2f:03:7d:09:c4:50:33:d2:
59:0e:8d:d8:cc:d2:e8:80:0b:18:53:32:bf:4a:1a:
f8:e7:2b:e3:77:3d:26:dc:85:9a:d9:2c:59:cf:6c:
41:67:3b:43:61:52:97:c4:32:da:9d:db:f1:25:64:
fd:25:00:8c:5f:f6:68:86:3c:f6:d6:5f:95:2b:7d:
a1:cc:b1:70:af:f2:59:1d:d9:5f:77:80:7a:b1:12:
bd:ec:85:a7:b7:46:f5:dc:e2:6d:6e:34:0d:e2:8f:
e5:a8:eb:1f:2a:e4:33:07:83:12:1c:36:c7:6e:d4:
55:ba:02:e7:5d:5c:1e:94:f5:18:99:6f:fd:6e:18:
51:6c:86:b2:27:ed:9c:8a:6f:74:e9:e3:6d:ca:5f:
40:fd:e0:ab:78:b5:70:66:18:17:9e:36:8e:51:51:
30:84:d3:76:28:4a:6c:16:4c:7e:e8:27:b6:14:82:
bd:63:50:c4:32:68:2d:61:a1:8b:cd:a8:4f:1c:70:
fc:57:1d:a3:48:2e:52:e1:c7:15:36:35:8c:c4:c3:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:88:6D:52:40:71:2D:35:12:28:88:45:5A:70:C9:73:64:87:82:34
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-IhtUkBxLTUSKIhFWnDJc2SHgjQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.145.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:f8:1e:30:c7:bc:08:70:45:d6:4a:f8:54:35:ca:04:6a:13:
09:a4:de:59:84:74:c6:a9:3a:9f:2b:6e:e2:2f:dc:dd:d5:18:
81:26:88:05:c8:93:82:1a:06:6e:f7:36:e8:08:01:63:14:6e:
26:c3:d2:1c:ae:f9:af:d1:f5:7b:6c:77:78:2e:f5:dc:3f:57:
f0:be:b8:a5:2c:47:cc:3b:3c:c4:e6:75:17:b8:38:27:45:2a:
3f:59:ba:2d:91:73:35:cb:c0:65:0b:33:af:0e:2f:fa:7f:82:
98:8d:af:89:6e:48:52:4f:09:33:d1:aa:10:b5:82:9d:c4:9d:
1c:9b:7d:97:0a:13:a8:16:93:22:e9:dd:01:24:e8:c0:81:3a:
32:e3:fb:ae:5e:22:64:de:00:39:9d:9a:fa:b7:65:ca:4a:6c:
86:1c:87:b7:73:08:4d:09:48:e0:10:af:3b:52:52:d5:f5:84:
07:98:d3:1a:f1:ef:6d:f3:b2:d9:94:3c:6e:0f:ac:35:73:86:
98:b0:bd:94:64:83:0d:1e:50:f6:68:88:94:c9:fa:5c:87:7d:
d6:2e:6c:f2:43:78:9c:c2:72:9f:23:a3:81:9b:57:58:72:e3:
10:02:67:3e:b1:04:32:f7:bd:f6:e4:df:16:46:6e:71:76:73:
cf:04:83:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org