Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/FHDxlq3DX0iAz31IoiVLtu8sYy0.roa
File: FHDxlq3DX0iAz31IoiVLtu8sYy0.roa (raw, json)
Hash identifier: v9W7uTZsn0UYUv2oPRVvhDKLnZJf286TkvUTpaeKtAE=
Subject key identifier: 14:70:F1:96:AD:C3:5F:48:80:CF:7D:48:A2:25:4B:B6:EF:2C:63:2D
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0F80
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/FHDxlq3DX0iAz31IoiVLtu8sYy0.roa
Signing time: Fri 01 Sep 2023 09:36:55 +0000
ROA not before: Fri 01 Sep 2023 09:36:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 203.77.50.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3968 (0xf80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:36:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1470F196ADC35F4880CF7D48A2254BB6EF2C632D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:ae:cc:72:f9:4e:50:06:da:78:73:07:8c:
70:a0:9d:33:74:48:f8:a6:e8:7b:1a:40:4b:ce:66:
ea:52:ba:f4:6e:60:06:f9:3b:0b:3f:31:7c:b0:9e:
f5:cf:07:41:f0:b4:d1:98:4e:81:2f:94:f5:99:9e:
a8:28:4d:b9:83:3a:83:2a:64:b2:e5:3d:f7:c8:13:
07:17:4e:db:51:fd:27:68:47:c6:0a:7f:6b:08:6b:
52:f5:44:ac:46:84:06:e0:41:8a:ad:81:4e:cb:27:
b3:57:70:7c:ac:e9:26:fb:d8:5f:c7:95:2c:7a:5f:
10:2f:a9:9a:5a:8c:f1:16:94:c6:0e:78:c6:af:9c:
c5:5d:e7:fc:52:a9:f5:02:c0:a8:58:61:6a:44:0b:
20:d6:27:0c:c1:f2:69:13:a0:ac:79:a7:85:0f:23:
a5:4d:44:cf:18:12:b1:e0:19:0d:bb:15:b2:bc:72:
fb:de:04:a4:80:71:de:6b:66:d9:cd:ba:9b:ad:d2:
34:78:52:37:72:31:6a:f0:e7:4a:d7:e9:b3:4d:10:
94:2c:b4:ec:04:82:c8:ef:f2:6a:b1:55:71:0d:fe:
95:70:68:0c:c8:87:01:a2:07:d8:44:25:18:e9:2f:
5a:ec:56:f0:1b:ad:3c:4e:1f:4b:88:b1:c9:86:07:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:70:F1:96:AD:C3:5F:48:80:CF:7D:48:A2:25:4B:B6:EF:2C:63:2D
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/FHDxlq3DX0iAz31IoiVLtu8sYy0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.50.0/23
Signature Algorithm: sha256WithRSAEncryption
49:39:ef:05:6e:1f:0c:a1:a4:81:d4:7b:bc:19:3b:9c:5c:1a:
5b:4f:54:c1:c3:ba:73:a9:ed:89:5b:bf:a4:89:ef:64:ed:c8:
4e:c5:6c:5e:08:e8:0a:92:09:9e:5a:55:4f:03:39:a9:ba:05:
e5:64:42:07:b3:c1:74:f7:f2:7c:58:79:fd:d1:99:b4:80:43:
2d:9d:62:67:ab:5b:9f:78:87:34:86:66:09:47:04:4c:77:17:
ed:70:51:a9:08:db:19:f7:75:e7:e7:19:8a:d7:fe:41:f1:bb:
db:a9:fa:26:3b:c3:55:43:14:b6:91:1e:e2:55:59:11:f9:a4:
16:1b:27:20:b0:7a:db:1c:e2:4f:2e:e9:c6:59:de:ef:a3:d1:
50:99:ac:b2:ba:00:73:57:03:62:7f:79:0b:a6:8b:57:b8:9c:
b1:e0:a6:a1:49:60:20:12:ae:45:be:96:79:02:74:2b:6b:f6:
a3:8e:36:f8:e7:ec:8e:cb:fd:62:1b:06:21:c4:07:00:46:6a:
42:08:ff:a7:58:c0:47:f6:3d:8c:ae:0c:d2:65:0a:8e:d5:c4:
ce:bb:d6:db:5d:d6:3d:be:ef:da:f0:d7:08:73:c1:ec:af:8c:
6a:66:0e:ff:1b:67:79:70:78:7f:ee:68:50:28:92:0f:40:8b:
b7:5b:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org