Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RqZ4sLPsaYQG7O1r1tJuWJK6gwc.roa
File: RqZ4sLPsaYQG7O1r1tJuWJK6gwc.roa (raw, json)
Hash identifier: 3MnuMc9SpVh/esSPVdl5000ogxYJaSv31uWvRTBFTe4=
Subject key identifier: 46:A6:78:B0:B3:EC:69:84:06:EC:ED:6B:D6:D2:6E:58:92:BA:83:07
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1320
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RqZ4sLPsaYQG7O1r1tJuWJK6gwc.roa
Signing time: Mon 10 Feb 2025 14:09:07 +0000
ROA not before: Mon 10 Feb 2025 14:09:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 211.78.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4896 (0x1320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 10 14:09:07 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=46A678B0B3EC698406ECED6BD6D26E5892BA8307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:15:be:a3:bf:c9:56:27:9f:76:45:0b:82:04:
64:d9:70:15:2a:fc:69:47:ed:43:09:6f:6d:aa:8d:
c3:8a:e5:68:ec:bb:20:41:0a:3b:3a:77:5e:4b:d8:
9d:b7:1e:4a:c7:ce:cb:9d:f0:ef:3e:a0:27:00:35:
9d:96:14:d0:6d:72:d6:6e:cc:6c:b3:35:5c:2a:55:
78:a6:b2:95:b5:ba:33:a5:38:fd:d3:d0:94:67:d3:
37:59:87:24:60:02:5c:4d:d0:88:21:07:34:5a:90:
cc:fa:34:27:a5:1c:98:c9:9d:db:4d:19:45:20:b5:
74:bb:bc:1d:db:1a:33:81:c5:62:74:e2:74:d9:31:
fc:c4:19:d3:e2:fa:2f:62:50:bb:bb:ab:d0:21:66:
89:40:0d:58:2b:fc:40:fa:38:bf:f4:4c:ba:84:04:
35:bf:08:9c:cb:6c:6a:e1:26:ce:29:9e:c8:b6:3e:
fc:44:2a:b9:e4:7a:be:fb:ce:f0:3c:f4:ad:22:3a:
48:dd:86:04:13:c0:c7:bc:35:d0:bc:c2:b6:e2:6f:
4e:be:13:81:94:bc:e4:02:f8:9c:0b:ab:92:c2:49:
19:de:46:10:4f:52:86:05:2e:27:bc:30:49:ba:57:
e6:9b:93:da:0b:d0:75:56:4f:c4:c8:a4:44:44:2a:
1a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A6:78:B0:B3:EC:69:84:06:EC:ED:6B:D6:D2:6E:58:92:BA:83:07
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RqZ4sLPsaYQG7O1r1tJuWJK6gwc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.208.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:aa:be:3a:fa:03:ff:31:10:c0:11:d1:fa:8d:b3:a2:06:7c:
56:e0:90:8b:79:4b:89:c0:ce:84:ae:97:1c:6c:f6:4d:ce:26:
ec:56:b9:48:67:c5:92:65:8f:2d:a4:98:47:97:1e:13:60:41:
54:0d:fc:d3:36:a9:94:80:5d:60:9b:0e:db:33:73:bb:d7:c1:
f3:10:c1:86:0e:a1:5f:3e:b7:80:e8:62:83:7c:28:31:38:03:
ae:59:87:43:83:e1:04:fc:c1:2f:ee:3f:c4:1f:be:87:2c:bf:
1b:97:3e:2f:d1:44:0a:ae:93:59:76:63:8c:15:25:4e:86:66:
b5:73:50:35:a7:3b:5f:0a:30:44:a2:cf:0d:37:83:1b:14:26:
b7:2e:01:3c:d5:32:05:8b:b5:8f:b2:77:2b:58:b0:8b:48:22:
c1:dd:55:7c:26:f7:e7:02:a7:c2:ae:a3:f5:a2:16:d4:2d:21:
67:f6:83:30:c9:3e:25:9c:1e:58:85:b3:d1:db:be:b8:81:95:
eb:c9:90:03:44:41:1b:30:b3:1b:12:c8:3f:bb:7f:5c:73:47:
0e:b9:46:98:9d:b5:e5:a6:a4:51:38:69:da:07:39:0b:97:f8:
a7:9f:24:08:37:e1:cf:58:11:4c:ab:d7:f8:16:b2:e8:34:f8:
8c:41:7c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:17:33 2025 by rpki-client