Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MkZRjWAC48c1iJ2KWAgzvOzcbfI.roa
File: MkZRjWAC48c1iJ2KWAgzvOzcbfI.roa (raw, json)
Hash identifier: XmNXankR0YJMjAqE9enPu+6i8tzgk5NdQmqypfeGP7M=
Subject key identifier: 32:46:51:8D:60:02:E3:C7:35:88:9D:8A:58:08:33:BC:EC:DC:6D:F2
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FD6
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MkZRjWAC48c1iJ2KWAgzvOzcbfI.roa
Signing time: Fri 01 Sep 2023 09:37:21 +0000
ROA not before: Fri 01 Sep 2023 09:37:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 210.17.43.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4054 (0xfd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3246518D6002E3C735889D8A580833BCECDC6DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:14:d0:5b:f6:ba:5d:7d:1a:b5:74:7b:d6:
58:af:7b:be:db:cd:f1:fa:33:c8:fb:09:82:0a:de:
13:de:1b:58:20:3f:aa:40:7c:8c:7e:7f:ca:01:9c:
5f:c7:a1:19:3f:7c:20:d2:38:b5:0a:9a:e1:ea:a4:
56:8e:d7:b8:ea:2c:4b:c5:22:b4:0c:0b:2e:19:45:
76:e2:c8:93:01:28:5f:3b:3b:0a:12:31:a2:79:e4:
e1:57:d2:2d:1f:89:7b:55:97:01:de:7e:64:f1:c6:
c6:d4:0d:ea:05:7f:9e:db:2b:87:20:75:57:f1:4b:
19:63:2b:1b:04:26:91:bc:3b:98:04:69:53:d5:bc:
73:e4:55:72:11:cd:d7:a6:9f:f7:4c:55:60:ef:cb:
69:20:5a:73:75:94:1a:1d:08:7b:18:ee:56:c3:29:
0c:b3:3b:57:31:93:f7:e1:b2:3f:53:4d:f7:51:3b:
c8:7d:59:4d:0e:6c:31:31:bc:eb:56:92:9e:86:6d:
47:8a:4f:3d:75:90:38:0c:0d:4b:4d:af:11:3a:ec:
b7:e4:99:23:cf:05:f5:86:65:58:58:67:b6:6a:9e:
54:97:30:e8:46:8c:ab:b4:be:e3:52:b8:58:51:d3:
b4:d9:df:6a:46:95:43:7b:d2:cd:31:da:6c:f9:4d:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:46:51:8D:60:02:E3:C7:35:88:9D:8A:58:08:33:BC:EC:DC:6D:F2
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MkZRjWAC48c1iJ2KWAgzvOzcbfI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.43.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:46:71:fa:35:37:4d:5a:a6:e5:94:a5:b6:40:66:c5:a3:f6:
db:dc:57:f1:7b:ef:20:fd:06:a9:59:5c:0f:9a:72:0c:02:fc:
4c:fa:d9:f0:a9:cc:1b:74:c6:37:1b:e9:9b:11:aa:ec:06:93:
a4:cf:f0:c7:87:83:fc:b5:c3:87:6c:68:d3:32:ca:85:c0:fb:
df:b3:03:f7:99:c3:18:2a:44:61:a2:9d:10:50:e7:23:fe:1b:
92:aa:0e:d9:8c:77:a2:5f:c2:08:36:8d:ab:f7:87:b2:1e:67:
21:7b:25:2b:73:92:1c:67:43:76:44:29:0f:36:54:6c:01:81:
fa:f6:03:5e:f3:04:8a:75:48:ab:1d:d6:87:b9:89:10:66:00:
ef:33:49:ea:89:d0:7f:16:ca:65:39:e4:8d:65:56:01:1b:79:
39:b5:01:61:7e:ba:b9:5b:2f:96:88:10:33:9c:28:67:d1:b6:
48:a0:53:8e:dc:50:e6:b0:c4:8c:9d:90:1e:72:ff:3f:14:28:
1b:8d:70:cf:4d:13:04:20:cc:be:48:64:b7:87:e9:22:02:b0:
99:1f:22:24:e2:fd:48:99:6a:ea:2d:0d:cf:77:1e:c5:e4:c7:
e3:04:f2:ce:ff:14:13:dc:3d:fd:36:95:b5:97:61:75:07:55:
b9:1c:24:e9
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICD9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw
OTM3MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDMyNDY1MThENjAwMkUz
QzczNTg4OUQ4QTU4MDgzM0JDRUNEQzZERjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6rBTQW/a6XX0atXR71live77bzfH6M8j7CYIK3hPeG1ggP6pA
fIx+f8oBnF/HoRk/fCDSOLUKmuHqpFaO17jqLEvFIrQMCy4ZRXbiyJMBKF87OwoS
MaJ55OFX0i0fiXtVlwHefmTxxsbUDeoFf57bK4cgdVfxSxljKxsEJpG8O5gEaVPV
vHPkVXIRzdemn/dMVWDvy2kgWnN1lBodCHsY7lbDKQyzO1cxk/fhsj9TTfdRO8h9
WU0ObDExvOtWkp6GbUeKTz11kDgMDUtNrxE67LfkmSPPBfWGZVhYZ7ZqnlSXMOhG
jKu0vuNSuFhR07TZ32pGlUN70s0x2mz5TY3tAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUMkZRjWAC48c1iJ2KWAgzvOzcbfIwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTWtaUmpXQUM0OGMxaUoy
S1dBZ3p2T3pjYmZJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ANIRKzANBgkqhkiG9w0BAQsFAAOCAQEAekZx+jU3TVqm5ZSltkBmxaP229xX8Xvv
IP0GqVlcD5pyDAL8TPrZ8KnMG3TGNxvpmxGq7AaTpM/wx4eD/LXDh2xo0zLKhcD7
37MD95nDGCpEYaKdEFDnI/4bkqoO2Yx3ol/CCDaNq/eHsh5nIXslK3OSHGdDdkQp
DzZUbAGB+vYDXvMEinVIqx3Wh7mJEGYA7zNJ6onQfxbKZTnkjWVWARt5ObUBYX66
uVsvlogQM5woZ9G2SKBTjtxQ5rDEjJ2QHnL/PxQoG41wz00TBCDMvkhkt4fpIgKw
mR8iJOL9SJlq6i0Nz3cexeTH4wTyzv8UE9w9/TaVtZdhdQdVuRwk6Q==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org