Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Mdt16bBZujbVhGobKERVW9bDG9g.roa
File: Mdt16bBZujbVhGobKERVW9bDG9g.roa (raw, json)
Hash identifier: f+1HN66HrZnBRZ9zHWwU2f5+Y5rJCmJci569GQ34TJw=
Subject key identifier: 31:DB:75:E9:B0:59:BA:36:D5:84:6A:1B:28:44:55:5B:D6:C3:1B:D8
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FDA
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Mdt16bBZujbVhGobKERVW9bDG9g.roa
Signing time: Fri 01 Sep 2023 09:37:22 +0000
ROA not before: Fri 01 Sep 2023 09:37:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 210.17.96.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4058 (0xfda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=31DB75E9B059BA36D5846A1B2844555BD6C31BD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:35:6b:77:28:c1:c4:51:1a:4a:0d:22:5b:
a8:63:6c:7e:ce:85:7c:dd:23:c4:68:d1:f0:9e:d1:
ba:53:43:fa:07:a3:e7:80:a0:4a:74:04:56:cc:02:
0b:58:f6:3a:61:10:4b:b0:8f:10:cb:5b:57:02:37:
33:64:15:6c:65:7f:9a:5f:40:0b:87:f8:55:2f:20:
3a:e5:ee:e9:02:c4:df:bb:37:51:86:e0:10:43:1b:
68:77:7f:52:50:74:67:73:86:df:27:ca:72:7e:46:
49:84:52:30:d9:a6:b5:2b:7b:69:ec:8a:3c:7f:de:
ed:84:c7:6a:83:1c:d6:29:4a:f3:6c:5b:0a:26:83:
63:88:aa:24:eb:d2:3e:3c:da:04:2e:00:28:05:88:
4a:10:b0:3a:69:00:b5:b9:91:39:1b:60:9c:48:d1:
52:8d:17:d0:bf:1e:08:26:28:49:36:c8:9f:71:1c:
a4:11:1a:c4:45:22:73:5c:2f:89:58:54:a5:c5:cc:
ee:ca:46:74:91:34:58:a1:6d:8d:1d:46:9d:c7:23:
a2:4b:49:65:a5:60:dd:be:de:ab:3e:2d:ff:f7:8b:
82:3c:d8:3d:1f:8e:82:60:2e:62:1a:7f:54:03:bb:
d8:40:f0:1d:e7:c2:4a:f4:d4:4d:16:89:de:1a:4c:
1b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DB:75:E9:B0:59:BA:36:D5:84:6A:1B:28:44:55:5B:D6:C3:1B:D8
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Mdt16bBZujbVhGobKERVW9bDG9g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.96.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:22:e1:87:25:ee:80:55:0c:30:b3:ba:17:3a:b0:95:81:e3:
f1:33:1a:45:ff:bc:ce:81:aa:29:6c:5f:50:dc:51:ef:37:05:
97:29:17:23:00:d8:0b:ec:7c:6f:ab:06:b9:17:c0:9a:8e:f4:
7b:80:fa:78:90:33:16:a9:cb:c8:a4:b6:b2:eb:5a:1d:53:f7:
10:3a:69:82:76:b4:2a:1f:a2:ca:10:5e:5b:44:4a:86:bf:a5:
a0:1c:c5:1d:10:6d:ad:36:b3:74:99:03:8c:34:cd:63:0d:64:
4c:0a:c8:a8:68:10:1a:2a:40:00:8f:c7:ca:a1:42:68:8b:a1:
ef:1b:a4:ac:0b:36:97:e7:a0:b4:4d:54:e5:2c:8f:bc:30:1c:
b6:47:5a:25:f7:d4:64:ad:29:83:95:bb:38:a9:2a:a8:bb:ff:
4d:5f:fd:6a:76:5e:c9:73:99:f3:87:ef:f1:6c:09:5c:68:99:
7c:de:25:a0:09:91:1b:37:02:d7:c3:2b:ca:c0:a7:57:3e:07:
6a:1a:79:2a:2e:a8:3f:37:ca:13:08:34:c8:54:13:b8:98:9c:
c0:54:55:a3:50:7e:42:f6:75:7d:79:18:29:5e:ee:8f:f4:93:
b4:13:bf:77:bf:ed:16:a5:49:8b:bd:cc:f4:1a:b5:8c:69:ed:
ec:b7:ef:c7
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICD9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw
OTM3MjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDMxREI3NUU5QjA1OUJB
MzZENTg0NkExQjI4NDQ1NTVCRDZDMzFCRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDoDVrdyjBxFEaSg0iW6hjbH7OhXzdI8Ro0fCe0bpTQ/oHo+eA
oEp0BFbMAgtY9jphEEuwjxDLW1cCNzNkFWxlf5pfQAuH+FUvIDrl7ukCxN+7N1GG
4BBDG2h3f1JQdGdzht8nynJ+RkmEUjDZprUre2nsijx/3u2Ex2qDHNYpSvNsWwom
g2OIqiTr0j482gQuACgFiEoQsDppALW5kTkbYJxI0VKNF9C/HggmKEk2yJ9xHKQR
GsRFInNcL4lYVKXFzO7KRnSRNFihbY0dRp3HI6JLSWWlYN2+3qs+Lf/3i4I82D0f
joJgLmIaf1QDu9hA8B3nwkr01E0Wid4aTBtzAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUMdt16bBZujbVhGobKERVW9bDG9gwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTWR0MTZiQlp1amJWaEdv
YktFUlZXOWJERzlnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AtIRYDANBgkqhkiG9w0BAQsFAAOCAQEACiLhhyXugFUMMLO6FzqwlYHj8TMaRf+8
zoGqKWxfUNxR7zcFlykXIwDYC+x8b6sGuRfAmo70e4D6eJAzFqnLyKS2sutaHVP3
EDppgna0Kh+iyhBeW0RKhr+loBzFHRBtrTazdJkDjDTNYw1kTArIqGgQGipAAI/H
yqFCaIuh7xukrAs2l+egtE1U5SyPvDActkdaJffUZK0pg5W7OKkqqLv/TV/9anZe
yXOZ84fv8WwJXGiZfN4loAmRGzcC18MrysCnVz4Hahp5Ki6oPzfKEwg0yFQTuJic
wFRVo1B+QvZ1fXkYKV7uj/STtBO/d7/tFqVJi73M9Bq1jGnt7Lfvxw==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org