Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZwAXYIxMokjQkiBPkkK63FAWBzk.roa
File: ZwAXYIxMokjQkiBPkkK63FAWBzk.roa (raw, json)
Hash identifier: YBtyNj9ArjloxEwjJKeXxdnJS6MVvNdnan8m/ev+jwI=
Subject key identifier: 67:00:17:60:8C:4C:A2:48:D0:92:20:4F:92:42:BA:DC:50:16:07:39
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FDB
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZwAXYIxMokjQkiBPkkK63FAWBzk.roa
Signing time: Fri 01 Sep 2023 09:37:23 +0000
ROA not before: Fri 01 Sep 2023 09:37:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 124.8.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4059 (0xfdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=670017608C4CA248D092204F9242BADC50160739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:3e:30:e9:92:ad:52:2c:04:89:61:a6:aa:
a9:c8:bb:dd:84:da:f0:fe:6c:d7:1e:00:52:ec:98:
ac:34:32:f8:0f:37:4b:96:97:26:98:d3:4f:61:1b:
9a:d6:19:aa:5e:5d:e1:a1:92:97:84:2f:0c:1d:12:
5f:8c:c6:de:9c:2b:aa:da:87:7e:59:bc:6c:5e:34:
08:af:08:07:40:aa:e8:79:0b:4c:ae:ea:f2:e7:f1:
d5:c1:3f:3c:1f:aa:eb:cd:b7:7c:1f:6c:df:a5:af:
c9:b8:5f:5e:18:fe:bf:ba:de:1b:da:b9:c9:49:f5:
e2:6b:16:25:ce:2e:c3:5e:11:d2:a5:17:71:75:eb:
17:a5:a9:e9:ac:f1:6e:82:fe:36:05:bd:0b:83:6f:
1e:aa:52:e8:5a:b2:4c:ad:ef:ea:fa:f4:e4:fa:cb:
96:f0:2c:e3:14:2a:0f:a7:98:ef:e2:9e:2f:c5:d1:
1b:0c:8e:6b:f7:1a:e0:fd:60:aa:b1:ed:d4:4c:d3:
b3:14:ef:43:75:98:9e:7e:84:bb:7b:1b:72:d6:0f:
3b:49:e6:1a:12:87:a8:db:1e:dc:c6:3c:04:44:8e:
c0:ea:4f:cc:bd:c9:6f:51:49:58:02:29:1b:0c:81:
61:75:be:ec:25:fb:f6:83:02:de:e9:2e:04:8e:5b:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:00:17:60:8C:4C:A2:48:D0:92:20:4F:92:42:BA:DC:50:16:07:39
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZwAXYIxMokjQkiBPkkK63FAWBzk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.8.0.0/14
Signature Algorithm: sha256WithRSAEncryption
46:84:78:92:36:45:ae:56:2b:7c:f4:6c:3a:71:af:a5:a7:b1:
c6:13:b9:25:ce:e5:5b:5f:c8:4e:a7:fc:d3:b2:40:c4:90:c9:
a8:85:05:ab:f1:2c:3e:da:65:d7:9b:97:e5:de:0f:24:4c:b2:
dc:ed:45:25:53:8e:9e:4e:6b:c6:a4:14:e2:69:22:db:0d:e3:
7b:78:3d:e2:a9:81:31:d2:60:1c:c6:64:17:e1:a3:f3:78:b8:
1f:bd:cc:c5:ee:08:95:0a:7d:10:bf:14:d5:9c:4d:d1:26:69:
90:1c:0c:c2:17:00:aa:ea:0f:8a:e7:7e:d3:ab:a8:08:f0:24:
ad:eb:15:38:25:24:92:2f:a6:9b:01:6a:e2:3f:d8:c5:36:6a:
a1:b0:f5:70:28:ec:95:50:d8:13:50:33:5a:9a:29:fa:48:10:
f1:b3:60:eb:40:93:6a:30:22:a1:32:ed:85:e9:a7:dc:a2:c9:
e0:12:b9:62:1f:9a:aa:6b:84:95:94:eb:c0:e3:2b:5e:cf:77:
2f:e1:88:08:30:7f:96:7f:34:25:fd:bc:f6:d5:19:78:76:6e:
88:1f:e2:fb:3c:4a:31:01:5b:ad:03:1c:b1:21:96:a3:21:2f:
18:37:e2:f1:49:f4:c5:5a:71:ab:9c:60:a8:ef:83:9f:6c:fe:
45:d5:fd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org