Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8exa7LX7grD_D5c0wUNNQqRJaDA.roa
File: 8exa7LX7grD_D5c0wUNNQqRJaDA.roa (raw, json)
Hash identifier: 1h0kIRfsiguwlZ8KoT8EqvoGb/8jw/CvFhuKJ45KI/E=
Subject key identifier: F1:EC:5A:EC:B5:FB:82:B0:FF:0F:97:34:C1:43:4D:42:A4:49:68:30
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0F74
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8exa7LX7grD_D5c0wUNNQqRJaDA.roa
Signing time: Fri 01 Sep 2023 09:36:51 +0000
ROA not before: Fri 01 Sep 2023 09:36:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 210.17.100.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3956 (0xf74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:36:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F1EC5AECB5FB82B0FF0F9734C1434D42A4496830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:71:a5:bc:2c:d6:4d:b5:4f:93:9a:42:2b:
5f:55:44:e6:00:d4:06:0c:1e:92:cd:6b:bc:11:5d:
3f:89:1e:fe:3e:84:f1:4f:18:55:be:5a:ef:02:c4:
d9:ca:84:7f:e8:85:a0:c6:ec:a1:fd:e7:35:ed:37:
33:5b:ac:77:51:4d:1e:17:ef:14:ab:76:82:de:6f:
a1:c7:15:a2:30:cc:b3:b9:87:ef:0e:e5:f6:dd:68:
ae:0b:39:c3:71:07:c9:ee:cf:4d:18:54:06:49:1c:
2e:88:94:cf:28:9b:b7:cd:8c:1c:f6:d4:e6:d7:b6:
b5:e4:2d:0e:f3:56:95:75:e0:b9:c3:42:17:6d:2e:
c9:5d:84:4f:5f:3e:1d:b6:92:06:cf:66:0a:74:ab:
f9:2f:90:3e:ab:ea:94:ab:49:1b:6f:01:80:bc:8b:
a6:2e:1c:e8:0b:e8:87:7f:65:6e:dc:80:1f:99:10:
82:9d:83:c7:93:fc:95:ff:aa:a8:71:8a:90:e0:99:
56:30:14:65:d5:93:74:e5:c2:c8:98:59:10:da:2f:
1e:7d:0b:47:a8:b3:8e:e1:53:7c:03:f8:19:a2:fb:
e8:79:ce:bd:81:3e:ca:43:9f:2a:db:10:a7:9b:9d:
57:c1:da:71:44:7c:85:fc:23:3b:d4:50:68:ac:19:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EC:5A:EC:B5:FB:82:B0:FF:0F:97:34:C1:43:4D:42:A4:49:68:30
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8exa7LX7grD_D5c0wUNNQqRJaDA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.100.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:24:5e:80:a2:94:42:37:40:cf:78:6e:dc:09:fb:ea:73:b7:
52:35:f8:1d:8d:15:b0:63:98:cd:34:0c:a7:4c:5b:c6:e1:df:
23:b1:9e:66:f4:4a:9b:ca:9e:3c:d9:80:ac:4f:85:f9:03:2b:
ed:b1:39:c9:ec:87:4a:5f:30:84:44:e4:72:ba:5e:c7:01:b8:
32:f7:73:b7:b6:e4:81:46:b0:59:2d:ee:cb:bb:ae:ba:ca:7f:
bb:8a:9f:0e:a4:7a:1a:db:8d:68:0a:8c:dd:a9:4d:83:24:5c:
a4:ee:eb:e3:34:66:fd:b3:27:44:98:b0:53:ea:81:bd:13:33:
38:5b:67:b3:5d:58:0c:ad:1f:d2:30:26:76:f7:42:15:64:2a:
44:ce:c7:b0:49:61:6a:ad:24:4a:7f:18:af:a2:a5:96:9a:38:
c9:c3:41:76:ff:88:aa:b1:30:e5:50:28:29:03:1e:9d:e8:85:
a9:57:13:10:65:e0:cb:9c:6b:ab:6b:78:8a:0e:df:87:bf:c6:
46:b6:63:00:e0:74:9d:9a:39:8b:39:6e:d7:f2:75:7b:79:12:
e9:ea:1a:48:ee:bc:23:77:70:ac:15:79:9f:de:43:f6:9b:30:
b5:84:53:41:13:68:3f:43:ec:4a:84:65:dd:0d:37:f8:56:c6:
0c:8e:2c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org