Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I7C1uaSL2L71EI1GdJVqcwebpXI.roa
File: I7C1uaSL2L71EI1GdJVqcwebpXI.roa (raw, json)
Hash identifier: BKLKCp2ZtlwNa6taFKDAUKwnsk7iIrgihYZdWd0WiVk=
Subject key identifier: 23:B0:B5:B9:A4:8B:D8:BE:F5:10:8D:46:74:95:6A:73:07:9B:A5:72
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1209
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I7C1uaSL2L71EI1GdJVqcwebpXI.roa
Signing time: Mon 26 Aug 2024 05:24:38 +0000
ROA not before: Mon 26 Aug 2024 05:24:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 175.99.72.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4617 (0x1209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:38 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=23B0B5B9A48BD8BEF5108D4674956A73079BA572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:af:34:21:3b:4c:8e:f5:39:e7:4b:07:20:
99:69:e0:b1:33:3c:4f:6f:97:5a:16:5c:1c:99:86:
13:81:84:3d:5c:0b:5b:0c:29:5a:9a:cc:63:26:cb:
29:40:b0:06:c5:55:22:2d:7d:a1:21:4f:90:ef:57:
0e:94:d9:50:a2:be:4e:6e:3a:a4:10:00:6a:61:ee:
4f:8b:af:fe:da:b4:c0:b5:c1:d7:26:12:49:9d:00:
61:04:87:f7:ce:b1:3a:20:3a:ed:0c:42:0f:7a:83:
48:86:f5:6f:63:66:4b:73:e0:7f:ce:bb:0d:7e:7b:
c9:50:b8:10:00:9a:57:89:00:87:d4:11:08:d6:6d:
16:8e:ee:10:01:17:0a:61:fe:ac:f8:41:87:3f:7b:
f8:8f:a0:48:05:81:98:6f:72:fe:c2:34:07:34:78:
e4:68:c4:42:a5:08:99:03:ba:df:3f:29:d8:d0:0f:
d0:c1:0e:84:36:be:23:64:49:6c:de:9d:d6:ae:9b:
14:9f:d1:33:47:f8:2a:a6:aa:70:5e:df:91:b4:7f:
9c:39:ed:df:8b:07:c9:c0:ff:8f:fc:50:a2:72:9b:
b2:c7:74:bf:8f:22:9f:b1:76:42:3e:c1:3e:35:c5:
25:8c:32:30:45:8b:53:35:25:cf:e5:a7:6a:b9:9f:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B0:B5:B9:A4:8B:D8:BE:F5:10:8D:46:74:95:6A:73:07:9B:A5:72
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I7C1uaSL2L71EI1GdJVqcwebpXI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.99.72.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:5f:e0:b4:31:78:e7:be:30:aa:8b:9f:86:dc:b6:ae:16:ab:
b4:c2:b1:7e:e7:1b:e6:a6:64:b4:1a:ae:8d:0b:ac:05:3b:c8:
50:fc:36:d2:0a:a7:51:fc:df:86:e3:d4:76:b5:5e:98:c6:10:
7b:b8:8e:f7:30:a2:45:0b:9a:cc:4a:a7:e1:29:2a:72:49:de:
45:48:9e:4e:77:5d:95:1d:7e:d9:85:f7:c2:a1:e6:e3:dd:9f:
02:c6:b7:82:82:75:11:ed:72:24:56:c1:7f:83:40:ce:45:ac:
17:18:0d:b5:db:f9:a5:4d:58:ff:e9:a1:e4:11:f7:f9:12:5b:
32:68:1e:85:f1:19:20:fc:29:26:ce:64:9e:71:4a:ea:0d:cd:
bb:21:14:d7:99:2e:0d:cc:8c:9e:0c:69:25:0f:c7:bf:a8:a7:
c1:7c:52:a9:b4:ec:70:2f:ca:db:a0:7c:bf:61:48:41:9b:4e:
72:cb:d9:1e:ed:36:cf:f0:1b:69:4c:0e:c5:0a:28:ae:6d:4b:
d9:94:82:0c:2d:4b:a3:b2:7e:55:07:1a:41:c8:64:92:9a:79:
cf:34:1d:d9:59:9e:74:b9:3b:cb:27:69:e4:d2:76:7b:80:aa:
ef:c8:44:9c:9f:5b:3b:79:70:d7:88:06:db:04:e4:aa:73:21:
6e:71:e4:f9
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw
NTI0MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIzQjBCNUI5QTQ4QkQ4
QkVGNTEwOEQ0Njc0OTU2QTczMDc5QkE1NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtbK80ITtMjvU550sHIJlp4LEzPE9vl1oWXByZhhOBhD1cC1sM
KVqazGMmyylAsAbFVSItfaEhT5DvVw6U2VCivk5uOqQQAGph7k+Lr/7atMC1wdcm
EkmdAGEEh/fOsTogOu0MQg96g0iG9W9jZktz4H/Ouw1+e8lQuBAAmleJAIfUEQjW
bRaO7hABFwph/qz4QYc/e/iPoEgFgZhvcv7CNAc0eORoxEKlCJkDut8/KdjQD9DB
DoQ2viNkSWzendaumxSf0TNH+CqmqnBe35G0f5w57d+LB8nA/4/8UKJym7LHdL+P
Ip+xdkI+wT41xSWMMjBFi1M1Jc/lp2q5n6qNAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUI7C1uaSL2L71EI1GdJVqcwebpXIwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvSTdDMXVhU0wyTDcxRUkx
R2RKVnFjd2VicFhJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AK9jSDANBgkqhkiG9w0BAQsFAAOCAQEAi1/gtDF4574wqoufhty2rhartMKxfucb
5qZktBqujQusBTvIUPw20gqnUfzfhuPUdrVemMYQe7iO9zCiRQuazEqn4Skqckne
RUieTnddlR1+2YX3wqHm492fAsa3goJ1Ee1yJFbBf4NAzkWsFxgNtdv5pU1Y/+mh
5BH3+RJbMmgehfEZIPwpJs5knnFK6g3NuyEU15kuDcyMngxpJQ/Hv6inwXxSqbTs
cC/K26B8v2FIQZtOcsvZHu02z/AbaUwOxQoorm1L2ZSCDC1Lo7J+VQcaQchkkpp5
zzQd2VmedLk7yydp5NJ2e4Cq78hEnJ9bO3lw14gG2wTkqnMhbnHk+Q==
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:28:00 2025 by rpki-client