Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/TYcNEYlxGITbYJhuSlt9UbL03iQ.roa
File: TYcNEYlxGITbYJhuSlt9UbL03iQ.roa (raw, json)
Hash identifier: Se9i/RoKes0yiTKKuBsBJ2YfSQ2x/h5lsKMbADWzUfs=
Subject key identifier: 4D:87:0D:11:89:71:18:84:DB:60:98:6E:4A:5B:7D:51:B2:F4:DE:24
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0F9D
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/TYcNEYlxGITbYJhuSlt9UbL03iQ.roa
Signing time: Fri 01 Sep 2023 09:37:03 +0000
ROA not before: Fri 01 Sep 2023 09:37:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 210.67.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3997 (0xf9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4D870D1189711884DB60986E4A5B7D51B2F4DE24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:2c:b0:73:1a:15:af:9d:5f:72:cf:54:5e:
30:b8:6c:3b:69:52:76:bd:f0:c6:d9:82:9d:a9:cb:
2f:b1:05:c0:37:33:91:e1:6a:77:69:6e:f0:d1:32:
e8:62:be:4c:ae:f1:ec:f5:f3:b6:b9:4b:42:e8:4b:
73:2f:76:60:f1:43:d2:8e:f9:69:4b:1c:34:6e:e2:
91:cf:fe:9e:d9:df:0d:6d:7e:98:55:62:96:5c:44:
7e:97:2a:e0:08:8b:d9:04:c2:37:25:98:e8:2d:63:
43:3b:42:69:9d:fb:00:33:d1:d8:50:ba:8a:1c:9b:
11:ec:aa:70:ca:21:79:92:83:ec:56:41:24:14:eb:
3d:68:54:d7:cd:17:42:69:f2:93:37:bd:3e:51:ea:
81:e4:1e:6c:98:f8:fc:69:8b:25:0a:57:27:95:0a:
ac:88:ef:dd:ea:d9:dc:68:96:a3:74:ef:2b:af:23:
d1:78:f5:61:94:4e:91:f3:a2:1b:85:ca:a9:25:7e:
21:18:81:b9:88:f3:a7:a6:06:2a:b1:fd:41:b3:c6:
30:47:88:de:b5:14:56:57:e7:84:08:b4:43:f0:fb:
f4:23:21:0b:47:04:fd:29:79:17:97:c9:5c:7e:33:
7f:8f:b5:ab:b5:40:a6:ea:5d:15:f3:db:b9:f0:40:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:87:0D:11:89:71:18:84:DB:60:98:6E:4A:5B:7D:51:B2:F4:DE:24
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/TYcNEYlxGITbYJhuSlt9UbL03iQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.144.0/20
Signature Algorithm: sha256WithRSAEncryption
25:a7:15:72:49:14:b7:99:14:82:4a:5a:eb:19:68:d8:9e:b9:
37:4f:e4:a0:92:8b:74:52:bf:b5:de:2c:51:68:fe:aa:01:bd:
d8:f9:88:01:10:45:72:ed:5a:a6:fd:7b:ec:c6:d7:81:52:0c:
31:63:94:d9:a7:fd:30:67:72:96:20:34:2f:f0:78:22:8a:c4:
56:cb:b3:12:4f:22:57:c3:3c:c0:a3:52:11:f3:aa:2c:b1:ab:
6a:aa:36:a2:de:47:94:9b:36:06:5e:3f:91:6c:1c:86:0a:a5:
43:d5:30:fd:36:4f:42:f7:0c:94:e8:e9:a1:d4:8f:17:11:a0:
ed:54:63:c2:66:d2:15:0e:83:9d:02:a3:48:75:93:bc:58:ed:
80:69:fc:ea:51:15:f7:ed:5e:e3:61:4b:9d:d0:4f:f7:5e:77:
5e:3f:9e:60:56:f5:03:4d:44:7b:cc:b7:08:a5:1c:b9:82:0e:
66:23:74:d9:c4:13:fa:65:ab:c1:a4:70:b3:eb:1b:a8:3a:b4:
ad:4b:56:6c:70:9c:8d:f8:cb:46:12:d9:a5:0f:18:73:72:ca:
b8:49:b0:18:d9:4c:c9:51:95:32:0b:b9:49:64:bb:c9:c9:97:
00:fc:3a:19:d2:68:d7:65:b3:c8:5c:38:d6:68:56:d4:96:76:
e6:dc:fb:70
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICD50wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw
OTM3MDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDREODcwRDExODk3MTE4
ODREQjYwOTg2RTRBNUI3RDUxQjJGNERFMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIlCywcxoVr51fcs9UXjC4bDtpUna98MbZgp2pyy+xBcA3M5Hh
andpbvDRMuhivkyu8ez187a5S0LoS3MvdmDxQ9KO+WlLHDRu4pHP/p7Z3w1tfphV
YpZcRH6XKuAIi9kEwjclmOgtY0M7Qmmd+wAz0dhQuoocmxHsqnDKIXmSg+xWQSQU
6z1oVNfNF0Jp8pM3vT5R6oHkHmyY+PxpiyUKVyeVCqyI793q2dxolqN07yuvI9F4
9WGUTpHzohuFyqklfiEYgbmI86emBiqx/UGzxjBHiN61FFZX54QItEPw+/QjIQtH
BP0peReXyVx+M3+Ptau1QKbqXRXz27nwQEQ7AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUTYcNEYlxGITbYJhuSlt9UbL03iQwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvVFljTkVZbHhHSVRiWUpo
dVNsdDlVYkwwM2lRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BNJDkDANBgkqhkiG9w0BAQsFAAOCAQEAJacVckkUt5kUgkpa6xlo2J65N0/koJKL
dFK/td4sUWj+qgG92PmIARBFcu1apv177MbXgVIMMWOU2af9MGdyliA0L/B4IorE
VsuzEk8iV8M8wKNSEfOqLLGraqo2ot5HlJs2Bl4/kWwchgqlQ9Uw/TZPQvcMlOjp
odSPFxGg7VRjwmbSFQ6DnQKjSHWTvFjtgGn86lEV9+1e42FLndBP9153Xj+eYFb1
A01Ee8y3CKUcuYIOZiN02cQT+mWrwaRws+sbqDq0rUtWbHCcjfjLRhLZpQ8Yc3LK
uEmwGNlMyVGVMgu5SWS7ycmXAPw6GdJo12WzyFw41mhW1JZ25tz7cA==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org