Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MAEx1xMFfC6sU_g10p-IK4-gKrc.roa
File: MAEx1xMFfC6sU_g10p-IK4-gKrc.roa (raw, json)
Hash identifier: Pt9m71seTYA5lRi6F8BdhIICO91ZFRduA2BpKTTu4ss=
Subject key identifier: 30:01:31:D7:13:05:7C:2E:AC:53:F8:35:D2:9F:88:2B:8F:A0:2A:B7
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1379
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MAEx1xMFfC6sU_g10p-IK4-gKrc.roa
Signing time: Mon 10 Feb 2025 14:09:29 +0000
ROA not before: Mon 10 Feb 2025 14:09:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 210.17.16.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4985 (0x1379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 10 14:09:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=300131D713057C2EAC53F835D29F882B8FA02AB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:31:dc:cf:a2:dd:8f:81:b6:15:76:a5:e2:11:
05:a3:f1:91:b7:5d:86:d1:a9:6d:33:22:80:18:6e:
a7:b0:9d:fe:43:f1:a5:14:4c:71:91:1c:fc:59:f2:
8d:4e:86:ae:4c:18:5c:45:09:0c:be:32:4f:9e:02:
eb:1f:a6:69:00:b8:2e:68:8b:bd:55:97:87:8f:a7:
d1:92:b2:85:52:94:f1:c5:9f:04:4b:8f:e3:a5:c5:
f1:8d:3f:ec:75:b6:59:6b:c2:24:0f:8e:0b:c6:e9:
ad:9d:49:97:5b:6b:24:2a:50:c5:5c:61:28:ab:57:
bb:02:79:80:c7:c7:b1:7e:39:6a:dc:d7:30:d0:38:
a9:57:0c:56:ac:b7:5a:5e:87:55:0e:cc:02:18:70:
d0:b0:29:2c:ec:13:95:e3:9d:c9:ea:94:b5:f0:90:
90:9a:08:0c:a9:76:8f:27:d2:76:e1:d2:c6:c6:cd:
5e:38:00:52:3e:81:6d:f5:67:83:68:81:3c:f1:85:
12:38:7b:8b:dd:0d:f8:70:57:8e:73:9a:b8:ca:df:
9c:77:32:ad:e7:fa:4a:59:01:cc:f5:45:dc:a6:f1:
17:ec:b5:ba:69:91:61:e7:79:b4:33:e3:51:cb:1e:
d7:b9:94:85:2b:c5:5a:df:ca:2a:b1:77:8e:5d:cb:
43:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:01:31:D7:13:05:7C:2E:AC:53:F8:35:D2:9F:88:2B:8F:A0:2A:B7
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MAEx1xMFfC6sU_g10p-IK4-gKrc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:03:7a:75:82:27:29:74:27:a4:45:ca:44:07:55:84:9d:a5:
27:5b:8c:23:3d:1f:11:a9:56:20:60:51:93:a3:f2:27:8c:9a:
d1:94:3c:7c:b1:29:55:55:a8:79:ae:27:23:bc:e1:c9:6a:85:
b5:07:81:cf:72:2d:f8:69:e0:d4:d0:dd:c7:96:eb:91:ff:ad:
81:02:32:f7:c0:f8:1e:bc:09:3a:9e:b3:73:d8:98:6a:46:b9:
85:28:5e:58:e1:0e:a3:e3:f2:48:4a:a5:91:d9:09:2e:fc:fd:
75:fd:6e:55:d4:73:e2:d5:43:48:4d:ef:33:0f:ec:7a:78:05:
66:c2:7d:e1:8e:5b:53:57:46:82:96:b6:78:d5:f6:1b:88:10:
d4:4c:61:59:5f:46:53:26:22:68:80:14:7e:08:49:39:05:cc:
5e:1e:1d:71:2f:55:55:0f:40:87:57:68:dc:14:04:2c:68:c7:
21:bc:a8:92:4f:a8:3d:9c:87:0d:4c:ce:04:a3:ea:4c:46:d1:
02:27:e8:af:bc:93:88:73:5e:34:a9:ef:92:9e:6a:3b:ae:cc:
20:7d:13:0e:bf:bc:88:cb:e9:9a:b8:d7:71:91:21:43:b4:e9:
10:eb:fd:bf:42:73:d2:d7:7d:43:65:a9:d7:c3:c5:60:9a:2b:
f8:0f:c3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:50 2025 by rpki-client