Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PGGIKOxsj8uQ8yTDEC7EIoxxeu8.roa
File: PGGIKOxsj8uQ8yTDEC7EIoxxeu8.roa (raw, json)
Hash identifier: 0OXNH/yNICWEmLk4dZWzCsxPLVIq9MwUR8GPjdsQ0Oo=
Subject key identifier: 3C:61:88:28:EC:6C:8F:CB:90:F3:24:C3:10:2E:C4:22:8C:71:7A:EF
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1003
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PGGIKOxsj8uQ8yTDEC7EIoxxeu8.roa
Signing time: Fri 01 Sep 2023 09:37:37 +0000
ROA not before: Fri 01 Sep 2023 09:37:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 210.17.20.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4099 (0x1003)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:37 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3C618828EC6C8FCB90F324C3102EC4228C717AEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:50:9b:25:6f:99:c8:fa:07:f0:9d:ec:0e:c6:
53:0c:89:af:74:28:25:80:f1:8e:10:35:be:c9:19:
05:73:18:26:40:67:15:bc:75:87:ee:72:58:4c:9d:
a7:f5:3a:75:02:7f:ff:71:37:d7:ad:dd:e7:5f:69:
fe:9c:b4:4e:ca:50:75:57:79:b0:00:46:f8:0d:19:
06:40:d9:be:3b:c2:38:30:5f:16:17:31:4f:b5:4c:
7f:6d:af:e8:91:1d:4e:6f:ad:6e:e6:d5:fa:b4:24:
5b:75:e3:91:6d:fd:5b:b4:2d:7b:fd:b0:70:77:ad:
99:85:65:75:66:cd:c2:f9:66:7b:f5:f5:14:d9:75:
05:e2:dc:78:28:c2:29:e5:68:2a:17:2b:a7:81:45:
88:19:28:08:3d:63:47:f4:1d:f3:6f:82:db:79:79:
8b:83:3b:71:64:fb:20:a6:b2:9e:a0:dd:5a:e7:93:
74:5c:c7:ca:42:12:66:ee:9f:bf:c5:88:0d:de:3a:
f3:20:15:17:79:a0:13:2e:eb:28:e7:be:2b:8f:d8:
0a:7d:e1:f9:e2:ba:b0:89:a7:06:51:bc:30:d9:95:
6d:fe:2c:33:6e:75:1b:b5:fd:d4:42:a2:1c:7f:e1:
a2:fc:f7:0c:3e:a7:d3:d0:57:03:de:ea:11:f9:b1:
a9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:61:88:28:EC:6C:8F:CB:90:F3:24:C3:10:2E:C4:22:8C:71:7A:EF
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PGGIKOxsj8uQ8yTDEC7EIoxxeu8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.20.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:bf:da:f4:bb:29:4b:25:a3:09:8b:7b:f8:ea:2c:b7:9f:25:
70:1b:9f:34:5b:9f:1d:39:ad:59:8c:a9:68:e0:ac:46:1a:22:
ac:b3:e2:9a:14:40:16:9b:4a:ad:e1:bc:41:68:c2:e6:c2:f7:
b0:90:11:0e:36:7a:65:20:da:e0:24:2e:35:6f:fe:d4:25:9b:
df:84:46:b6:23:c0:92:f6:44:d7:43:cf:41:a8:4b:fa:fb:5b:
25:0b:5c:fe:9b:06:3e:43:2e:49:16:95:94:0e:83:9a:5e:0f:
5d:18:4d:7a:10:57:8e:05:45:7b:8b:c2:78:79:51:6b:7f:d6:
20:91:6d:05:e1:ca:75:27:45:b4:47:de:73:a5:bd:5e:71:45:
11:95:c9:b9:f0:d0:bb:8d:a8:b9:ef:c0:87:4b:36:75:55:9d:
b4:dc:73:cc:27:2d:ed:2e:66:9d:bc:dc:19:da:ef:d5:21:d2:
20:ef:cd:54:d5:d0:f7:bf:19:f1:62:88:8b:4d:02:1b:05:d9:
d5:cc:90:a5:5e:16:da:21:83:db:56:e4:df:d8:fd:85:64:44:
9a:03:d8:59:1b:95:42:7e:5c:24:20:5d:67:fe:42:01:78:bb:
f1:fb:f6:07:79:31:a2:72:77:f5:be:09:cd:a1:fb:ea:95:6e:
39:0d:21:6c
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEAMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw
OTM3MzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNDNjE4ODI4RUM2QzhG
Q0I5MEYzMjRDMzEwMkVDNDIyOEM3MTdBRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfUJslb5nI+gfwnewOxlMMia90KCWA8Y4QNb7JGQVzGCZAZxW8
dYfuclhMnaf1OnUCf/9xN9et3edfaf6ctE7KUHVXebAARvgNGQZA2b47wjgwXxYX
MU+1TH9tr+iRHU5vrW7m1fq0JFt145Ft/Vu0LXv9sHB3rZmFZXVmzcL5Znv19RTZ
dQXi3HgowinlaCoXK6eBRYgZKAg9Y0f0HfNvgtt5eYuDO3Fk+yCmsp6g3Vrnk3Rc
x8pCEmbun7/FiA3eOvMgFRd5oBMu6yjnviuP2Ap94fniurCJpwZRvDDZlW3+LDNu
dRu1/dRCohx/4aL89ww+p9PQVwPe6hH5sanpAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUPGGIKOxsj8uQ8yTDEC7EIoxxeu8wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvUEdHSUtPeHNqOHVROHlU
REVDN0VJb3h4ZXU4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ANIRFDANBgkqhkiG9w0BAQsFAAOCAQEAPL/a9LspSyWjCYt7+Oost58lcBufNFuf
HTmtWYypaOCsRhoirLPimhRAFptKreG8QWjC5sL3sJARDjZ6ZSDa4CQuNW/+1CWb
34RGtiPAkvZE10PPQahL+vtbJQtc/psGPkMuSRaVlA6Dml4PXRhNehBXjgVFe4vC
eHlRa3/WIJFtBeHKdSdFtEfec6W9XnFFEZXJufDQu42oue/Ah0s2dVWdtNxzzCct
7S5mnbzcGdrv1SHSIO/NVNXQ978Z8WKIi00CGwXZ1cyQpV4W2iGD21bk39j9hWRE
mgPYWRuVQn5cJCBdZ/5CAXi78fv2B3kxonJ39b4JzaH76pVuOQ0hbA==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org