Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Zk8F21u8eDHewCJeJdJkKctuU0Q.roa
File: Zk8F21u8eDHewCJeJdJkKctuU0Q.roa (raw, json)
Hash identifier: ODE2iLa6BABWOwbCm1Mg0mOEG12iKsbdS7kOw5rwErM=
Subject key identifier: 66:4F:05:DB:5B:BC:78:31:DE:C0:22:5E:25:D2:64:29:CB:6E:53:44
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1247
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Zk8F21u8eDHewCJeJdJkKctuU0Q.roa
Signing time: Mon 26 Aug 2024 05:24:51 +0000
ROA not before: Mon 26 Aug 2024 05:24:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 210.17.20.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4679 (0x1247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:51 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=664F05DB5BBC7831DEC0225E25D26429CB6E5344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:ef:41:56:ff:cd:61:74:f0:69:5f:d1:4f:
8e:ad:f7:0a:27:ff:92:88:39:1c:36:91:5e:55:57:
8e:89:f2:6f:db:44:5d:01:bc:17:43:a5:ed:ce:90:
1c:f8:1d:46:fb:6e:66:8d:67:5c:98:fd:a1:13:1e:
31:a5:51:0e:a4:23:76:6a:25:31:3c:1f:fc:5e:a1:
2d:fa:a8:0c:29:0a:65:4a:3d:f5:a1:50:f0:17:b3:
a0:84:f2:69:36:4b:66:14:e0:58:88:46:01:2e:89:
c1:ad:1a:82:fe:6a:d1:7d:2b:90:09:dd:cd:ac:ee:
fb:6a:18:ca:82:07:88:eb:1c:e3:42:52:b0:dd:9e:
fd:8c:f2:30:6d:e6:bd:8c:e3:61:e8:a7:d3:4c:c0:
3f:a8:4a:eb:57:3c:b0:8e:9e:62:82:59:e4:bd:43:
d2:3e:2b:26:d4:ef:00:aa:ed:2e:24:41:30:d2:88:
c7:e0:1d:8c:a4:18:8f:44:c3:c9:2f:0f:11:f0:0d:
eb:89:55:95:aa:e6:7f:9e:ec:ee:e1:3c:d9:cc:35:
6e:6d:9e:22:7e:4a:92:a2:ea:0d:63:d0:97:11:4f:
e6:6e:29:fe:cd:66:02:c1:55:ce:44:df:39:f3:50:
2c:6d:af:d9:11:c2:1f:85:d4:35:45:79:a9:2d:e9:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4F:05:DB:5B:BC:78:31:DE:C0:22:5E:25:D2:64:29:CB:6E:53:44
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Zk8F21u8eDHewCJeJdJkKctuU0Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3c:a6:fd:e9:5b:c2:0f:4c:09:b1:79:74:f7:35:a8:5f:b7:
7f:74:80:ed:5f:af:3a:49:66:5e:7c:c5:e0:19:50:c8:58:12:
27:67:f7:0b:dc:41:46:67:81:83:60:13:a6:8c:98:56:aa:5c:
24:18:9e:8e:5c:cf:5a:ec:5a:47:65:cd:5e:3c:c3:d3:09:93:
1e:54:2c:12:96:e9:ea:ac:0e:1a:c4:57:2e:01:94:f7:30:63:
a0:e2:d8:16:73:6f:2d:f2:29:a9:85:10:42:79:77:15:fd:32:
58:0e:84:d5:d5:a9:6d:aa:c6:d7:21:7d:02:dc:12:f2:99:a6:
d8:6c:e1:aa:46:61:e0:80:41:27:45:a8:24:df:48:10:c6:39:
27:f6:aa:53:26:37:b9:69:a9:e5:0f:ef:0e:c5:aa:1e:02:02:
81:86:b1:67:96:a9:5b:42:ed:7b:8e:41:72:44:32:ce:16:26:
76:7c:60:1d:76:f2:74:6f:d2:13:6f:a1:72:3c:fe:20:ca:28:
5e:97:25:f8:49:c0:ac:29:9a:33:39:8c:c6:84:43:97:3b:04:
fe:ad:60:50:a5:47:34:e0:63:81:f0:f5:6b:0c:08:e6:b9:ae:
a1:90:af:31:7b:90:d5:f8:45:ce:c8:9d:92:d5:40:fb:2d:3c:
f5:ef:ce:2f
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw
NTI0NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY2NEYwNURCNUJCQzc4
MzFERUMwMjI1RTI1RDI2NDI5Q0I2RTUzNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDTu9BVv/NYXTwaV/RT46t9won/5KIORw2kV5VV46J8m/bRF0B
vBdDpe3OkBz4HUb7bmaNZ1yY/aETHjGlUQ6kI3ZqJTE8H/xeoS36qAwpCmVKPfWh
UPAXs6CE8mk2S2YU4FiIRgEuicGtGoL+atF9K5AJ3c2s7vtqGMqCB4jrHONCUrDd
nv2M8jBt5r2M42Hop9NMwD+oSutXPLCOnmKCWeS9Q9I+KybU7wCq7S4kQTDSiMfg
HYykGI9Ew8kvDxHwDeuJVZWq5n+e7O7hPNnMNW5tniJ+SpKi6g1j0JcRT+ZuKf7N
ZgLBVc5E3znzUCxtr9kRwh+F1DVFeakt6QYrAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUZk8F21u8eDHewCJeJdJkKctuU0QwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvWms4RjIxdThlREhld0NK
ZUpkSmtLY3R1VTBRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ANIRFDANBgkqhkiG9w0BAQsFAAOCAQEAKjym/elbwg9MCbF5dPc1qF+3f3SA7V+v
OklmXnzF4BlQyFgSJ2f3C9xBRmeBg2ATpoyYVqpcJBiejlzPWuxaR2XNXjzD0wmT
HlQsEpbp6qwOGsRXLgGU9zBjoOLYFnNvLfIpqYUQQnl3Ff0yWA6E1dWpbarG1yF9
AtwS8pmm2GzhqkZh4IBBJ0WoJN9IEMY5J/aqUyY3uWmp5Q/vDsWqHgICgYaxZ5ap
W0Lte45BckQyzhYmdnxgHXbydG/SE2+hcjz+IMooXpcl+EnArCmaMzmMxoRDlzsE
/q1gUKVHNOBjgfD1awwI5rmuoZCvMXuQ1fhFzsidktVA+y089e/OLw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:35:33 2025 by rpki-client