Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4XUQH2LRxoJUTnQw43owLAJkR00.roa
File: 4XUQH2LRxoJUTnQw43owLAJkR00.roa (raw, json)
Hash identifier: 70kFO7do6XvLkb9rRSwHKCwoCR6IAPIG2cha9t/6XlA=
Subject key identifier: E1:75:10:1F:62:D1:C6:82:54:4E:74:30:E3:7A:30:2C:02:64:47:4D
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1295
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4XUQH2LRxoJUTnQw43owLAJkR00.roa
Signing time: Mon 25 Nov 2024 03:05:04 +0000
ROA not before: Mon 25 Nov 2024 03:05:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18049
IP address blocks: 210.62.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4757 (0x1295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Nov 25 03:05:04 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E175101F62D1C682544E7430E37A302C0264474D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:31:82:54:d8:61:25:c1:99:5d:d0:f7:ea:
aa:3b:cc:1d:3f:51:b6:54:f6:77:8f:c7:cb:00:d9:
e8:c6:23:2f:d9:1e:1b:9d:85:8b:b6:b9:b8:f6:ec:
95:22:1f:bf:02:7d:5c:0c:70:fd:b8:50:a8:dc:c6:
5f:75:17:28:78:c2:02:5b:43:b4:d1:ca:a5:8c:2e:
76:2e:e7:cc:9a:bd:0b:c5:4e:59:c8:3f:fd:18:da:
8f:6d:78:34:2f:40:66:9e:79:07:82:41:28:90:77:
8c:9c:33:ac:f0:36:df:c1:55:cf:46:28:6e:2d:6d:
92:b4:13:d4:81:30:16:01:1d:25:aa:40:f8:39:93:
c5:4a:fd:cb:cb:4c:5a:e6:92:8e:d3:b8:8f:85:55:
85:29:8a:2c:e5:fc:4d:53:1a:12:9e:d8:93:fb:62:
06:24:22:fd:34:dc:54:e7:72:b8:ea:97:3a:14:4b:
cc:a3:f8:24:6b:7b:65:47:82:9b:3b:9a:7f:ac:15:
6b:62:1b:19:f6:db:c1:a9:d9:46:93:59:1f:bb:26:
8f:07:27:3e:8a:9e:33:12:6f:11:a2:63:b0:51:f0:
5c:ef:e3:ee:7a:3f:1b:ac:20:8e:a0:83:56:ff:67:
4c:a2:b3:71:83:3c:e9:83:23:aa:f5:e4:ec:2f:28:
73:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:75:10:1F:62:D1:C6:82:54:4E:74:30:E3:7A:30:2C:02:64:47:4D
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4XUQH2LRxoJUTnQw43owLAJkR00.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.208.0/21
Signature Algorithm: sha256WithRSAEncryption
32:5f:a3:23:d9:a5:47:56:98:ff:e9:40:19:1d:bf:36:6e:6c:
2f:cd:b5:bb:eb:5b:30:dd:cb:5f:9e:06:71:c0:07:5b:60:e4:
53:8e:79:f4:f9:2a:7e:3f:8c:88:db:3b:ef:f5:c3:94:41:07:
a9:0f:c2:fd:c7:c1:7d:ad:94:4c:1a:fc:72:3e:b1:75:50:7b:
6d:14:6e:d8:bc:f2:7d:5c:76:7c:b3:a1:03:59:d4:07:99:3d:
4b:4b:4a:84:b6:d0:2e:89:95:51:90:14:74:94:ae:d0:2c:77:
02:dd:40:dd:a9:f9:59:f8:3e:94:0e:56:d2:7d:83:a5:d4:2f:
c5:09:7b:13:60:3d:ab:cd:32:11:9b:6e:29:e9:08:5e:df:a9:
b3:36:7b:2c:3e:3b:89:5d:a3:96:72:69:2a:63:62:3e:49:1c:
99:eb:f2:f8:de:4e:c8:2b:a0:3f:28:b1:1e:9c:ab:03:d9:29:
ca:23:79:d9:dd:ee:49:e8:ad:34:96:9b:d7:3d:dd:8a:11:30:
43:50:c7:f8:11:bd:17:9a:e0:66:48:f6:d2:3b:ed:9f:cc:46:
83:95:fb:bc:31:4d:5f:b2:63:7b:6e:55:04:8b:48:39:f9:38:
83:fd:c5:36:c0:57:8f:62:8d:7d:f6:74:81:6e:5b:d1:fd:83:
f3:5f:20:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:59:18 2025 by rpki-client