Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UkC0NcfZTPieGv50hM_P_OB11WA.roa
File: UkC0NcfZTPieGv50hM_P_OB11WA.roa (raw, json)
Hash identifier: jTbn/LTUfa2QMOfw9Unn5PJBmVqPMCfj1Bx0yumfuk0=
Subject key identifier: 52:40:B4:35:C7:D9:4C:F8:9E:1A:FE:74:84:CF:CF:FC:E0:75:D5:60
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FDE
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UkC0NcfZTPieGv50hM_P_OB11WA.roa
Signing time: Fri 01 Sep 2023 09:37:23 +0000
ROA not before: Fri 01 Sep 2023 09:37:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4662
IP address blocks: 210.62.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4062 (0xfde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5240B435C7D94CF89E1AFE7484CFCFFCE075D560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:bd:1c:8b:93:94:94:c3:55:ad:41:e7:76:
c8:c1:6e:5a:67:dd:69:7e:dc:5a:b9:d7:3c:a4:cb:
dc:e5:bf:2b:f8:1a:2f:27:f2:bd:52:95:a1:d2:c0:
78:92:fc:3f:f7:6a:b2:b0:b9:17:5f:69:b1:89:37:
d0:85:20:2a:10:35:2c:01:b3:11:77:21:c6:df:91:
89:4d:b3:0c:94:02:64:6b:be:67:84:1d:11:8f:e5:
28:bc:b5:df:bf:9f:bb:bc:30:03:02:28:87:a5:c6:
b3:38:c0:ff:96:d2:ca:b2:ed:61:32:5f:b3:67:46:
c9:50:7b:6a:f1:19:37:3b:c2:30:c9:6e:55:7e:a2:
3c:cf:4c:63:c8:bb:a6:87:3a:ab:21:ff:03:1d:eb:
9e:f6:ec:81:5a:9a:5f:12:95:30:b0:33:fc:39:4a:
43:5c:31:68:89:61:b4:31:b2:21:e2:cd:10:61:08:
e4:b9:42:a9:97:25:56:7f:ae:33:9a:26:a2:2c:72:
7c:c1:97:2e:f4:a1:f0:85:7d:45:6e:d1:2a:f8:44:
20:1f:14:98:12:a6:55:af:28:69:9e:a3:0c:ba:a4:
28:f0:d0:81:fb:96:2c:95:37:5a:0b:a6:75:f9:90:
6e:53:1e:02:83:55:b2:81:45:42:92:dd:86:68:26:
16:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:40:B4:35:C7:D9:4C:F8:9E:1A:FE:74:84:CF:CF:FC:E0:75:D5:60
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UkC0NcfZTPieGv50hM_P_OB11WA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.192.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:27:2d:aa:f4:a5:9d:bd:59:a0:72:ee:6a:53:c9:d8:e3:5d:
f5:bd:70:a0:57:80:d8:55:1f:ca:ae:8a:8e:b4:23:d4:16:f0:
41:e2:36:3e:0c:7e:25:5c:40:ba:db:40:7b:27:ae:49:83:e5:
50:89:49:bc:2a:9c:2e:83:d8:ed:d6:29:27:fe:17:c8:16:5d:
5e:26:e2:64:c9:44:09:50:0e:75:5c:12:00:40:00:b6:3c:7a:
c6:d6:b6:a5:dc:32:31:4a:90:19:e6:cf:c0:05:1c:08:e9:b1:
c4:58:61:0e:7f:4a:ec:a2:2d:6b:36:13:c1:94:ad:58:15:31:
eb:ca:b6:ea:e4:ed:f7:3c:ee:77:33:1c:8f:31:46:49:a3:5c:
41:7b:88:a0:b0:88:2d:78:9f:20:da:85:2d:23:90:99:e4:1b:
ce:e1:3d:49:e1:e1:04:b8:3d:a9:3a:48:6c:7b:a4:8f:61:a9:
4c:5e:96:62:b5:02:0c:60:ab:ba:71:ae:9f:22:16:c7:97:a5:
1a:01:13:45:8c:d1:4c:fa:7c:05:eb:9e:ac:46:5b:e2:a0:00:
10:f3:dd:a4:de:f3:45:ea:54:48:0f:fa:15:05:17:b5:6a:52:
4e:33:2e:6c:23:8e:f1:d6:fe:09:40:33:6c:de:e9:e3:56:14:
67:11:17:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org