Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QQS5nSATmDZ83D8otJ8YHReamnw.roa
File: QQS5nSATmDZ83D8otJ8YHReamnw.roa (raw, json)
Hash identifier: JrR9pJ68oxJ62nOf2x01oTHj5kntTgjjzUfIAhlpXNY=
Subject key identifier: 41:04:B9:9D:20:13:98:36:7C:DC:3F:28:B4:9F:18:1D:17:9A:9A:7C
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FA6
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QQS5nSATmDZ83D8otJ8YHReamnw.roa
Signing time: Fri 01 Sep 2023 09:37:06 +0000
ROA not before: Fri 01 Sep 2023 09:37:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 60.199.147.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4006 (0xfa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4104B99D201398367CDC3F28B49F181D179A9A7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c2:74:a8:07:f8:a1:1b:4d:0b:b3:98:15:f3:
3b:d5:57:a4:62:d4:23:5c:ad:06:85:dc:10:7f:cb:
69:1d:cd:dc:14:72:3d:38:a4:29:bc:fa:7a:07:d0:
2c:19:88:c9:b1:8c:3b:02:92:d6:91:89:53:af:ed:
22:ee:69:6f:3e:8a:aa:b7:5a:45:95:75:91:87:1a:
5e:fb:94:d6:ba:ea:ea:c1:90:2f:89:85:74:e7:76:
c7:95:c8:c5:2c:e2:88:53:28:ac:19:1e:75:a1:a5:
17:bb:3e:b0:91:18:d9:47:63:4f:1d:b3:2b:fa:8e:
95:c7:b4:2c:21:df:02:04:38:62:38:cc:b3:bf:fe:
2e:63:89:b4:12:a4:3d:15:af:4e:35:82:40:f4:65:
a9:f4:51:23:28:5f:eb:fc:ec:07:89:4d:2a:2d:b3:
f5:f0:7c:d3:70:8c:e0:6a:bf:11:2f:1a:ef:b7:f8:
43:f5:b4:ee:5c:03:98:7c:7b:64:f0:ff:b1:d1:37:
f6:85:55:69:e5:35:66:e0:c9:73:26:ea:b9:8c:aa:
f3:38:80:23:59:56:3b:a6:8e:80:c3:5d:c9:5a:8e:
0f:ae:16:f0:2b:63:bf:2f:85:0e:b5:ad:31:f5:6d:
9a:c9:c7:ba:b7:f6:be:e0:bd:8e:43:1b:6b:60:4a:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:04:B9:9D:20:13:98:36:7C:DC:3F:28:B4:9F:18:1D:17:9A:9A:7C
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QQS5nSATmDZ83D8otJ8YHReamnw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.147.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ae:d8:4f:54:49:b5:3e:5d:f9:ce:27:a7:fe:4c:0f:db:e9:
74:2d:8e:76:87:f3:cb:db:36:a9:23:5d:ff:5c:b4:8c:89:57:
c7:cf:3f:56:d0:73:ef:bb:3f:d3:2a:79:99:a6:d5:38:d6:95:
07:f4:79:c0:59:67:05:75:84:5e:fa:f1:2b:cb:48:0b:1d:2a:
32:f9:3d:59:08:aa:be:55:31:c7:bf:34:0f:ac:99:c8:00:12:
b1:7f:05:26:97:af:42:db:4f:25:5a:d2:df:04:92:75:2f:38:
83:01:7f:28:6c:30:13:e3:55:05:0e:22:f2:17:f9:06:2a:d5:
2d:86:92:35:b5:b4:78:4f:fd:8d:7f:35:37:58:d2:b9:aa:04:
a9:ab:32:70:05:1d:82:8a:9d:33:ca:7a:20:d0:d1:df:eb:67:
12:27:9a:fd:bc:5e:80:97:02:e2:8b:45:dc:df:31:18:07:7f:
73:e3:f8:35:63:1c:37:4e:4b:ef:71:6d:e6:e8:4f:2d:e6:a7:
cb:19:36:f9:b3:b7:f7:94:84:01:4f:be:d8:94:0a:8e:bb:4d:
f7:11:b9:fb:7d:d6:e6:fa:ae:f6:36:5c:b6:78:5a:d1:60:6e:
ac:38:b3:c8:a6:c9:e8:d7:cc:7b:7b:3e:66:89:91:79:3c:f0:
8a:4a:cd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org