Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8umjHPQVInPoAkFeI-pcKl5qZvw.roa
File: 8umjHPQVInPoAkFeI-pcKl5qZvw.roa (raw, json)
Hash identifier: Fo2+r3BoQG2zLusQEdLs0Jrxl+I4/ZlMHR9kFVrFUZ4=
Subject key identifier: F2:E9:A3:1C:F4:15:22:73:E8:02:41:5E:23:EA:5C:2A:5E:6A:66:FC
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1321
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8umjHPQVInPoAkFeI-pcKl5qZvw.roa
Signing time: Mon 10 Feb 2025 14:09:07 +0000
ROA not before: Mon 10 Feb 2025 14:09:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 210.62.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4897 (0x1321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 10 14:09:07 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F2E9A31CF4152273E802415E23EA5C2A5E6A66FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:c5:ad:bd:b0:33:b7:ac:3d:f8:a5:4f:10:
80:65:11:d5:0b:19:41:f2:e0:d6:bb:58:dd:ff:e1:
db:a7:6f:52:d4:cc:4f:4c:ad:19:6c:bf:27:83:31:
54:c9:7d:dc:fa:be:66:f1:5f:93:66:e3:88:12:21:
ba:fb:73:b3:48:da:69:0d:18:15:9e:4b:f3:82:06:
d8:d0:ca:7a:2f:b0:c9:de:ae:3b:67:09:ef:c9:8c:
41:2f:51:89:8d:96:e2:43:4c:14:ae:d5:92:03:3d:
0f:48:4f:d4:6a:49:97:a0:5b:3f:19:12:bb:39:2a:
6e:3f:f9:0e:fc:31:50:b6:9c:90:31:fd:d3:d1:c9:
2a:08:bb:0c:49:e3:14:96:8b:25:18:49:3c:05:9c:
b6:27:29:93:59:f5:50:33:a3:b7:a7:99:49:73:86:
73:3f:c5:4a:71:af:92:9b:30:41:73:f9:b9:9d:55:
8e:d7:c7:30:c5:fa:8a:2c:35:71:a3:28:9c:be:49:
0e:65:2b:59:cb:a3:2f:96:1a:43:4b:7e:62:01:28:
3c:66:5f:74:56:a1:3f:7e:87:3c:84:2c:56:a1:1e:
f9:ce:0c:0e:2f:57:9c:42:1f:81:49:9c:2f:81:15:
f4:5d:c8:2e:43:b6:31:ac:e5:fb:da:9d:9e:1d:45:
8a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E9:A3:1C:F4:15:22:73:E8:02:41:5E:23:EA:5C:2A:5E:6A:66:FC
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8umjHPQVInPoAkFeI-pcKl5qZvw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:5f:a0:fd:be:1d:07:62:bb:87:07:0f:3c:fa:15:f5:94:90:
f8:60:9c:f5:57:d9:0f:98:3c:82:b1:e9:fc:da:37:b7:b4:1b:
95:38:3a:81:af:54:c7:67:2b:0b:6e:b4:6f:02:5d:aa:e9:2f:
41:1b:55:7e:45:5f:fd:b5:1a:cf:0d:fe:06:e9:29:a5:4e:85:
ae:1b:b8:eb:dc:7f:39:46:71:79:2f:7a:65:8d:1f:e2:74:ba:
aa:f2:4d:ed:3a:b2:35:a4:ee:30:80:08:05:64:70:b2:71:2b:
7d:1f:b4:c3:6c:17:50:3e:be:ce:55:62:05:19:90:b2:05:15:
8d:4b:42:77:df:1b:48:da:0d:fd:1d:60:32:f3:ce:c9:c6:34:
fb:98:ca:0c:be:44:fb:e1:93:0d:e0:3e:46:65:44:8e:34:46:
5a:64:3f:cc:bd:46:4a:1b:0c:5e:e0:c6:39:5b:ed:f8:89:49:
dd:16:4d:0e:02:98:3a:71:90:3a:9d:03:87:9b:8a:f5:3b:1f:
95:a2:6b:ee:90:b7:c5:c2:da:e1:d6:32:c7:bc:5e:b8:66:98:
84:32:33:6a:d7:e3:32:ce:53:1e:fe:0c:63:95:7f:c6:19:e6:
d7:a4:83:4d:4b:fb:32:09:f9:2c:ad:34:10:af:30:41:2f:0c:
6d:70:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:02:54 2025 by rpki-client