Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/3d3Hm4FpIWGbO9OVP0yIwT_NrsM.roa
File: 3d3Hm4FpIWGbO9OVP0yIwT_NrsM.roa (raw, json)
Hash identifier: F2JIrFG5MgtmwUuL5kOS9fHNIUcLWCijCQHNxRPfMNE=
Subject key identifier: DD:DD:C7:9B:81:69:21:61:9B:3B:D3:95:3F:4C:88:C1:3F:CD:AE:C3
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FFD
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/3d3Hm4FpIWGbO9OVP0yIwT_NrsM.roa
Signing time: Fri 01 Sep 2023 09:37:36 +0000
ROA not before: Fri 01 Sep 2023 09:37:36 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 210.17.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4093 (0xffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:36 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DDDDC79B816921619B3BD3953F4C88C13FCDAEC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:32:d4:70:e9:35:52:2b:a3:90:10:f1:54:7e:
58:f6:c4:bb:0b:c7:a8:0b:78:e5:19:a6:c1:e2:4c:
b5:28:cd:aa:e8:b4:5d:32:99:6d:e0:aa:ea:cc:3b:
7d:dd:37:fe:86:b7:fa:e7:53:c1:be:21:58:95:f7:
52:d0:ac:43:91:70:4e:96:0f:c4:5c:62:59:47:38:
40:15:fc:39:09:01:b2:03:f9:a2:a1:77:4c:cf:59:
24:28:de:6e:c1:ce:9a:58:84:e3:42:8c:d9:78:77:
91:92:6e:a8:11:a2:24:ab:da:3f:0e:6d:70:8c:1d:
b1:e8:5e:17:89:0e:64:64:4b:38:8b:37:c7:87:eb:
30:9c:d1:cd:5c:d2:fb:3d:02:4b:aa:3c:53:28:98:
8a:ea:1a:c1:ce:61:2d:5f:9f:a8:49:00:49:58:56:
fa:70:f7:a5:d7:02:f9:68:3d:07:1e:01:12:0f:54:
41:63:08:40:ab:48:db:86:4d:e3:86:7f:cb:f4:ef:
80:7a:5e:e4:06:61:63:de:f1:43:d4:6b:aa:05:6c:
01:19:ed:12:8a:68:8b:29:8b:31:65:90:0d:3c:bb:
d9:63:a4:dc:4a:2b:cb:1f:f1:46:4d:6e:c7:a9:16:
ad:64:0f:f3:e7:cc:9b:fc:60:f4:92:8e:99:1a:28:
c1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DD:C7:9B:81:69:21:61:9B:3B:D3:95:3F:4C:88:C1:3F:CD:AE:C3
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/3d3Hm4FpIWGbO9OVP0yIwT_NrsM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.0.0/17
Signature Algorithm: sha256WithRSAEncryption
13:d0:aa:31:e6:56:9a:9f:04:7f:e4:f9:75:42:e4:32:bc:09:
01:c0:7a:36:65:a8:83:5f:7d:60:96:22:cb:d4:7f:02:35:02:
19:17:47:39:c7:39:57:8f:90:85:3a:c2:68:98:8f:89:0b:81:
d1:d9:ce:f6:53:2c:c8:f8:08:ec:0f:3b:76:a8:c2:01:a5:c4:
11:1f:41:25:52:dd:89:c2:e3:9c:c7:79:15:1e:7f:c9:fb:09:
9d:80:04:33:73:ab:cf:b9:5d:15:98:52:0c:77:c3:be:9e:fc:
54:d8:b0:aa:e4:06:f5:20:2d:88:23:f6:61:41:dd:77:8c:af:
de:1f:9b:08:bb:29:f9:17:2e:67:e3:1b:00:70:98:be:be:98:
9b:70:88:bc:83:b3:4f:2b:e1:35:8a:77:2d:76:55:28:b0:73:
b7:b8:89:0e:b4:8b:52:ff:23:fd:2c:44:1d:ef:a4:2d:3e:1d:
13:b9:06:56:26:30:5c:46:88:44:c6:6e:9e:5b:c7:2f:44:42:
73:47:d1:4f:89:a1:46:cb:5c:d0:b4:8e:41:e0:51:71:9a:a6:
c2:b8:02:ba:9c:6a:f8:36:a0:72:1c:ea:2e:eb:77:ed:a9:ba:
74:85:ee:9c:be:c5:7d:e8:5b:91:e1:98:6e:a4:04:c6:15:e9:
66:ba:b6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org