Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/HulMGl7IpUvqMqC9wxS8-iXreZw.roa
File: HulMGl7IpUvqMqC9wxS8-iXreZw.roa (raw, json)
Hash identifier: ER62sthas77vCy70pN335+1qXi+3SgdqsgwdhGtiakM=
Subject key identifier: 1E:E9:4C:1A:5E:C8:A5:4B:EA:32:A0:BD:C3:14:BC:FA:25:EB:79:9C
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1322
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/HulMGl7IpUvqMqC9wxS8-iXreZw.roa
Signing time: Mon 10 Feb 2025 14:09:08 +0000
ROA not before: Mon 10 Feb 2025 14:09:08 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 210.62.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4898 (0x1322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 10 14:09:08 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1EE94C1A5EC8A54BEA32A0BDC314BCFA25EB799C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:ad:87:89:3c:e4:81:0f:db:8c:87:87:3d:
5c:ff:8e:73:a7:47:4a:d1:3c:8a:7a:31:47:24:7d:
a8:3b:fc:67:63:7e:60:ee:10:5c:19:83:eb:d3:0d:
dd:e8:24:70:ed:a3:9b:33:c9:38:8e:5a:5b:f3:e1:
64:a1:6f:1a:98:6b:b6:97:99:5b:c6:74:49:c9:c0:
aa:84:79:aa:62:2c:58:88:2e:0a:c0:3d:f3:99:46:
b7:41:93:cd:3e:5d:f5:9b:fb:d7:01:4e:86:e1:62:
bf:f0:e7:3a:a9:63:d9:cb:46:19:93:52:e0:c3:46:
c2:2f:41:a6:1e:72:c2:cf:81:4a:13:6b:c5:b2:df:
eb:e0:65:11:3e:8a:e5:6c:29:63:0a:65:d5:a0:a4:
29:dd:17:69:fb:be:83:70:24:e3:d4:aa:ab:39:37:
de:33:be:16:ba:fd:b9:3b:eb:c7:ba:83:37:27:4a:
20:33:c4:7c:3c:7d:68:11:32:92:bc:0d:01:11:87:
4c:bc:45:a2:fa:68:ba:6a:c9:c4:ef:06:7d:99:02:
b1:be:82:7c:e7:d4:c2:56:03:47:c0:65:c7:80:da:
f5:d1:e1:fe:32:3d:de:21:e2:27:ae:60:b3:68:a9:
da:15:f6:bc:1a:0b:a6:f3:84:10:d6:87:ca:0b:ae:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E9:4C:1A:5E:C8:A5:4B:EA:32:A0:BD:C3:14:BC:FA:25:EB:79:9C
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/HulMGl7IpUvqMqC9wxS8-iXreZw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.32.0/19
Signature Algorithm: sha256WithRSAEncryption
34:36:e5:63:ba:9a:69:f6:42:5f:f5:ad:d1:28:cd:52:63:0a:
9f:35:13:d6:f2:1a:7e:d7:29:c9:ce:0d:4c:e7:03:be:a8:04:
08:d7:f4:60:52:d2:3b:a0:78:d0:f5:c1:2c:24:36:75:67:ef:
c3:83:67:9c:9f:fe:03:af:37:85:b6:02:d0:d4:40:17:1f:08:
aa:c2:dc:ad:c5:a6:1d:d5:d7:7c:dc:e7:3f:b8:15:a0:13:23:
bc:48:c2:dc:80:82:29:49:64:75:da:9e:5e:01:2c:35:26:9e:
e3:3d:62:8b:87:b6:10:b6:9e:6d:5a:6d:6d:58:94:39:64:47:
ff:a5:72:27:cd:8e:2d:26:ed:1d:80:5c:7c:b8:16:bb:21:c6:
cd:44:ef:81:0b:4f:48:e8:0a:77:ec:3b:dd:65:8f:6d:d6:e9:
cb:82:76:6f:d5:2c:9c:69:51:39:a0:32:01:ae:bd:76:d3:6b:
38:60:cc:13:8a:82:b9:f8:37:ca:5c:12:e5:94:7a:2d:c4:31:
2a:83:75:13:1b:95:36:87:1c:b7:6f:50:c0:dc:4e:a7:d5:5d:
88:ae:4e:6d:35:bc:7a:12:7e:f0:66:a4:3a:79:94:3a:cb:87:
c3:3f:f4:a2:4a:09:b9:84:df:2a:22:e5:a5:17:0d:d4:d2:3f:
65:fb:01:f8
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEyIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx
NDA5MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFFRTk0QzFBNUVDOEE1
NEJFQTMyQTBCREMzMTRCQ0ZBMjVFQjc5OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSoK2HiTzkgQ/bjIeHPVz/jnOnR0rRPIp6MUckfag7/GdjfmDu
EFwZg+vTDd3oJHDto5szyTiOWlvz4WShbxqYa7aXmVvGdEnJwKqEeapiLFiILgrA
PfOZRrdBk80+XfWb+9cBTobhYr/w5zqpY9nLRhmTUuDDRsIvQaYecsLPgUoTa8Wy
3+vgZRE+iuVsKWMKZdWgpCndF2n7voNwJOPUqqs5N94zvha6/bk768e6gzcnSiAz
xHw8fWgRMpK8DQERh0y8RaL6aLpqycTvBn2ZArG+gnzn1MJWA0fAZceA2vXR4f4y
Pd4h4ieuYLNoqdoV9rwaC6bzhBDWh8oLrl0FAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUHulMGl7IpUvqMqC9wxS8+iXreZwwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvSHVsTUdsN0lwVXZxTXFD
OXd4UzgtaVhyZVp3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BdI+IDANBgkqhkiG9w0BAQsFAAOCAQEANDblY7qaafZCX/Wt0SjNUmMKnzUT1vIa
ftcpyc4NTOcDvqgECNf0YFLSO6B40PXBLCQ2dWfvw4NnnJ/+A683hbYC0NRAFx8I
qsLcrcWmHdXXfNznP7gVoBMjvEjC3ICCKUlkddqeXgEsNSae4z1ii4e2ELaebVpt
bViUOWRH/6VyJ82OLSbtHYBcfLgWuyHGzUTvgQtPSOgKd+w73WWPbdbpy4J2b9Us
nGlROaAyAa69dtNrOGDME4qCufg3ylwS5ZR6LcQxKoN1ExuVNocct29QwNxOp9Vd
iK5ObTW8ehJ+8GakOnmUOsuHwz/0okoJuYTfKiLlpRcN1NI/ZfsB+A==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:52:58 2025 by rpki-client