Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Z3BT_XArcamIJT1ofwoafKUVF6M.roa
File: Z3BT_XArcamIJT1ofwoafKUVF6M.roa (raw, json)
Hash identifier: CJWMGnXK4sVSItCqnnbOvuEF3MTp8a+zBz4GukJxUCE=
Subject key identifier: 67:70:53:FD:70:2B:71:A9:88:25:3D:68:7F:0A:1A:7C:A5:15:17:A3
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FC4
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Z3BT_XArcamIJT1ofwoafKUVF6M.roa
Signing time: Fri 01 Sep 2023 09:37:15 +0000
ROA not before: Fri 01 Sep 2023 09:37:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 175.99.72.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=677053FD702B71A988253D687F0A1A7CA51517A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:e1:a7:51:b3:20:a0:b7:d2:d7:92:97:a4:
25:77:07:77:c8:6c:ac:36:3c:74:0b:4b:1e:27:85:
6f:a8:88:7d:fd:d8:36:0d:87:1b:87:27:bd:39:ce:
18:d8:9f:7a:2b:aa:f6:68:f9:40:72:8c:f6:9b:f5:
9c:5a:21:44:a6:61:5b:76:8e:8d:1c:25:36:bb:fb:
f2:53:1d:12:af:60:62:73:47:13:ef:59:56:49:99:
ae:76:46:de:45:cb:d5:15:f9:82:c2:ae:11:ec:e3:
5a:c3:61:9a:3e:cd:a3:b0:8b:ba:8c:1f:f2:71:56:
0a:f4:a2:25:67:f9:ca:f2:02:d3:52:71:5a:66:c0:
e3:1d:43:2e:d0:b8:0b:d6:06:6b:2d:e7:fa:92:bf:
52:26:17:72:24:a3:ba:b0:4c:e2:93:04:b6:0e:d0:
04:24:56:85:21:33:5d:95:3d:1d:31:8e:3d:d8:0d:
01:90:09:6a:09:db:a1:5a:39:4a:37:4b:00:2c:ac:
ca:4d:7b:12:87:43:9a:79:9c:a9:61:2a:7b:f8:28:
76:a7:91:58:5e:f4:e6:a5:78:3a:bd:4a:d7:44:53:
75:2c:29:93:0b:2c:d1:45:9d:7f:ff:8b:54:68:65:
e4:87:8e:b6:92:25:c2:e9:c0:c8:e2:35:c5:be:b2:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:70:53:FD:70:2B:71:A9:88:25:3D:68:7F:0A:1A:7C:A5:15:17:A3
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Z3BT_XArcamIJT1ofwoafKUVF6M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.99.72.0/24
Signature Algorithm: sha256WithRSAEncryption
09:12:71:d7:e3:8b:56:13:10:70:c1:81:6f:08:41:c0:c7:9b:
82:63:18:2c:e0:b7:49:e2:6a:89:5b:63:73:09:53:65:54:b5:
bc:74:95:1a:aa:14:3b:1f:19:8a:7b:1f:24:f3:7d:75:3d:99:
d1:81:76:61:e5:c7:ba:2e:9c:4b:28:d3:dd:73:df:5a:9b:28:
b5:44:0c:0b:15:06:02:a0:91:0d:d1:ff:1d:9d:fc:16:c7:99:
49:f6:47:71:d0:04:01:14:87:09:c6:52:d9:a2:09:ea:65:eb:
00:29:be:e0:3b:78:b4:ef:31:10:be:8c:50:3c:ac:ff:be:0d:
e1:4c:b1:0c:7a:41:db:27:b9:a1:5e:b7:58:f6:a7:5a:95:f3:
2a:f0:3c:91:a2:a0:2e:c2:0b:1a:de:fe:81:17:94:c9:b7:73:
87:40:2b:c0:4d:ab:ea:23:09:e2:81:c5:8b:ba:a1:9c:96:d2:
75:c6:83:8e:b1:d2:25:9d:73:85:8c:1c:72:4c:b4:a1:f8:68:
f1:a8:02:cf:9c:28:cf:c8:6f:0b:f2:2d:1b:a2:8a:fd:82:7b:
77:20:72:12:59:54:ba:c4:3c:00:85:b7:53:dd:64:ca:be:14:
6c:47:98:f2:70:d6:00:d2:2e:fe:ef:35:7a:f7:73:38:a3:0e:
9c:38:a7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org