Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RTi79TZYTpZL1XH_oGqIGlLAKBg.roa
File: RTi79TZYTpZL1XH_oGqIGlLAKBg.roa (raw, json)
Hash identifier: CfJONz4+JrZ1moJsBiicozn4PjOQ8kzImRI8oCT4KZA=
Subject key identifier: 45:38:BB:F5:36:58:4E:96:4B:D5:71:FF:A0:6A:88:1A:52:C0:28:18
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 11DC
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RTi79TZYTpZL1XH_oGqIGlLAKBg.roa
Signing time: Mon 26 Aug 2024 05:24:27 +0000
ROA not before: Mon 26 Aug 2024 05:24:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 60.198.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4572 (0x11dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:27 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4538BBF536584E964BD571FFA06A881A52C02818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b9:f3:2f:ca:92:fa:a1:c3:02:c2:32:70:bd:
5f:d8:e5:ba:ee:b9:d4:c1:22:ac:0c:45:4e:36:2e:
8c:f3:76:55:b5:99:16:42:67:af:a5:e5:d7:84:db:
c0:7a:48:0f:4e:24:af:6b:fb:6d:3a:8a:57:6d:e4:
81:a3:a1:a8:d2:2b:a4:e4:e1:9e:4e:c6:b9:94:de:
87:99:d5:8b:a1:45:c4:24:48:17:09:58:f2:0d:e2:
da:bf:df:f4:7d:03:6e:c6:2d:5d:71:ba:cc:a6:ee:
57:14:a0:f9:b4:1d:9e:81:e8:da:40:94:c0:ac:f4:
62:1b:c4:b3:0a:39:25:56:07:6b:89:62:27:e2:7c:
7f:cb:70:e1:24:17:28:41:36:a8:5a:93:cf:7d:86:
58:d9:d4:16:16:4e:16:59:1f:71:9b:ee:d7:38:8a:
62:8e:89:ce:9d:13:9e:17:aa:13:c8:04:e2:ee:eb:
96:cb:bb:c5:1f:cb:c5:d1:19:ce:c2:67:12:e2:27:
c3:10:80:ca:36:7e:90:ef:90:08:b6:e9:25:d1:75:
e5:3b:72:89:23:e5:e5:c6:49:9a:fe:f0:c7:bd:43:
db:b8:34:e6:dd:fa:f4:c2:7d:ab:38:aa:94:2f:67:
06:0e:0b:20:d7:a6:29:ec:3b:e3:57:7b:c0:e3:19:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:38:BB:F5:36:58:4E:96:4B:D5:71:FF:A0:6A:88:1A:52:C0:28:18
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RTi79TZYTpZL1XH_oGqIGlLAKBg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.198.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:5b:3e:4a:fa:28:7a:6e:eb:33:46:f6:76:c2:0c:ce:9b:1c:
24:df:13:73:f7:6b:2d:e0:37:e9:d7:16:08:08:81:b9:50:03:
08:2e:b3:85:10:cc:9b:07:28:3c:33:5f:45:e4:dc:5c:92:53:
5f:88:51:66:83:74:6c:b5:77:4e:ad:70:00:76:2f:46:32:a9:
dd:1a:8a:e3:36:7b:1c:32:43:a3:e3:54:a8:10:0b:e9:8f:98:
97:c5:8c:4b:14:2f:69:a4:9a:e3:86:fb:f5:5f:cd:20:38:dd:
d1:c8:f9:fd:69:1d:ff:12:23:bf:c7:35:ca:b4:c1:f9:95:da:
08:b7:2e:03:7b:c6:e2:3c:95:9f:59:3c:9e:65:97:57:44:99:
46:ec:40:6c:bd:b9:80:05:04:eb:5c:06:9b:b9:8a:e2:b8:86:
e9:1e:b0:bc:70:e1:f3:ed:c6:b4:76:bc:18:4c:b7:f2:0f:65:
7f:5f:39:27:11:46:a4:66:26:af:bc:f1:3d:bb:f3:d6:c9:59:
ad:8d:80:ac:3c:ac:b5:1e:b9:b1:88:29:e8:2b:fa:ce:0c:50:
7c:d0:14:b7:91:f5:f6:e5:6c:10:a6:bf:a2:b7:43:4b:cb:68:
6a:7e:cd:6a:f4:a8:34:f6:32:97:5b:c1:ef:de:77:ed:1d:8b:
00:c9:16:c3
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw
NTI0MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ1MzhCQkY1MzY1ODRF
OTY0QkQ1NzFGRkEwNkE4ODFBNTJDMDI4MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD2ufMvypL6ocMCwjJwvV/Y5bruudTBIqwMRU42LozzdlW1mRZC
Z6+l5deE28B6SA9OJK9r+206ildt5IGjoajSK6Tk4Z5OxrmU3oeZ1YuhRcQkSBcJ
WPIN4tq/3/R9A27GLV1xusym7lcUoPm0HZ6B6NpAlMCs9GIbxLMKOSVWB2uJYifi
fH/LcOEkFyhBNqhak899hljZ1BYWThZZH3Gb7tc4imKOic6dE54XqhPIBOLu65bL
u8Ufy8XRGc7CZxLiJ8MQgMo2fpDvkAi26SXRdeU7cokj5eXGSZr+8Me9Q9u4NObd
+vTCfas4qpQvZwYOCyDXpinsO+NXe8DjGXrvAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQURTi79TZYTpZL1XH/oGqIGlLAKBgwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvUlRpNzlUWllUcFpMMVhI
X29HcUlHbExBS0JnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AjzGIDANBgkqhkiG9w0BAQsFAAOCAQEAO1s+Svooem7rM0b2dsIMzpscJN8Tc/dr
LeA36dcWCAiBuVADCC6zhRDMmwcoPDNfReTcXJJTX4hRZoN0bLV3Tq1wAHYvRjKp
3RqK4zZ7HDJDo+NUqBAL6Y+Yl8WMSxQvaaSa44b79V/NIDjd0cj5/Wkd/xIjv8c1
yrTB+ZXaCLcuA3vG4jyVn1k8nmWXV0SZRuxAbL25gAUE61wGm7mK4riG6R6wvHDh
8+3GtHa8GEy38g9lf185JxFGpGYmr7zxPbvz1slZrY2ArDystR65sYgp6Cv6zgxQ
fNAUt5H19uVsEKa/ordDS8toan7NavSoNPYyl1vB79537R2LAMkWww==
-----END CERTIFICATE-----
Generated at Wed Apr 9 11:54:05 2025 by rpki-client