Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/J-75WF4BHjhghVZFHjr_XbMX6Ao.roa
File: J-75WF4BHjhghVZFHjr_XbMX6Ao.roa (raw, json)
Hash identifier: RGr0RBrOF/wUnkumGE+lsZfQo7XwZNf9mDcOP/Wl2JI=
Subject key identifier: 27:EE:F9:58:5E:01:1E:38:60:85:56:45:1E:3A:FF:5D:B3:17:E8:0A
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FA2
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/J-75WF4BHjhghVZFHjr_XbMX6Ao.roa
Signing time: Fri 01 Sep 2023 09:37:05 +0000
ROA not before: Fri 01 Sep 2023 09:37:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 210.17.35.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4002 (0xfa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=27EEF9585E011E38608556451E3AFF5DB317E80A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:80:8d:61:49:3d:38:4e:cb:e3:c7:cb:00:
30:91:23:c1:1f:a9:e5:36:52:62:d8:14:3f:96:28:
db:63:07:9c:f6:b2:3b:29:ca:b6:fc:bb:72:31:a5:
1c:7e:40:df:01:bc:d8:21:d6:d6:37:99:23:59:0e:
d9:e6:18:c6:ae:97:6b:74:11:f4:cf:a0:f1:65:25:
be:eb:bc:e9:91:6c:b2:30:d4:18:0e:17:e7:18:d1:
7b:11:6c:ef:99:26:d4:61:13:ae:f4:6b:1e:f2:97:
ea:05:b8:b8:84:ca:cb:0f:39:7d:3e:96:ca:cd:a0:
71:32:db:70:02:0c:ee:c6:48:ac:10:90:4f:a8:a0:
b0:0c:52:a1:08:b2:89:e5:23:82:b6:f5:e9:cb:8b:
e4:14:3d:10:4e:fd:30:46:ee:08:d5:0f:aa:b3:a8:
69:a6:4f:c3:31:da:f2:cf:62:78:ce:ad:c7:05:67:
55:c7:3b:54:4b:eb:db:30:8d:a8:a5:74:fa:bf:c9:
fd:12:a8:86:01:61:fc:dd:68:bc:f5:c5:da:59:cf:
89:5d:f9:4a:46:7e:23:3b:87:c8:2d:97:b0:ab:3d:
a9:cf:36:d4:4e:ef:51:03:61:d0:39:ee:0b:db:6b:
6d:61:ec:df:13:b6:5d:44:f1:c3:42:9b:64:94:99:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EE:F9:58:5E:01:1E:38:60:85:56:45:1E:3A:FF:5D:B3:17:E8:0A
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/J-75WF4BHjhghVZFHjr_XbMX6Ao.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:47:f1:d5:3b:32:73:10:3e:90:66:46:db:9b:ec:6f:cd:21:
c3:54:e1:7c:27:93:fd:46:5b:2c:60:06:c9:cf:22:55:b9:bc:
3b:89:7c:43:36:fb:ae:4b:52:8c:b7:ce:8f:8a:2b:5c:b0:9e:
9a:fe:93:51:65:84:49:ff:04:76:8c:08:6e:ca:ba:07:46:23:
01:5e:1f:7b:79:d7:58:dc:d0:42:9d:37:96:7e:02:7b:9b:b9:
26:50:48:ae:61:2f:b6:aa:10:c2:0a:73:ac:0e:16:30:4c:f7:
7f:cf:a5:0c:7a:1d:6d:ff:a2:3a:f6:71:b2:51:27:9a:b0:0f:
9b:92:86:35:34:3e:f3:85:9c:e5:9e:f4:f6:a6:4e:09:18:81:
4d:55:b2:8d:c1:d8:9d:96:4c:c4:6a:b8:41:96:d3:d1:fc:ca:
a1:bb:8e:f7:b0:bf:98:32:7f:4a:1b:f1:b5:85:20:78:1a:6b:
06:1d:16:fa:c6:ed:1d:eb:fd:4c:2f:ae:7f:81:a4:d8:27:86:
3a:3f:1e:c0:b3:0b:c6:dc:d7:92:1a:4e:e2:d6:8d:b8:1d:b2:
39:66:75:54:61:bc:9b:43:b2:07:f0:97:1a:b0:17:b2:30:2f:
f8:40:55:c5:ef:ea:1f:38:02:62:37:99:49:da:86:49:82:cd:
1d:64:df:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org