Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/XGN-H6095tXifFxjcepvXkMSbAs.roa
File: XGN-H6095tXifFxjcepvXkMSbAs.roa (raw, json)
Hash identifier: +fiIa/y3DEGQz7W/2B5HFNKdiBC0HLjBnN24OMFIJPU=
Subject key identifier: 5C:63:7E:1F:AD:3D:E6:D5:E2:7C:5C:63:71:EA:6F:5E:43:12:6C:0B
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 100E
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/XGN-H6095tXifFxjcepvXkMSbAs.roa
Signing time: Fri 01 Sep 2023 09:37:40 +0000
ROA not before: Fri 01 Sep 2023 09:37:40 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3911
IP address blocks: 219.86.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4110 (0x100e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:40 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5C637E1FAD3DE6D5E27C5C6371EA6F5E43126C0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:0d:a3:e5:8d:c9:da:00:38:df:62:a9:de:
f9:52:a4:5f:a7:28:e4:4a:06:9b:86:bf:c2:f3:88:
87:11:f6:93:50:65:6c:ed:a7:83:e3:68:dc:1f:80:
d5:fd:84:f3:ee:54:62:15:28:30:61:c4:ae:ea:86:
99:e4:90:ec:c3:2a:42:17:40:37:24:1d:ab:cb:ee:
6e:02:24:22:4a:01:6d:50:d2:38:20:2a:98:ce:7d:
60:ed:bf:bf:d1:b9:71:af:bc:d9:0f:c0:ff:6d:80:
52:92:9f:ee:54:98:c5:ef:9e:2f:ee:6a:58:f6:c7:
91:8e:0b:f5:f9:2a:2e:07:73:cd:1f:0f:80:83:50:
49:ec:64:f0:6d:6f:8c:0d:9f:71:60:2a:95:f4:a7:
be:cf:bb:d9:70:d8:91:67:2c:b1:cf:35:ab:c1:0f:
72:2f:eb:46:d1:7d:8b:d3:fa:7a:76:5a:18:f2:50:
25:6d:bc:25:29:a4:0f:83:29:4c:8b:44:70:34:b2:
73:74:f1:57:c2:06:bd:7d:b9:22:4e:0d:60:11:8f:
fd:c1:09:63:1b:8b:05:f5:98:6a:f0:38:74:e4:6a:
f8:76:fd:ba:1f:97:16:35:d8:e3:1b:41:80:26:89:
a9:b3:11:f9:35:38:6b:9d:d0:0a:fb:86:b1:b9:12:
7d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:63:7E:1F:AD:3D:E6:D5:E2:7C:5C:63:71:EA:6F:5E:43:12:6C:0B
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/XGN-H6095tXifFxjcepvXkMSbAs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.86.93.0/24
Signature Algorithm: sha256WithRSAEncryption
33:3a:89:32:9b:23:1f:f4:0b:c6:09:42:11:fb:a7:b0:ab:b2:
7b:1c:e1:2d:2c:9b:a4:82:54:04:cc:25:49:2a:4f:50:86:8c:
55:0b:b5:4f:4e:a7:cf:b3:b2:9f:26:b2:61:32:9f:30:2b:dd:
fc:f7:a7:02:3e:3e:92:76:6a:b5:f6:5f:b3:a8:0b:9a:6d:1c:
c5:ef:b8:cd:5e:a7:cf:bc:b0:22:07:42:3c:89:68:ad:93:c3:
18:9c:79:7d:2d:90:05:98:28:6b:27:42:aa:e2:07:05:56:b4:
b1:0d:f9:3d:07:b3:52:27:2d:97:58:40:46:f7:eb:7f:03:43:
9e:87:80:0d:a4:d1:83:98:99:b9:a7:ee:e1:63:df:99:ec:9d:
ee:d0:fa:a4:25:cd:1c:df:48:fe:3b:2d:b5:5e:78:f7:d2:9e:
ad:5b:cd:11:54:54:7f:1f:28:23:95:eb:aa:5d:9d:c8:3b:64:
d5:54:65:e3:a3:cd:99:77:bd:28:0d:c3:39:ee:8d:f1:fe:13:
53:53:f7:f8:a7:a7:a4:8d:7e:0d:d6:6c:a9:2a:47:40:10:65:
88:41:4e:d6:c5:4b:f8:48:ca:cd:d5:9d:c8:76:29:20:7a:96:
ca:f1:e8:e9:a1:f0:f4:c7:a2:b9:9b:d1:2b:73:12:76:3a:99:
9a:39:02:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org