Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8HBi0iX0qkwtgkdM_uDMeJ2ArPI.roa
File: 8HBi0iX0qkwtgkdM_uDMeJ2ArPI.roa (raw, json)
Hash identifier: JHsAQpNBgqyACLUHQFikmg/MK1u+AqKJc7ltAt+Lqvs=
Subject key identifier: F0:70:62:D2:25:F4:AA:4C:2D:82:47:4C:FE:E0:CC:78:9D:80:AC:F2
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0F87
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8HBi0iX0qkwtgkdM_uDMeJ2ArPI.roa
Signing time: Fri 01 Sep 2023 09:36:58 +0000
ROA not before: Fri 01 Sep 2023 09:36:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 202.145.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3975 (0xf87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:36:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F07062D225F4AA4C2D82474CFEE0CC789D80ACF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:fe:36:79:1e:30:2b:58:d9:54:39:73:a2:
42:06:c4:79:6d:1d:9d:25:d5:0c:ec:d7:14:99:aa:
3e:82:a5:4d:89:10:2d:ed:11:1e:6c:2e:7f:a0:25:
e1:6f:cd:96:47:d1:c3:15:d3:88:25:ea:57:ae:b8:
ec:70:e9:79:ee:f4:66:ea:b5:3c:83:be:ea:78:77:
77:6a:56:10:31:3c:99:d5:a6:37:99:fc:bb:1c:38:
a4:9b:a6:96:c6:dd:84:a1:11:db:15:44:9c:3e:b5:
3a:39:36:de:f7:0b:41:5a:75:13:c2:1e:f0:35:61:
61:d2:7f:2d:0e:32:a9:4e:75:6a:73:41:09:f1:56:
f7:c2:72:a3:53:25:20:39:a4:6a:7b:a9:6e:c8:1e:
bd:25:71:56:8b:4b:88:e9:79:25:0f:a8:0c:72:3a:
36:6b:0b:30:60:31:3e:c2:18:03:3c:e9:28:ac:12:
54:47:d3:e6:74:66:89:0b:39:3a:d5:7f:9b:0d:4c:
6a:f1:94:e4:8d:dc:b0:db:43:36:1e:9e:e9:19:0d:
c4:2a:7f:fa:77:aa:81:25:c2:8f:3c:ff:d7:69:3d:
82:4f:00:9a:0d:84:1f:03:1c:69:7e:1d:54:ba:b1:
03:08:7a:4c:6d:05:95:14:bc:53:2e:d2:82:10:4c:
4a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:70:62:D2:25:F4:AA:4C:2D:82:47:4C:FE:E0:CC:78:9D:80:AC:F2
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8HBi0iX0qkwtgkdM_uDMeJ2ArPI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.145.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4c:61:a5:de:4b:7f:6e:e9:32:08:2c:76:4f:38:e7:4f:08:c4:
03:58:43:99:d2:dd:8e:61:c7:c7:0a:61:b0:43:1e:6a:7d:1b:
8b:da:79:cb:9f:bf:4f:54:9b:1c:56:df:66:09:40:1d:0e:15:
84:80:62:4c:63:85:c6:1e:a8:f5:e7:8c:0c:bf:94:c0:ce:5b:
35:20:16:0e:f7:9a:97:4b:e6:23:16:94:d1:5d:7f:47:9d:6f:
4c:31:77:0c:f0:ee:57:42:06:de:28:69:57:50:86:fe:9f:7e:
72:98:eb:5b:34:82:bc:e5:1f:18:b8:11:a9:f8:43:70:ba:6b:
17:ec:18:c5:9d:6e:27:54:c6:8c:54:b3:9f:87:e5:7c:9d:dc:
79:f1:7b:32:43:2a:39:58:fd:ba:f2:2a:ce:ee:8e:e2:e1:34:
53:54:2d:e2:2e:a5:be:fe:ca:1c:34:08:3e:5c:7a:e5:22:86:
54:af:3f:d9:0a:3c:55:b3:d5:7b:f0:f1:8d:ba:45:61:55:42:
49:84:c6:46:12:67:ae:4a:e9:76:20:e8:c1:c1:08:ed:6e:09:
61:49:f7:d9:b5:0c:b2:f3:00:ef:c8:21:17:2b:b8:86:dc:29:
a6:21:79:94:27:5a:2f:73:4f:a0:21:de:4c:25:f2:cd:6b:3c:
e7:c9:90:4a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICD4cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw
OTM2NThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYwNzA2MkQyMjVGNEFB
NEMyRDgyNDc0Q0ZFRTBDQzc4OUQ4MEFDRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0+f42eR4wK1jZVDlzokIGxHltHZ0l1Qzs1xSZqj6CpU2JEC3t
ER5sLn+gJeFvzZZH0cMV04gl6leuuOxw6Xnu9GbqtTyDvup4d3dqVhAxPJnVpjeZ
/LscOKSbppbG3YShEdsVRJw+tTo5Nt73C0FadRPCHvA1YWHSfy0OMqlOdWpzQQnx
VvfCcqNTJSA5pGp7qW7IHr0lcVaLS4jpeSUPqAxyOjZrCzBgMT7CGAM86SisElRH
0+Z0ZokLOTrVf5sNTGrxlOSN3LDbQzYenukZDcQqf/p3qoElwo88/9dpPYJPAJoN
hB8DHGl+HVS6sQMIekxtBZUUvFMu0oIQTEqvAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU8HBi0iX0qkwtgkdM/uDMeJ2ArPIwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvOEhCaTBpWDBxa3d0Z2tk
TV91RE1lSjJBclBJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
B8qRgDANBgkqhkiG9w0BAQsFAAOCAQEATGGl3kt/bukyCCx2TzjnTwjEA1hDmdLd
jmHHxwphsEMean0bi9p5y5+/T1SbHFbfZglAHQ4VhIBiTGOFxh6o9eeMDL+UwM5b
NSAWDveal0vmIxaU0V1/R51vTDF3DPDuV0IG3ihpV1CG/p9+cpjrWzSCvOUfGLgR
qfhDcLprF+wYxZ1uJ1TGjFSzn4flfJ3cefF7MkMqOVj9uvIqzu6O4uE0U1Qt4i6l
vv7KHDQIPlx65SKGVK8/2Qo8VbPVe/DxjbpFYVVCSYTGRhJnrkrpdiDowcEI7W4J
YUn32bUMsvMA78ghFyu4htwppiF5lCdaL3NPoCHeTCXyzWs858mQSg==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org