Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MbBZLKEfn1u-dx8Ds1byo1NPib8.roa
File: MbBZLKEfn1u-dx8Ds1byo1NPib8.roa (raw, json)
Hash identifier: Ee3aKN8GAogt+u9LZ0UiPEZZ3m1nuRqJT9x5rm/tRlU=
Subject key identifier: 31:B0:59:2C:A1:1F:9F:5B:BE:77:1F:03:B3:56:F2:A3:53:4F:89:BF
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0F8B
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MbBZLKEfn1u-dx8Ds1byo1NPib8.roa
Signing time: Fri 01 Sep 2023 09:37:00 +0000
ROA not before: Fri 01 Sep 2023 09:37:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 219.80.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3979 (0xf8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:00 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=31B0592CA11F9F5BBE771F03B356F2A3534F89BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:95:e0:04:86:ab:ac:16:89:39:1a:ac:ea:
0a:5b:d3:d7:64:c0:b2:43:eb:29:0c:b9:5b:d4:bf:
00:8c:9e:a5:6d:06:6d:de:7c:8f:92:36:b3:c1:55:
a6:8d:79:95:6c:10:63:e8:32:b2:6b:07:8f:bb:ad:
ad:bb:10:4e:e4:2f:94:72:82:7d:a2:c3:77:6b:36:
36:99:3a:eb:a7:9d:71:a1:06:3e:77:22:74:10:21:
9a:99:30:72:15:93:81:11:87:9a:a7:00:9b:c2:06:
96:55:7b:4b:64:ac:3b:8b:b9:57:a3:12:33:fc:f4:
77:13:b3:77:a8:4a:e2:aa:8f:9c:c3:33:f6:1b:df:
81:0b:da:cb:4d:b6:f2:a7:ea:3e:1d:d5:26:41:28:
be:3f:ec:ef:96:e8:ab:bb:af:64:69:4e:7e:ea:01:
6d:c9:b0:f3:5d:fb:ef:69:b8:90:da:46:17:15:90:
25:6a:96:e9:9a:cd:74:72:35:a1:01:a2:2e:5a:2c:
1d:33:6a:96:8f:d3:68:a2:58:a0:5a:15:ac:ea:a7:
ac:4c:f5:90:0d:3d:4d:18:92:75:4b:7c:b5:d2:26:
66:f6:83:c6:89:0a:86:65:54:0e:65:c5:ec:90:5f:
49:3c:df:bb:00:58:7f:8a:ad:73:d1:c0:31:e5:cd:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B0:59:2C:A1:1F:9F:5B:BE:77:1F:03:B3:56:F2:A3:53:4F:89:BF
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MbBZLKEfn1u-dx8Ds1byo1NPib8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
51:81:86:75:aa:44:3c:c9:9c:a1:a0:0b:5d:61:cb:1e:62:e5:
43:62:1d:82:5b:d3:91:c7:70:c5:24:c7:fb:dc:b4:43:45:c1:
e3:44:3e:31:f3:de:e5:95:c4:9e:33:43:33:b1:cd:db:53:64:
83:ec:5f:aa:21:d7:ff:10:66:10:08:e2:11:b4:40:5b:24:c4:
69:d0:fd:86:7a:2c:a2:63:9c:a4:52:30:cc:fa:de:6e:87:a9:
1e:5f:6d:bb:9f:7d:96:69:9f:99:86:e1:f9:9e:89:d6:cd:a4:
50:8d:a7:24:83:59:1b:64:61:0b:15:b8:00:fc:9d:91:4c:82:
6d:4b:f7:2f:97:30:de:e1:7f:51:cc:3b:1e:3d:f3:22:02:2f:
5b:2f:61:42:f2:b0:ef:9c:c6:56:fb:81:70:4f:d4:12:2c:0d:
69:00:b9:09:ab:b8:19:6f:3c:c6:d9:ab:1f:58:cc:d6:69:c9:
25:af:6d:e6:62:28:77:37:e7:d8:1d:aa:e6:05:28:4b:a6:44:
71:5f:b1:28:da:e8:02:3f:db:61:33:fa:71:c9:1c:23:b1:26:
24:47:33:9b:8f:b2:33:ef:82:fd:d5:3c:dc:8c:2c:6e:75:09:
9e:03:1c:27:1e:50:15:da:09:56:c2:c2:a6:7a:85:12:ac:34:
74:fd:fa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org