Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QJIcGUegxuMPsLv2EMhNDluad1U.roa
File: QJIcGUegxuMPsLv2EMhNDluad1U.roa (raw, json)
Hash identifier: zGhheKDspkS7zjqlYeMGV+PGwKYbxEI2jkjz1sHndFI=
Subject key identifier: 40:92:1C:19:47:A0:C6:E3:0F:B0:BB:F6:10:C8:4D:0E:5B:9A:77:55
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0F99
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QJIcGUegxuMPsLv2EMhNDluad1U.roa
Signing time: Fri 01 Sep 2023 09:37:03 +0000
ROA not before: Fri 01 Sep 2023 09:37:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 210.17.7.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3993 (0xf99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=40921C1947A0C6E30FB0BBF610C84D0E5B9A7755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:fd:59:4e:2f:65:d0:d3:39:3e:70:75:e6:
40:0c:68:2c:c4:ce:f3:37:b3:a8:6e:84:93:eb:b4:
b0:67:b9:6c:4d:d2:a1:63:71:9c:62:5a:71:f8:47:
ec:32:17:46:88:19:67:af:71:c9:86:fc:bf:e9:fe:
20:81:27:6a:1c:91:bb:38:7d:c7:dd:50:54:00:c7:
fb:ed:9d:3d:fe:e1:53:0e:39:68:ae:7b:4f:75:6e:
51:a5:d0:ab:cc:24:70:d3:0f:86:42:58:87:5a:fc:
47:e9:fa:95:5a:7e:c4:ba:94:7d:fb:a3:d6:50:42:
de:1e:49:5b:e4:56:d8:85:44:ee:e1:cf:fd:99:97:
1c:09:4d:f2:89:01:8f:76:27:d1:d1:28:15:44:62:
4a:85:6e:18:5c:7e:da:0d:a9:b3:4a:9c:51:fb:09:
a2:a4:14:7c:87:ea:56:50:7e:83:e1:be:ce:61:bf:
ee:53:54:4c:15:52:3b:aa:84:14:89:c2:6b:42:d1:
9d:9b:8e:dc:b9:a0:5d:8f:6a:b5:45:86:36:74:1f:
8b:2b:84:3c:d4:e8:c4:fb:bc:e3:42:b7:e2:b5:17:
0e:67:9f:65:5e:e3:8b:36:12:d5:d2:61:c0:0c:2a:
e0:5a:76:e1:20:3f:e8:25:e7:63:34:d4:4f:10:0e:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:92:1C:19:47:A0:C6:E3:0F:B0:BB:F6:10:C8:4D:0E:5B:9A:77:55
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QJIcGUegxuMPsLv2EMhNDluad1U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.7.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:34:c2:c1:42:4b:71:b1:64:39:c1:0e:88:c7:86:65:6a:be:
1c:e5:73:57:2c:c9:f0:9d:88:3b:55:ff:45:48:ff:df:25:02:
a0:5b:64:65:62:61:4a:64:0a:a2:53:54:09:47:50:15:f0:10:
cb:e8:ca:7e:5a:9b:c1:d2:6c:69:7e:ea:0d:e6:52:38:08:a8:
15:98:54:98:77:b1:f2:c1:92:a8:d6:5c:00:00:a5:3f:fc:e2:
40:bc:30:e5:96:3b:7f:92:2e:d5:fc:e7:68:4a:6f:5e:1d:66:
39:88:e6:c3:f4:79:7c:97:94:01:d8:59:1c:41:ef:92:91:3b:
b3:9a:4f:4a:81:75:9c:18:84:9e:a2:85:cf:d6:92:10:72:56:
e6:4c:0f:17:99:07:3d:c9:14:ab:ed:16:06:07:44:d5:6b:1c:
d5:50:1f:e2:79:24:90:29:34:e3:0b:29:bf:d4:c2:1f:6a:ff:
57:2c:c1:23:2a:07:35:e0:86:4d:6d:74:e1:05:05:cf:6a:e8:
e1:d3:65:97:c3:6b:01:30:13:80:d4:24:49:11:1d:3b:57:a4:
4f:74:df:a1:a8:47:42:53:fd:f9:94:ca:37:f9:ef:23:fa:cb:
89:50:43:8b:fb:bb:a2:2a:13:68:7f:31:7d:d1:30:11:a9:4b:
5c:07:4e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org