Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RN99bGkDve5kj9b0pyW35RwrmHY.roa
File: RN99bGkDve5kj9b0pyW35RwrmHY.roa (raw, json)
Hash identifier: dDwrEinbYpNmPihpKKSwlBJib3iKnOrZvyfEYdxRueg=
Subject key identifier: 44:DF:7D:6C:69:03:BD:EE:64:8F:D6:F4:A7:25:B7:E5:1C:2B:98:76
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0F71
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RN99bGkDve5kj9b0pyW35RwrmHY.roa
Signing time: Fri 01 Sep 2023 09:36:51 +0000
ROA not before: Fri 01 Sep 2023 09:36:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131634
IP address blocks: 210.17.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3953 (0xf71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:36:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=44DF7D6C6903BDEE648FD6F4A725B7E51C2B9876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:f9:40:2c:4f:74:a0:f6:bf:84:4e:a3:5c:
44:f6:0a:ee:a2:65:88:b3:22:c5:15:32:51:e4:5f:
6a:4a:ed:ab:e6:dc:85:59:cc:aa:3a:d8:99:8c:49:
12:b4:92:77:87:85:72:2f:91:f2:d1:a3:f1:be:21:
1b:11:ca:24:bc:a5:d5:fc:e8:c1:0d:a9:41:dc:ce:
01:e2:84:a4:20:82:5d:b3:35:d6:12:94:4f:25:ad:
e2:f4:27:d3:8c:0a:4b:21:96:c3:ce:84:0a:55:35:
8e:e2:11:40:39:55:e2:db:0f:1b:23:8b:53:4d:01:
d4:00:f5:31:bf:23:2c:5d:6f:28:df:3b:c7:73:4e:
41:c7:0a:a6:52:8c:c8:ef:d7:d3:20:de:ca:4f:5c:
44:d5:20:85:38:c7:29:2b:d4:7c:ed:84:7c:a5:e4:
09:f6:96:df:c8:c3:b0:dd:d1:02:ee:78:0f:e0:b8:
0e:b2:dd:07:ee:11:37:11:60:23:fc:4c:d2:93:ec:
ee:a4:54:0e:3c:bc:95:f1:b9:d2:64:d1:f9:b0:2c:
44:a9:f8:31:27:3c:a3:9f:a2:06:22:be:f5:ef:04:
84:ef:1e:4b:02:91:2b:a4:eb:03:84:51:82:b2:42:
a3:88:5e:36:76:a2:53:bb:a9:8c:ff:b2:d3:82:55:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DF:7D:6C:69:03:BD:EE:64:8F:D6:F4:A7:25:B7:E5:1C:2B:98:76
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RN99bGkDve5kj9b0pyW35RwrmHY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.80.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1e:f4:fd:ce:b0:8f:90:12:18:ae:3b:dc:7e:f2:8f:6a:8c:
a3:bd:4e:f4:3d:5f:e5:2b:97:98:37:25:87:63:75:9e:b0:83:
a0:d8:f7:56:d9:f2:a0:5c:99:67:71:4b:64:f5:28:28:75:cb:
23:38:7f:05:ec:fa:89:4b:8a:86:8c:f0:f3:e8:e2:e1:64:50:
a7:f0:6f:8d:52:9e:ce:dc:9f:30:0f:47:b4:ff:cc:6f:20:2f:
f8:3b:3b:cf:19:8e:06:91:71:07:31:88:00:e3:da:d3:8f:73:
6e:e5:e1:dc:0a:58:14:ec:ae:00:8d:ff:f4:23:f0:63:12:76:
15:d5:73:b2:58:82:a5:7c:c5:2c:0e:5f:fc:2d:10:82:5f:a9:
22:6f:a5:4a:bd:12:4a:db:f8:26:c4:9a:ed:70:21:18:14:4d:
99:cd:6a:65:8b:1c:be:2b:78:a8:4e:e7:5d:c8:43:76:47:19:
ed:4d:26:51:e1:16:30:50:23:88:43:ca:1e:8e:ad:2f:b2:23:
fa:fa:24:58:3a:3a:25:01:af:9a:97:a9:c5:85:aa:0c:4b:39:
77:fc:76:58:f1:40:2d:d6:95:7d:df:d2:37:dc:40:a2:4d:10:
e8:ec:6c:3a:4c:f8:a3:c9:4c:30:da:53:48:e0:fa:dc:f0:1c:
68:f3:7d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org