Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LRjG4p7Ji4uHQFdJI3zcdlJiLno.roa
File: LRjG4p7Ji4uHQFdJI3zcdlJiLno.roa (raw, json)
Hash identifier: fzLryh1rXWY0T/N6mR7iLRVD4ORs7cfdAzWdbUGeDBk=
Subject key identifier: 2D:18:C6:E2:9E:C9:8B:8B:87:40:57:49:23:7C:DC:76:52:62:2E:7A
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 134A
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LRjG4p7Ji4uHQFdJI3zcdlJiLno.roa
Signing time: Mon 10 Feb 2025 14:09:19 +0000
ROA not before: Mon 10 Feb 2025 14:09:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 13335
IP address blocks: 210.17.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4938 (0x134a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 10 14:09:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2D18C6E29EC98B8B87405749237CDC7652622E7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:8c:71:76:52:87:0c:01:5e:d2:57:e6:3b:
e9:9c:6e:79:14:9d:e4:1c:70:d9:1b:30:ae:30:e0:
93:90:8e:34:da:13:4c:a4:ac:a4:c1:61:bf:6a:ad:
34:d9:da:b6:c8:36:d2:9e:9d:79:15:64:4c:23:6d:
a7:28:fc:ff:28:57:86:bf:52:f0:4b:d5:91:95:dc:
6f:eb:77:e6:e2:a4:9a:fc:04:0a:06:fd:00:65:8d:
43:de:52:9c:e7:57:ab:d5:f7:35:18:5b:96:df:09:
b9:6a:7e:6e:02:a0:30:fd:4b:6e:15:97:9b:ec:ff:
03:c4:71:43:e2:df:ba:b7:a7:3a:78:4a:7d:6c:30:
54:ff:25:23:99:b1:09:f9:89:9a:63:f3:37:92:2d:
d4:d6:08:be:f3:d6:ae:f4:24:76:69:2f:60:d2:6a:
cb:92:a3:d2:96:41:bb:9a:ae:ac:fe:de:68:37:15:
92:2a:54:a1:76:16:54:53:81:fc:be:7b:59:66:0e:
76:ce:99:39:04:92:17:90:48:89:f6:73:fc:9f:02:
32:ff:59:66:32:5a:f1:33:b7:16:7e:09:e0:f8:03:
0a:da:ef:8f:a6:65:c9:69:49:9c:cb:c4:8e:ae:15:
e5:f2:ad:36:fe:c2:e8:55:e1:8c:47:0c:ac:57:a4:
63:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:18:C6:E2:9E:C9:8B:8B:87:40:57:49:23:7C:DC:76:52:62:2E:7A
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LRjG4p7Ji4uHQFdJI3zcdlJiLno.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.44.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:00:1f:1f:a2:e0:1d:a3:39:92:a0:3a:43:8a:e2:68:db:4f:
53:74:51:b5:62:21:80:1f:c9:27:02:fd:81:e1:43:7d:f9:29:
f8:40:0b:16:da:0d:52:c6:b7:8e:84:0a:69:64:d7:53:1b:14:
20:e6:3b:9a:8d:52:36:57:99:a7:7a:ee:a5:21:5f:73:66:ba:
e6:40:70:ce:9d:98:14:e3:d1:59:ca:b1:51:08:e1:3c:48:1a:
00:ac:5a:4b:5d:af:b9:3a:d4:c0:d8:c1:35:b0:69:77:f0:7f:
8b:e0:87:f8:d3:b4:d0:83:69:ee:4c:97:f2:41:5a:3a:91:4e:
61:27:1f:d0:da:9a:e1:d0:05:e4:0a:ec:7c:83:95:f6:3c:af:
84:d7:24:8b:e5:c0:3e:b0:ac:32:70:48:10:d9:0a:67:46:95:
49:1f:5e:06:d5:15:f6:2b:95:0f:f0:cf:77:f2:45:80:9b:76:
2f:61:dc:f1:3b:86:bd:9f:f0:07:e5:9c:8f:03:dc:aa:a5:09:
31:49:65:47:91:e6:e2:61:74:c9:5f:4e:00:91:e3:a2:08:95:
55:23:9f:1a:13:38:da:f9:6c:38:46:30:51:10:90:93:03:99:
87:5d:42:67:a8:05:4e:1d:90:8b:61:b8:98:71:2d:77:6b:31:
54:5f:1a:da
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICE0owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx
NDA5MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJEMThDNkUyOUVDOThC
OEI4NzQwNTc0OTIzN0NEQzc2NTI2MjJFN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGO4xxdlKHDAFe0lfmO+mcbnkUneQccNkbMK4w4JOQjjTaE0yk
rKTBYb9qrTTZ2rbINtKenXkVZEwjbaco/P8oV4a/UvBL1ZGV3G/rd+bipJr8BAoG
/QBljUPeUpznV6vV9zUYW5bfCblqfm4CoDD9S24Vl5vs/wPEcUPi37q3pzp4Sn1s
MFT/JSOZsQn5iZpj8zeSLdTWCL7z1q70JHZpL2DSasuSo9KWQbuarqz+3mg3FZIq
VKF2FlRTgfy+e1lmDnbOmTkEkheQSIn2c/yfAjL/WWYyWvEztxZ+CeD4Awra74+m
ZclpSZzLxI6uFeXyrTb+wuhV4YxHDKxXpGPzAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQULRjG4p7Ji4uHQFdJI3zcdlJiLnowHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTFJqRzRwN0ppNHVIUUZk
SkkzemNkbEppTG5vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ANIRLDANBgkqhkiG9w0BAQsFAAOCAQEAKgAfH6LgHaM5kqA6Q4riaNtPU3RRtWIh
gB/JJwL9geFDffkp+EALFtoNUsa3joQKaWTXUxsUIOY7mo1SNleZp3rupSFfc2a6
5kBwzp2YFOPRWcqxUQjhPEgaAKxaS12vuTrUwNjBNbBpd/B/i+CH+NO00INp7kyX
8kFaOpFOYScf0Nqa4dAF5ArsfIOV9jyvhNcki+XAPrCsMnBIENkKZ0aVSR9eBtUV
9iuVD/DPd/JFgJt2L2Hc8TuGvZ/wB+WcjwPcqqUJMUllR5Hm4mF0yV9OAJHjogiV
VSOfGhM42vlsOEYwURCQkwOZh11CZ6gFTh2Qi2G4mHEtd2sxVF8a2g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:58:45 2025 by rpki-client