Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-qxSqBEr7tTsZr0kBSf7XD3Pabc.roa
File: -qxSqBEr7tTsZr0kBSf7XD3Pabc.roa (raw, json)
Hash identifier: ftHjsAo+8L1ylZgLlnmBt7AIhDA5mnTMDSm7U7Gfu7o=
Subject key identifier: FA:AC:52:A8:11:2B:EE:D4:EC:66:BD:24:05:27:FB:5C:3D:CF:69:B7
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FEA
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-qxSqBEr7tTsZr0kBSf7XD3Pabc.roa
Signing time: Fri 01 Sep 2023 09:37:30 +0000
ROA not before: Fri 01 Sep 2023 09:37:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 60.199.193.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4074 (0xfea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FAAC52A8112BEED4EC66BD240527FB5C3DCF69B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:37:a7:bf:45:64:88:aa:ab:dc:8f:42:f9:
81:65:d4:87:69:b1:79:5a:c3:21:04:c3:8b:c2:68:
6e:92:41:73:14:6a:7d:c8:fd:06:14:82:72:06:6a:
55:34:07:a0:eb:2f:d7:fc:c8:14:5c:b1:ea:f4:98:
98:05:c9:0c:87:02:8c:99:8a:d8:b7:05:88:0e:cb:
02:40:d9:d7:18:fa:82:fe:9c:4d:d6:ec:cc:51:ed:
1f:c0:df:09:56:4c:c9:bb:c6:e4:af:0c:ac:2d:79:
29:35:8e:84:f9:ef:ca:ec:4f:f4:e8:13:27:62:01:
f5:c6:3b:5e:ce:da:cc:73:42:05:79:21:bc:e8:2f:
27:d5:a2:b5:c5:ab:34:26:ef:9d:f0:d0:d4:5d:05:
88:28:1f:15:a4:c3:bc:71:ee:21:35:aa:b6:fc:b4:
af:f3:67:70:fa:e1:bf:c6:29:1f:e4:23:ee:64:8c:
a2:52:9a:6b:a0:92:9b:13:52:4f:ee:47:29:11:9b:
26:3a:a8:d6:c0:f1:be:ec:36:d5:16:d7:22:13:1d:
29:28:1c:9f:fd:9c:e9:49:40:e5:f6:db:a1:77:f2:
2c:cc:16:8d:42:c2:38:57:ab:fa:7d:5d:8c:00:0f:
42:a1:61:92:34:bd:32:0d:f0:56:b9:bd:a5:08:21:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AC:52:A8:11:2B:EE:D4:EC:66:BD:24:05:27:FB:5C:3D:CF:69:B7
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-qxSqBEr7tTsZr0kBSf7XD3Pabc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.193.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ad:95:12:1f:88:3a:82:d3:39:11:3e:d2:9a:88:51:0f:28:
ec:fa:39:24:71:2e:54:de:9c:9c:d9:f7:ee:3d:ca:bf:c3:4f:
76:92:7c:f2:ba:40:0e:75:30:04:b7:21:ec:11:b0:58:50:0f:
45:07:9a:62:89:e5:4c:e3:f6:c2:21:52:e9:48:55:01:fe:53:
23:ae:71:6b:38:bf:a1:9b:c9:a8:b6:e7:88:ef:11:82:7d:4f:
a3:29:7d:d7:4f:89:f0:f6:99:f6:a9:91:c0:62:f9:7d:7c:76:
af:95:69:08:08:c8:b2:9f:4a:3a:82:6a:e1:04:f7:bc:7b:76:
e6:85:09:95:e2:20:9a:a1:3d:a0:f6:c8:ad:c0:51:74:15:ea:
c1:30:55:e6:73:92:cc:49:b3:38:13:e4:a5:68:44:f8:b5:2f:
9a:50:28:5b:0c:20:cb:6f:d6:65:b4:ec:7c:36:4c:cd:00:53:
bb:0a:d8:4a:ab:4b:dd:2b:55:99:56:62:3f:4a:1e:06:f5:d7:
98:2c:b0:d5:a4:26:bb:ea:88:df:1c:5c:81:69:02:01:f1:46:
f7:b5:bc:9a:29:8b:7a:f8:ef:65:72:ee:9c:d5:38:2c:fc:bd:
d6:f1:78:72:f3:ca:5c:3d:33:6c:e3:40:1e:07:0b:34:14:b4:
b7:50:75:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org