Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ei6yQqeb16Z0TljBIlyW4SNqvsI.roa
File: Ei6yQqeb16Z0TljBIlyW4SNqvsI.roa (raw, json)
Hash identifier: hEHKGiKuw63QIW22mEsTbT4Q7pbPjVI6G84SKG7t1ek=
Subject key identifier: 12:2E:B2:42:A7:9B:D7:A6:74:4E:58:C1:22:5C:96:E1:23:6A:BE:C2
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FD5
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ei6yQqeb16Z0TljBIlyW4SNqvsI.roa
Signing time: Fri 01 Sep 2023 09:37:20 +0000
ROA not before: Fri 01 Sep 2023 09:37:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4662
IP address blocks: 203.77.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4053 (0xfd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=122EB242A79BD7A6744E58C1225C96E1236ABEC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:e8:db:58:0d:ed:0c:ef:cc:e7:38:11:b1:
dc:85:80:1f:21:e9:0f:f3:78:16:58:ed:f4:3a:9f:
c4:24:ac:90:eb:6b:4f:a1:3d:8f:5f:6c:c7:42:4e:
8e:55:9e:00:5c:8d:a8:af:b8:31:63:10:33:cc:d8:
88:bb:ee:e9:a7:9a:8a:d9:2e:49:ee:85:f7:78:93:
cc:18:62:d7:9e:e2:cf:0a:04:91:60:55:04:04:04:
b4:6f:d7:28:a8:e5:4b:53:2b:40:16:e5:42:3c:9b:
c9:0d:b4:cf:0d:bf:49:b0:ab:4a:69:d2:bc:28:81:
ea:be:bd:39:64:e8:75:30:d8:3f:71:99:97:3f:99:
fe:e2:f9:cf:93:f6:ba:00:39:51:ad:c3:e0:fd:f5:
0b:a3:1d:75:ef:c3:ec:a0:e9:7c:c3:b1:b3:14:c7:
27:f8:81:1a:a6:84:be:02:69:31:8b:b1:48:fc:9b:
9d:8e:d5:61:40:12:79:8c:ed:3e:30:b8:55:02:4d:
18:49:89:98:7b:92:b1:f2:12:84:d8:87:77:a1:85:
ff:02:8c:f4:15:c4:ba:d6:a3:ef:b7:aa:ee:7b:1f:
66:86:c2:90:f0:0e:3c:a7:4c:95:4f:28:c8:d6:74:
09:2f:51:c9:2d:94:00:b9:f7:d3:11:77:4c:55:7a:
eb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2E:B2:42:A7:9B:D7:A6:74:4E:58:C1:22:5C:96:E1:23:6A:BE:C2
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ei6yQqeb16Z0TljBIlyW4SNqvsI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.64.0/18
Signature Algorithm: sha256WithRSAEncryption
22:42:fa:79:db:fa:28:d1:1f:cf:01:78:f2:3f:1f:3e:73:b1:
7a:7f:45:91:a8:1d:21:9f:a7:5f:fc:72:9b:9a:27:db:86:a5:
b2:6c:59:b4:10:47:58:02:1c:b9:70:72:5c:c6:d0:0a:35:3c:
2f:38:e7:70:5c:10:9b:f1:de:20:74:e4:62:88:02:97:95:84:
50:b5:ad:a4:4a:20:cc:4b:e7:89:f3:af:52:06:d8:0f:f6:81:
ce:74:af:89:2e:6d:25:ec:80:7e:df:a3:fe:c9:b3:75:51:52:
24:9c:7e:1e:15:1c:fb:98:5f:bd:1f:31:54:9b:f1:5e:8c:89:
54:20:fa:69:62:ea:6d:9f:92:d2:c4:53:b1:40:fe:1e:39:c0:
35:8b:54:76:48:fc:0d:97:94:7b:f7:9b:86:04:30:73:7f:30:
b3:b8:13:4f:9b:9c:57:d9:43:01:d8:4c:63:24:e1:f5:16:e2:
60:ff:41:d1:bc:82:30:73:be:3b:c6:a3:aa:2f:64:55:8f:f0:
30:c1:a9:3d:c4:3a:7c:38:69:47:d5:83:8c:3d:30:99:22:15:
0a:3e:49:a4:01:c8:9e:45:a2:a8:cd:42:95:61:fe:5f:bf:00:
4f:a4:3c:ac:6a:00:9f:c5:c2:26:6a:16:7b:fc:e6:b2:d5:bd:
d5:d1:bd:70
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICD9UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw
OTM3MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDEyMkVCMjQyQTc5QkQ3
QTY3NDRFNThDMTIyNUM5NkUxMjM2QUJFQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCl0OjbWA3tDO/M5zgRsdyFgB8h6Q/zeBZY7fQ6n8QkrJDra0+h
PY9fbMdCTo5VngBcjaivuDFjEDPM2Ii77umnmorZLknuhfd4k8wYYtee4s8KBJFg
VQQEBLRv1yio5UtTK0AW5UI8m8kNtM8Nv0mwq0pp0rwogeq+vTlk6HUw2D9xmZc/
mf7i+c+T9roAOVGtw+D99QujHXXvw+yg6XzDsbMUxyf4gRqmhL4CaTGLsUj8m52O
1WFAEnmM7T4wuFUCTRhJiZh7krHyEoTYh3ehhf8CjPQVxLrWo++3qu57H2aGwpDw
DjynTJVPKMjWdAkvUcktlAC599MRd0xVeuu3AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUEi6yQqeb16Z0TljBIlyW4SNqvsIwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvRWk2eVFxZWIxNlowVGxq
QklseVc0U05xdnNJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BstNQDANBgkqhkiG9w0BAQsFAAOCAQEAIkL6edv6KNEfzwF48j8fPnOxen9Fkagd
IZ+nX/xym5on24alsmxZtBBHWAIcuXByXMbQCjU8LzjncFwQm/HeIHTkYogCl5WE
ULWtpEogzEvnifOvUgbYD/aBznSviS5tJeyAft+j/smzdVFSJJx+HhUc+5hfvR8x
VJvxXoyJVCD6aWLqbZ+S0sRTsUD+HjnANYtUdkj8DZeUe/ebhgQwc38ws7gTT5uc
V9lDAdhMYyTh9RbiYP9B0byCMHO+O8ajqi9kVY/wMMGpPcQ6fDhpR9WDjD0wmSIV
Cj5JpAHInkWiqM1ClWH+X78AT6Q8rGoAn8XCJmoWe/zmstW91dG9cA==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org