Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/KGFI7R1JDXQgr0piA4Qvve6yDRo.roa
File: KGFI7R1JDXQgr0piA4Qvve6yDRo.roa (raw, json)
Hash identifier: HtYqNQUsZ9cKVqOMXnJW8Q6R75bKZE/Ca3wD4guyO0E=
Subject key identifier: 28:61:48:ED:1D:49:0D:74:20:AF:4A:62:03:84:2F:BD:EE:B2:0D:1A
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1004
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/KGFI7R1JDXQgr0piA4Qvve6yDRo.roa
Signing time: Fri 01 Sep 2023 09:37:37 +0000
ROA not before: Fri 01 Sep 2023 09:37:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24158
IP address blocks: 49.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4100 (0x1004)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:37 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=286148ED1D490D7420AF4A6203842FBDEEB20D1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:90:6f:29:32:2f:5e:16:70:7d:3f:58:b6:
99:e1:2c:9d:c5:80:5d:c2:0a:17:b9:a6:fb:e7:76:
ba:cf:c9:c2:f9:e4:8d:14:1a:e3:ac:85:38:92:f6:
5d:47:f7:2a:34:d2:d1:94:f4:72:59:0f:e1:e1:02:
f7:5d:33:89:77:ae:8b:cc:05:c0:ff:36:6d:e0:e0:
30:9a:06:f2:56:dd:71:31:f7:87:b8:ae:9f:5d:65:
dc:0a:23:3e:82:93:84:b8:70:5c:ad:eb:82:1e:bd:
cc:bc:51:3b:15:5f:3b:67:66:df:73:e4:94:14:a3:
bd:fc:a2:95:16:9d:d3:f5:5f:7f:23:a5:ec:8b:9b:
0e:2f:b0:2c:ce:99:54:bd:d5:03:ab:dd:d1:c3:62:
fa:ef:a6:7d:27:75:45:f2:6c:07:f7:cb:a4:3e:4b:
00:6c:e5:26:33:13:92:67:da:58:af:f9:9e:1d:75:
05:56:1f:66:79:5a:59:fc:74:e6:78:20:a3:18:e5:
ba:7e:f5:4d:b5:8a:85:e3:bd:e8:44:9c:10:62:e3:
3e:ff:98:80:58:9b:96:32:8c:f8:82:cc:59:c3:6b:
7b:54:e3:60:94:19:b8:97:06:56:7c:aa:5f:74:2c:
7f:da:2a:64:bf:77:58:00:59:da:a3:f1:ad:70:16:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:61:48:ED:1D:49:0D:74:20:AF:4A:62:03:84:2F:BD:EE:B2:0D:1A
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/KGFI7R1JDXQgr0piA4Qvve6yDRo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.216.0.0/14
Signature Algorithm: sha256WithRSAEncryption
74:b2:a2:3f:39:24:e1:91:5b:85:da:4e:ac:4a:5b:07:49:de:
b5:a3:70:a7:b9:6f:00:be:ba:66:c7:1e:97:16:86:57:b3:18:
5b:6e:d9:c5:bc:ac:b2:e9:b0:b2:4e:10:9e:45:ec:12:5d:01:
bc:d6:b0:dd:b9:3e:ae:da:2a:7e:09:54:d2:af:13:02:d0:d3:
7d:95:60:d3:c8:7b:95:9f:82:ef:75:f2:43:dd:9b:85:fb:d0:
12:26:36:b8:5e:a4:78:f5:fc:33:c3:de:10:6d:b2:07:5c:2b:
ea:dc:07:87:c8:a2:47:1a:fe:ee:7e:3e:49:83:0a:14:ec:f5:
cf:ac:7f:70:13:2f:f2:74:96:f3:0c:19:4f:a9:61:c2:26:47:
6b:5b:db:1c:20:a8:25:f9:03:47:8a:db:f1:c1:67:f7:b9:83:
94:f8:17:4a:19:0d:f9:6e:08:a7:16:49:9e:0c:17:fb:9e:0c:
b0:e1:64:8a:46:ad:5f:87:7d:28:32:6f:d5:86:6e:f0:75:b9:
32:70:b3:4b:5b:86:94:97:c4:3a:58:b4:19:ad:9a:f9:8f:2c:
a0:99:47:e3:b1:59:f3:10:1b:b5:fe:84:49:6b:96:b1:e9:e4:
65:11:5f:a5:77:e3:9f:3e:31:1b:62:3a:d2:5a:c1:de:ce:6c:
dd:4c:36:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org