Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LjBirmh_B1GTLK7ZOskroRSv_Jk.roa
File: LjBirmh_B1GTLK7ZOskroRSv_Jk.roa (raw, json)
Hash identifier: od5CYERU8lUIHGbqC96nsB2P2IULtehrpMNji3EPHks=
Subject key identifier: 2E:30:62:AE:68:7F:07:51:93:2C:AE:D9:3A:C9:2B:A1:14:AF:FC:99
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FB6
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LjBirmh_B1GTLK7ZOskroRSv_Jk.roa
Signing time: Fri 01 Sep 2023 09:37:11 +0000
ROA not before: Fri 01 Sep 2023 09:37:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 60.199.140.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4022 (0xfb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2E3062AE687F0751932CAED93AC92BA114AFFC99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:7a:34:95:01:4c:05:7d:6b:b3:42:85:33:
47:d7:ad:be:c6:57:c0:da:07:b1:24:ab:66:fa:89:
63:f9:ae:ca:72:48:f2:2b:8d:ff:5f:83:45:18:d3:
c4:2d:1b:9e:31:87:c5:fb:66:81:1e:21:7e:bf:73:
18:4f:0d:cd:3c:17:26:5c:2f:df:3f:34:ef:5c:ad:
e6:e5:dc:74:4b:9f:f2:13:d4:60:34:03:88:9f:06:
b5:57:ae:df:f6:01:d1:65:2b:a6:91:3c:8f:5d:12:
35:3e:af:cd:1d:6e:ab:22:12:ad:01:d3:93:4c:45:
e4:8f:c0:4f:a7:96:3b:6a:fb:99:f8:a9:b9:a1:d2:
4b:30:66:98:8d:f5:1c:ea:b5:f2:47:3f:8c:b4:fc:
12:a0:ec:10:f4:57:df:91:f1:96:c6:2f:bf:2d:53:
12:df:08:a3:6e:bd:68:8b:69:51:45:07:20:f6:a5:
2b:e3:23:15:cd:f7:5a:31:6e:f9:1b:cb:a7:57:eb:
1b:24:8b:de:c7:52:63:55:d5:2d:7d:e0:0a:9e:a0:
54:21:f9:53:ac:e5:4c:43:6d:38:13:4f:11:38:56:
27:50:1e:de:92:af:d0:4e:e2:c2:40:79:a1:26:72:
a0:57:93:46:f7:24:5c:f2:1b:c3:19:99:3c:42:de:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:30:62:AE:68:7F:07:51:93:2C:AE:D9:3A:C9:2B:A1:14:AF:FC:99
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LjBirmh_B1GTLK7ZOskroRSv_Jk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.140.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:6d:ec:c5:60:f8:35:83:e5:de:f4:c3:da:45:54:23:58:a6:
a6:d2:89:97:d1:a2:30:d5:7b:2f:e1:22:7a:54:ae:fd:9b:9b:
39:49:31:f9:b0:8e:2f:ca:c1:39:8d:2f:27:f7:32:cf:25:a6:
39:a7:f1:af:ec:b2:04:0f:6e:1b:b8:e3:7b:eb:56:80:13:82:
64:05:40:7c:9a:59:4f:5f:a2:5a:af:6b:39:2f:23:fd:be:35:
ae:00:21:5c:1e:a1:bf:dd:f2:0b:ff:67:3f:7a:8e:c5:08:e9:
f1:61:fb:bc:12:15:26:52:e3:11:c3:41:16:a7:82:61:86:ad:
5c:01:f6:8d:07:2e:dd:92:70:e5:8c:f2:8a:74:2c:05:47:bf:
48:8f:42:b7:09:f2:c3:b5:15:dc:57:02:03:cb:fa:ca:76:bd:
d2:2c:95:31:a1:10:1f:e1:d5:12:4f:39:e3:06:5a:a8:70:c6:
e6:66:d1:87:43:57:2d:f3:c8:38:a4:13:b5:40:a6:b1:70:a5:
b1:66:9d:ae:5e:0f:73:1a:38:4e:07:d1:aa:a0:a5:4f:64:f6:
9c:4f:93:e0:f8:0d:dc:2b:f9:d2:c9:55:c7:1a:d3:e6:6f:1b:
13:78:f8:b1:f1:92:6f:7c:6d:4f:e3:1e:8d:b6:a4:ba:0b:55:
5a:cf:a1:33
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICD7YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw
OTM3MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJFMzA2MkFFNjg3RjA3
NTE5MzJDQUVEOTNBQzkyQkExMTRBRkZDOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMRHo0lQFMBX1rs0KFM0fXrb7GV8DaB7Ekq2b6iWP5rspySPIr
jf9fg0UY08QtG54xh8X7ZoEeIX6/cxhPDc08FyZcL98/NO9crebl3HRLn/IT1GA0
A4ifBrVXrt/2AdFlK6aRPI9dEjU+r80dbqsiEq0B05NMReSPwE+nljtq+5n4qbmh
0kswZpiN9RzqtfJHP4y0/BKg7BD0V9+R8ZbGL78tUxLfCKNuvWiLaVFFByD2pSvj
IxXN91oxbvkby6dX6xski97HUmNV1S194AqeoFQh+VOs5UxDbTgTTxE4VidQHt6S
r9BO4sJAeaEmcqBXk0b3JFzyG8MZmTxC3gghAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQULjBirmh/B1GTLK7ZOskroRSv/JkwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTGpCaXJtaF9CMUdUTEs3
Wk9za3JvUlN2X0prLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ADzHjDANBgkqhkiG9w0BAQsFAAOCAQEAK23sxWD4NYPl3vTD2kVUI1imptKJl9Gi
MNV7L+EielSu/ZubOUkx+bCOL8rBOY0vJ/cyzyWmOafxr+yyBA9uG7jje+tWgBOC
ZAVAfJpZT1+iWq9rOS8j/b41rgAhXB6hv93yC/9nP3qOxQjp8WH7vBIVJlLjEcNB
FqeCYYatXAH2jQcu3ZJw5YzyinQsBUe/SI9Ctwnyw7UV3FcCA8v6yna90iyVMaEQ
H+HVEk854wZaqHDG5mbRh0NXLfPIOKQTtUCmsXClsWadrl4Pcxo4TgfRqqClT2T2
nE+T4PgN3Cv50slVxxrT5m8bE3j4sfGSb3xtT+MejbakugtVWs+hMw==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org