Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/IfCQElDXarhwJAdI9wy22gAbu2Y.roa
File: IfCQElDXarhwJAdI9wy22gAbu2Y.roa (raw, json)
Hash identifier: 4sy9HnwHLy37Mkw1ed0IE87RcgipN/B5XCdAQk+MOoA=
Subject key identifier: 21:F0:90:12:50:D7:6A:B8:70:24:07:48:F7:0C:B6:DA:00:1B:BB:66
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1342
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/IfCQElDXarhwJAdI9wy22gAbu2Y.roa
Signing time: Mon 10 Feb 2025 14:09:17 +0000
ROA not before: Mon 10 Feb 2025 14:09:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 49.214.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4930 (0x1342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 10 14:09:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=21F0901250D76AB870240748F70CB6DA001BBB66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:62:ad:28:ec:a5:ca:d1:3b:45:b0:5e:6d:36:
b0:0e:9f:39:dd:76:85:8a:fb:56:62:43:1e:bb:ae:
1b:31:16:ff:16:11:7e:44:25:1a:a9:49:7a:02:48:
a7:26:81:27:37:ad:c8:b7:45:6e:43:13:ae:4a:a2:
ce:1f:a1:5e:6a:03:b4:d7:18:61:7f:a0:ce:da:b0:
3d:e2:af:de:ad:f8:e6:52:b9:ce:12:ce:2f:8f:7a:
2a:d9:6c:d5:9c:81:c1:5a:f2:a5:da:f6:1b:5b:96:
ba:87:65:f6:0f:58:12:e1:5b:0a:88:fe:76:86:60:
4a:82:5c:0b:b0:c8:5e:22:4f:13:39:52:1a:2c:27:
44:fa:d8:94:9f:71:ff:e7:57:d7:ca:c6:b4:49:ce:
1d:8c:f1:7c:ef:46:44:40:6b:5a:5e:2d:aa:45:7a:
98:87:df:fa:ee:84:cb:96:11:a3:9e:d3:fa:b8:05:
43:de:01:5b:05:f9:bd:b5:38:ec:dd:f8:60:03:42:
21:7d:81:3c:f2:e9:0c:52:03:ac:c2:26:8e:bf:93:
6e:d1:7c:24:d9:a4:12:82:36:87:c8:ec:f7:fd:2f:
f1:e3:a4:b0:87:c4:61:50:63:3c:56:c4:a0:a0:37:
1f:dc:ef:59:fa:64:3b:cb:8d:ac:2d:d8:b1:27:4d:
9f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F0:90:12:50:D7:6A:B8:70:24:07:48:F7:0C:B6:DA:00:1B:BB:66
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/IfCQElDXarhwJAdI9wy22gAbu2Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.214.0.0/15
Signature Algorithm: sha256WithRSAEncryption
65:73:8a:be:fe:4b:90:aa:0d:22:f6:fe:0d:8b:9d:bb:77:aa:
63:a9:ec:07:ed:43:e8:24:db:be:68:be:6d:cb:42:70:55:4a:
8a:4f:c6:43:45:eb:8d:00:52:60:c4:16:2c:9d:26:fc:4a:3a:
68:9d:dd:2d:4d:86:85:bf:3b:e1:b3:40:ef:0c:d2:db:d3:16:
d3:60:e1:86:35:14:f2:93:b6:e6:ff:07:b1:94:a2:15:bf:de:
57:a1:5e:be:1a:40:82:93:4f:ad:a2:ef:64:a6:f5:52:bf:9e:
d1:b7:2b:31:fc:78:d5:82:7c:bd:c0:28:82:2c:da:9d:fb:e9:
ef:ac:a2:80:17:01:f0:07:86:47:5f:e1:14:02:54:9d:2d:ac:
64:15:4f:84:b5:5b:b0:24:ec:4b:fa:66:c0:6e:64:3b:4b:f3:
76:ad:76:dd:0f:ba:69:83:f2:bd:32:c3:8f:37:72:ce:f1:4b:
ec:6b:f3:71:4d:e0:5a:f6:02:e8:25:68:b3:4b:22:7f:2c:13:
3e:58:0f:b3:b3:b4:11:59:fc:39:4b:8b:b3:ce:b8:e5:bb:0b:
e6:44:af:75:15:f3:37:7d:cb:a1:a2:de:58:a5:46:f1:22:50:
cf:14:f5:2f:78:70:ff:85:23:30:fe:2c:76:13:6f:ef:10:a4:
84:8c:50:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:05:26 2025 by rpki-client