Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Zy7zVFZmhmXnUS7LTBc1_ZSs3ws.roa
File: Zy7zVFZmhmXnUS7LTBc1_ZSs3ws.roa (raw, json)
Hash identifier: zK0U1wfv440ovALDksuUwlzk9gdrDHXo6capCkcKoN0=
Subject key identifier: 67:2E:F3:54:56:66:86:65:E7:51:2E:CB:4C:17:35:FD:94:AC:DF:0B
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FE9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Zy7zVFZmhmXnUS7LTBc1_ZSs3ws.roa
Signing time: Fri 01 Sep 2023 09:37:30 +0000
ROA not before: Fri 01 Sep 2023 09:37:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 203.77.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4073 (0xfe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=672EF35456668665E7512ECB4C1735FD94ACDF0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:12:ed:0b:0e:7e:38:b7:77:38:4d:14:e0:
6d:6c:c5:35:92:3d:8c:f2:47:9f:2d:42:14:27:d3:
f2:e8:07:b9:f3:4f:21:2d:9e:d9:3f:0d:a3:13:43:
a7:e0:8b:d3:cc:ba:09:d6:8f:f6:a3:7a:1a:3c:6d:
ef:6a:e9:79:0c:7f:c1:93:7b:a0:c6:9e:65:7c:39:
32:f6:ce:8d:d3:7d:c8:1b:9e:e6:b8:4a:2f:78:fb:
f2:82:97:0c:35:ee:7f:5e:24:0a:c6:bc:80:88:4c:
aa:07:3e:fe:26:f9:70:da:8b:62:5d:ce:de:b9:84:
25:ba:c8:82:16:65:14:59:75:51:87:ca:19:07:91:
aa:5d:9b:49:69:2e:b1:e2:9a:bd:45:3d:9b:c7:59:
17:a2:76:aa:bb:38:c0:99:f2:1d:d4:88:21:87:25:
3c:31:49:0e:bb:92:ee:b7:f3:c9:ee:00:9d:d2:36:
21:f0:23:ed:d7:8d:1b:09:76:ed:7a:40:3e:30:af:
a3:32:96:93:a9:be:98:32:41:4c:16:36:68:3c:77:
9d:82:06:d6:a3:62:71:88:4a:d2:f9:b3:13:06:0d:
3c:32:23:76:52:2d:97:23:9e:10:0f:ef:21:f8:a0:
99:49:87:ea:80:20:23:e3:32:69:47:2e:f0:68:be:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2E:F3:54:56:66:86:65:E7:51:2E:CB:4C:17:35:FD:94:AC:DF:0B
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Zy7zVFZmhmXnUS7LTBc1_ZSs3ws.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.52.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c0:6f:6d:4d:4a:23:54:4c:a2:1e:28:d9:76:79:21:8e:aa:
63:0c:6a:28:94:0f:68:25:09:8c:8b:ed:5f:98:dd:d2:40:5d:
a1:82:63:da:1f:ad:a6:ff:bb:6d:74:a4:ad:14:c8:0a:9d:73:
64:d3:5d:76:aa:62:5e:96:8a:83:f8:a2:fe:a7:dc:25:f2:62:
04:6a:88:52:dc:9c:cc:d2:ef:10:18:86:54:63:99:cd:c5:5a:
5d:a6:dd:7c:09:65:51:c2:b8:d4:2b:db:62:be:ff:09:b5:08:
64:eb:8c:d2:a5:1e:2c:63:11:8c:48:45:4d:a3:e3:e0:42:40:
75:7d:e3:86:56:a8:a1:0d:76:aa:3e:c2:6c:f3:87:e7:0d:e0:
4d:89:5f:26:95:d9:0d:c8:87:d8:24:ec:82:07:d7:4c:91:00:
6e:28:6d:4e:ad:dc:fd:d8:9c:8a:0c:54:8b:fd:e8:66:3f:68:
77:73:77:19:ee:10:c5:9b:8f:9f:6a:eb:08:3e:67:e8:34:5d:
91:30:c5:63:5a:3f:77:26:56:97:cd:02:e6:1b:b2:85:ff:9b:
0a:87:98:31:75:2c:e1:f5:5e:13:74:85:f1:2f:91:e9:c7:f5:
18:2d:62:e9:23:7e:9b:70:96:0e:9d:19:63:56:c0:81:ca:ae:
87:45:1d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org