Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1Q5l4MIko6r07vOSSCh4ntBE3E8.roa
File: 1Q5l4MIko6r07vOSSCh4ntBE3E8.roa (raw, json)
Hash identifier: Iee4SIuYBs0oVWAs723fWMRgjFN3MqVF2UiPj6jMJCc=
Subject key identifier: D5:0E:65:E0:C2:24:A3:AA:F4:EE:F3:92:48:28:78:9E:D0:44:DC:4F
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FD8
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1Q5l4MIko6r07vOSSCh4ntBE3E8.roa
Signing time: Fri 01 Sep 2023 09:37:21 +0000
ROA not before: Fri 01 Sep 2023 09:37:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131634
IP address blocks: 124.108.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4056 (0xfd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D50E65E0C224A3AAF4EEF3924828789ED044DC4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:35:8c:68:80:85:76:41:99:29:57:45:e5:69:
6d:3b:80:76:4a:f6:52:e4:8f:11:94:48:78:5a:0b:
69:dd:be:6b:1a:03:99:99:25:d4:e1:bf:a8:2d:56:
b9:70:a2:f1:11:a9:31:4c:bd:b7:a8:5f:21:87:e0:
3b:ab:da:87:d3:7e:e3:cd:6e:2f:a4:c5:a8:9b:03:
0e:12:39:01:5e:2a:aa:69:30:57:09:14:58:41:62:
51:da:aa:60:96:dd:71:87:e3:2a:a1:b8:3b:b8:c3:
9a:b6:c9:a8:b9:b7:e3:f6:fe:8b:7b:ad:1e:28:27:
e4:89:70:2e:41:e8:79:d1:4e:84:97:40:cf:98:6e:
1e:c8:b8:87:f9:83:a1:2a:53:3e:5d:08:cb:2a:60:
09:f7:fc:1b:3b:3f:69:52:a2:96:3e:83:80:ae:3a:
41:0a:aa:60:9c:0e:bd:cf:38:3d:a9:e0:d8:34:d5:
6c:cc:05:84:36:8d:72:46:60:fd:a3:78:60:a1:ad:
68:52:77:e5:92:dc:51:72:63:89:d9:c6:1f:23:6a:
6d:86:3b:7a:e9:3f:58:35:b5:8b:97:c8:5d:77:3b:
14:49:cb:97:17:58:e7:d9:31:26:c1:a0:2e:96:63:
53:1b:6f:22:4d:1d:87:0c:e1:e3:52:9e:fa:df:a6:
92:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0E:65:E0:C2:24:A3:AA:F4:EE:F3:92:48:28:78:9E:D0:44:DC:4F
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1Q5l4MIko6r07vOSSCh4ntBE3E8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.108.160.0/21
Signature Algorithm: sha256WithRSAEncryption
09:a2:01:62:ba:f5:82:24:64:d8:be:a2:3d:55:83:ab:0d:ca:
65:7b:b6:cd:65:1e:a0:dc:97:c7:12:48:23:94:dd:7e:f2:94:
ef:60:dd:42:13:98:ab:72:1c:77:ae:e9:eb:33:3d:48:63:1a:
64:c4:28:45:01:bc:34:45:b6:e5:b7:be:71:7e:f6:36:ff:9a:
92:78:5c:79:97:bd:ad:45:6b:40:05:6c:42:c2:a4:b9:38:7f:
eb:96:39:ca:23:58:0c:10:42:b6:df:0c:0b:7d:f4:25:b1:1a:
f8:4d:49:9b:b2:7d:6d:69:a6:44:57:20:7e:93:bc:72:1d:76:
6b:84:85:3e:1e:d6:78:0f:e3:c0:42:9c:e3:54:9f:9f:74:9f:
05:31:b8:59:28:7c:78:1a:ad:85:51:f4:bf:fd:2b:d5:94:49:
69:3a:3f:ce:76:87:f9:ac:59:21:a4:01:97:04:15:c4:c1:05:
37:57:05:da:21:10:b5:c1:c7:10:c0:fe:f4:a5:c8:34:b6:8b:
d2:88:36:00:20:a1:07:09:6f:76:a8:86:97:7f:50:90:fc:9a:
33:8d:a5:23:94:8a:c8:fb:c2:2f:ca:0a:87:a3:98:33:27:8d:
d2:e1:d3:58:61:2a:c3:c1:54:2a:5e:24:0e:db:1a:88:de:37:
5b:4f:95:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org