Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YJafAPFQKeo9wsPv_pfvqUcM5_w.roa
File: YJafAPFQKeo9wsPv_pfvqUcM5_w.roa (raw, json)
Hash identifier: VKYKl1hc0fPQSJUOBOLJ9sU2cWwV2AEca2Ti1LdRxHM=
Subject key identifier: 60:96:9F:00:F1:50:29:EA:3D:C2:C3:EF:FE:97:EF:A9:47:0C:E7:FC
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FD0
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YJafAPFQKeo9wsPv_pfvqUcM5_w.roa
Signing time: Fri 01 Sep 2023 09:37:19 +0000
ROA not before: Fri 01 Sep 2023 09:37:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 210.192.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4048 (0xfd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=60969F00F15029EA3DC2C3EFFE97EFA9470CE7FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:05:da:0c:c3:2c:f0:31:a4:9c:10:54:e0:
51:65:cc:d6:4b:54:d1:0b:ab:64:07:63:92:e9:47:
43:68:47:c9:8d:c9:2a:ba:f7:ae:f3:20:c5:83:15:
db:9b:35:b5:42:3e:d3:e5:56:4d:e0:0a:ae:6f:ac:
20:4e:2f:5d:13:d7:e4:d6:89:ba:72:b8:dd:09:13:
bf:b7:94:f9:f3:4d:66:4c:e0:94:78:78:40:c7:7c:
60:f2:ba:cb:61:18:99:4c:da:13:a9:22:f0:c8:dd:
bf:c9:58:28:9c:cf:26:10:8a:71:cd:ba:88:f3:46:
74:37:0c:41:a9:18:b3:45:41:1b:67:4f:ad:22:75:
4e:44:69:4d:fa:e9:af:4c:28:3a:5f:a6:e3:9a:73:
78:ac:cd:21:55:6c:b4:b8:e5:ae:df:cb:4b:7f:24:
da:cb:cc:9a:54:14:dd:be:e9:59:65:46:3f:41:27:
b1:a9:03:5e:7e:70:5b:e4:0f:38:14:d6:ba:0f:21:
0c:8a:e5:51:07:cb:e4:e9:5f:2b:a1:6e:b9:2d:34:
ea:59:27:44:35:0c:7e:f3:0f:26:e8:29:84:0d:38:
6d:ab:8b:72:da:99:4e:38:a3:8c:80:3b:5c:0f:35:
46:16:6f:9e:ed:18:3c:db:29:31:c2:a5:02:eb:c9:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:96:9F:00:F1:50:29:EA:3D:C2:C3:EF:FE:97:EF:A9:47:0C:E7:FC
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YJafAPFQKeo9wsPv_pfvqUcM5_w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.192.0.0/18
Signature Algorithm: sha256WithRSAEncryption
8b:ed:e1:71:d1:57:65:c9:8a:48:69:6e:b8:0a:53:ae:a6:c1:
7b:1d:62:a3:74:b3:fb:5f:4f:8c:56:ae:04:3a:5e:97:2e:e1:
d2:e3:1a:ec:cc:86:2a:4b:63:77:c4:f0:f3:a8:18:3c:ad:0f:
e7:42:2c:b3:24:55:bd:84:3f:10:2f:f7:12:c6:a5:9d:9f:83:
51:38:82:73:60:b5:37:1b:0f:51:be:51:9c:e5:50:79:d6:b5:
b1:d8:35:18:4f:23:4b:41:f9:84:91:17:7c:fd:ab:cb:28:52:
54:c1:57:f8:5a:07:4f:a0:f2:c4:2a:ab:dc:1b:09:a2:a1:df:
24:3b:c3:b1:69:0e:73:12:4d:2f:33:ba:1b:27:72:20:2f:88:
ad:8f:b5:d9:09:4e:5b:04:d4:c1:76:b4:cd:c4:da:4c:76:17:
e5:44:ec:9f:57:58:f4:84:51:fe:9f:fa:5d:36:79:f8:71:cf:
6f:be:35:fb:5a:43:2f:3e:a9:8e:51:a3:10:f8:b7:d6:cf:45:
9f:e6:81:01:39:76:a0:1e:97:db:e3:0b:92:6d:4a:d8:da:cc:
80:12:1c:d1:60:c5:13:bd:c5:8f:a8:45:1e:9a:a9:ed:36:e0:
ab:51:fe:0b:97:7a:0e:de:98:88:7a:09:e7:6e:be:3e:b1:d6:
1a:ec:4a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org