Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/TDvDhhus-nDQSHZ_XWayUQVcGcY.roa
File: TDvDhhus-nDQSHZ_XWayUQVcGcY.roa (raw, json)
Hash identifier: 8F3tiNnEqTy/RiR1DbkeLXU+c/TRakGELOYVnHG/tXQ=
Subject key identifier: 4C:3B:C3:86:1B:AC:FA:70:D0:48:76:7F:5D:66:B2:51:05:5C:19:C6
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1010
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/TDvDhhus-nDQSHZ_XWayUQVcGcY.roa
Signing time: Fri 01 Sep 2023 09:37:41 +0000
ROA not before: Fri 01 Sep 2023 09:37:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 133747
IP address blocks: 60.198.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4112 (0x1010)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4C3BC3861BACFA70D048767F5D66B251055C19C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:02:e3:21:a9:0a:2f:9e:e3:db:d6:d7:31:
b7:40:2d:20:99:70:ff:7a:84:16:6e:f8:51:47:19:
df:61:fe:05:ab:3a:25:e3:3c:eb:a5:1b:83:cf:00:
7f:da:2e:91:ef:84:f9:9c:a8:0c:1b:b8:40:73:74:
88:09:15:94:df:da:73:b9:c5:7d:f5:8f:1a:51:ea:
70:03:af:3f:c4:e3:b4:8d:f3:7e:9e:b7:20:3e:31:
6f:69:32:14:48:46:a6:de:e1:b9:ba:bb:d4:bf:b6:
f1:35:98:e6:ba:00:0a:71:0d:23:a5:64:35:ba:33:
fe:19:55:6b:65:e9:0c:d9:a5:95:74:ec:90:e5:ac:
c2:21:bb:8d:a9:60:db:2f:15:2b:9d:15:2b:d1:c0:
08:68:08:15:a7:6e:d1:bf:16:32:23:85:8e:68:82:
00:4f:b5:04:b0:67:11:5a:16:ee:de:fe:3c:47:06:
54:ec:c9:15:4f:f8:bf:d0:6e:91:8a:5c:31:fb:7b:
d8:e4:c3:f4:a2:ef:67:db:d2:bf:cc:a5:98:63:2c:
61:5f:60:01:01:23:b9:8f:15:73:b2:a3:6d:1a:f4:
0a:93:2e:3f:04:37:05:91:89:98:71:ef:b7:93:a2:
1a:31:62:fd:ba:9d:4e:68:ff:f2:c9:38:b0:b0:64:
08:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3B:C3:86:1B:AC:FA:70:D0:48:76:7F:5D:66:B2:51:05:5C:19:C6
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/TDvDhhus-nDQSHZ_XWayUQVcGcY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.198.136.0/24
Signature Algorithm: sha256WithRSAEncryption
75:62:77:d3:36:47:6f:ba:85:0d:5d:d6:9c:5e:6e:41:10:98:
8b:87:20:9e:50:b3:fa:89:0f:f3:61:63:14:98:45:23:21:73:
c9:26:4a:97:ec:5e:ba:4c:c2:6d:90:64:e0:d7:9a:ce:4a:31:
02:08:b4:f0:01:e7:ba:cc:c5:e0:28:29:c6:18:a1:8d:c8:9c:
da:4c:5d:09:a7:99:80:26:8e:fb:9b:b7:fd:63:1f:ff:1b:83:
8c:ec:33:ec:06:41:74:33:72:1a:cd:55:5c:1a:bf:ad:b9:ad:
60:bb:27:b9:eb:3d:78:d2:f4:ef:b2:36:c4:17:cd:64:91:5f:
5d:7c:49:69:c3:3c:40:77:5a:ca:c8:55:6f:9c:21:5f:f6:bb:
09:86:6e:70:f4:c2:8e:ea:ee:c5:fa:6a:51:2c:8a:2f:b5:d5:
bd:e9:e4:72:17:90:26:90:45:94:d9:0a:a5:10:b1:d0:27:95:
40:09:b5:b9:2d:72:21:62:fc:aa:90:51:25:d1:80:1e:54:b8:
71:e4:95:d0:39:5a:33:c5:5d:8f:d5:d1:54:7a:03:ee:3a:e6:
f0:7a:18:45:bc:2a:a0:3a:ea:37:30:2b:24:e2:19:13:f1:0a:
fa:d2:37:94:a7:96:3c:2c:39:80:2e:ca:b8:19:b5:14:9e:e7:
d6:45:48:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org