Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/M-YSd6of4rO6tQwjuGAIiVDbk2I.roa
File: M-YSd6of4rO6tQwjuGAIiVDbk2I.roa (raw, json)
Hash identifier: xJi4WGD4oXCfQceRFizN7CTrH+J39lg/xAOFlU8icZ4=
Subject key identifier: 33:E6:12:77:AA:1F:E2:B3:BA:B5:0C:23:B8:60:08:89:50:DB:93:62
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 133E
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/M-YSd6of4rO6tQwjuGAIiVDbk2I.roa
Signing time: Mon 10 Feb 2025 14:09:16 +0000
ROA not before: Mon 10 Feb 2025 14:09:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 60.198.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4926 (0x133e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 10 14:09:16 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=33E61277AA1FE2B3BAB50C23B860088950DB9362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:37:20:ee:89:6f:3b:ad:bb:fd:0f:5f:7c:66:
f3:77:4b:f0:1d:c8:2d:1c:33:52:2d:71:75:ab:12:
d2:a4:bd:e3:c9:0d:25:f9:65:36:43:b1:bd:e0:8d:
fd:65:45:fc:60:80:dc:cd:5e:ff:5a:86:af:da:40:
40:87:9c:98:9d:9b:5f:7f:3d:d4:00:92:90:47:0b:
91:f3:4a:03:28:ad:2a:a6:ad:73:69:e7:82:90:78:
1c:43:23:8f:13:51:bc:c7:bb:07:db:21:5d:36:64:
73:34:45:82:81:aa:a4:fd:e6:97:0d:c1:81:4c:d0:
e7:3f:1e:0d:71:1b:6a:b2:5b:d8:86:60:80:c8:0d:
5b:ef:40:f7:1f:d9:3a:a2:23:ba:be:19:d3:fd:f1:
bf:f6:74:a7:2e:42:55:88:61:49:8a:6f:4c:e0:1c:
d2:c9:dc:8a:ea:f9:49:85:af:7f:7a:8f:e8:31:79:
b3:1f:5a:89:8f:82:31:10:20:fc:e7:e1:34:12:8d:
83:87:97:2e:18:9f:3e:e2:bf:61:13:be:53:96:61:
20:a3:16:cf:5f:c2:77:23:34:25:15:c2:83:c9:a9:
1f:cb:e3:49:ae:25:67:d9:60:44:88:64:79:78:dc:
90:d7:ad:e2:52:c0:38:69:56:80:d8:ba:89:80:e9:
98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E6:12:77:AA:1F:E2:B3:BA:B5:0C:23:B8:60:08:89:50:DB:93:62
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/M-YSd6of4rO6tQwjuGAIiVDbk2I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:2f:9f:79:dd:d1:03:3a:a5:16:07:74:ba:ca:74:e1:2c:e7:
82:ee:ff:9a:57:7b:da:b9:f6:96:6e:8f:e6:ff:47:87:e8:4c:
2d:0b:cf:da:be:e1:76:01:75:86:90:49:e4:5b:c6:f3:be:c8:
68:34:34:16:03:02:77:25:2a:a0:06:06:ef:bf:08:15:98:36:
19:b3:c2:ef:76:2f:af:18:4b:2c:b8:a2:a4:22:8d:4c:c8:b1:
e4:cb:8e:fd:27:47:9d:92:09:bc:3a:d5:3b:29:f3:98:5e:99:
6d:4d:62:14:5c:50:53:6a:1e:53:80:b9:64:22:90:86:43:c6:
ca:39:f0:d2:fd:27:bb:ee:a6:01:54:97:4b:aa:56:9d:f3:74:
25:16:a4:cb:2e:43:2f:77:ae:e6:bf:83:39:24:bd:86:56:ed:
3d:62:8b:69:d9:5a:e0:ad:36:5a:f9:7e:67:7a:5c:61:af:0b:
f3:b0:3a:bf:56:cf:75:a5:b3:b3:da:bf:03:0a:73:9b:12:71:
94:af:8b:e8:6d:a8:f6:7e:60:10:47:41:53:2a:87:ed:62:75:
96:88:d8:55:1a:b9:88:b5:e0:3c:9f:bc:18:ea:c0:37:da:99:
45:1f:9b:ee:ac:f1:ff:39:da:4d:bb:41:a6:16:b8:a7:99:75:
c0:39:0a:6f
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICEz4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx
NDA5MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMzRTYxMjc3QUExRkUy
QjNCQUI1MEMyM0I4NjAwODg5NTBEQjkzNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmNyDuiW87rbv9D198ZvN3S/AdyC0cM1ItcXWrEtKkvePJDSX5
ZTZDsb3gjf1lRfxggNzNXv9ahq/aQECHnJidm19/PdQAkpBHC5HzSgMorSqmrXNp
54KQeBxDI48TUbzHuwfbIV02ZHM0RYKBqqT95pcNwYFM0Oc/Hg1xG2qyW9iGYIDI
DVvvQPcf2TqiI7q+GdP98b/2dKcuQlWIYUmKb0zgHNLJ3Irq+UmFr396j+gxebMf
WomPgjEQIPzn4TQSjYOHly4Ynz7iv2ETvlOWYSCjFs9fwncjNCUVwoPJqR/L40mu
JWfZYESIZHl43JDXreJSwDhpVoDYuomA6ZjfAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUM+YSd6of4rO6tQwjuGAIiVDbk2IwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTS1ZU2Q2b2Y0ck82dFF3
anVHQUlpVkRiazJJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
ADzGMA0GCSqGSIb3DQEBCwUAA4IBAQAhL5953dEDOqUWB3S6ynThLOeC7v+aV3va
ufaWbo/m/0eH6EwtC8/avuF2AXWGkEnkW8bzvshoNDQWAwJ3JSqgBgbvvwgVmDYZ
s8Lvdi+vGEssuKKkIo1MyLHky479J0edkgm8OtU7KfOYXpltTWIUXFBTah5TgLlk
IpCGQ8bKOfDS/Se77qYBVJdLqlad83QlFqTLLkMvd67mv4M5JL2GVu09Yotp2Vrg
rTZa+X5nelxhrwvzsDq/Vs91pbOz2r8DCnObEnGUr4vobaj2fmAQR0FTKoftYnWW
iNhVGrmIteA8n7wY6sA32plFH5vurPH/OdpNu0GmFrinmXXAOQpv
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:50:41 2025 by rpki-client