Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cfp37eepcqKDMqgSVrmm5rvsABo.roa
File: cfp37eepcqKDMqgSVrmm5rvsABo.roa (raw, json)
Hash identifier: 3bfKU5HnkafW18Tl2jDwJtpeSPcTh4ZnUrMUyQjbqDc=
Subject key identifier: 71:FA:77:ED:E7:A9:72:A2:83:32:A8:12:56:B9:A6:E6:BB:EC:00:1A
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FFF
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cfp37eepcqKDMqgSVrmm5rvsABo.roa
Signing time: Fri 01 Sep 2023 09:37:36 +0000
ROA not before: Fri 01 Sep 2023 09:37:36 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 203.77.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4095 (0xfff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:36 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=71FA77EDE7A972A28332A81256B9A6E6BBEC001A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:96:c6:c1:a0:f7:b4:44:fc:54:6e:fe:92:
17:cc:1c:65:13:ff:b1:4f:a5:67:2b:af:13:80:bb:
d5:ae:ad:87:b6:a4:ac:76:ce:82:6f:91:3e:f6:70:
18:6c:1d:c7:aa:c8:e8:b9:8a:ba:b4:d9:f2:19:a5:
ba:9d:60:5e:84:3f:91:45:69:cc:a8:1b:16:f4:ef:
99:2b:03:57:4f:36:84:ab:b4:e3:ab:74:85:15:e5:
65:ea:e9:6e:e7:e8:4d:ec:d1:da:43:ad:e2:1d:c4:
c0:f9:0a:3a:44:13:4b:00:3c:ff:d0:38:fa:ae:73:
86:c0:73:28:e7:12:b2:e6:2f:03:54:43:46:4d:8c:
a7:45:b5:b3:b0:bd:39:c6:9b:9d:2c:7b:d6:c1:a1:
93:b3:a8:63:d5:4c:86:16:f1:79:13:37:ca:28:a7:
12:43:c9:b6:c9:2f:5e:8b:fa:16:b8:37:be:ab:78:
70:74:44:85:19:55:e7:1f:57:a5:f3:9c:6c:06:4b:
ae:63:fc:fc:e9:75:46:de:56:f5:3c:b3:e7:a8:ef:
89:19:ec:10:bf:0c:a9:5f:f4:f4:ee:a5:f4:02:b0:
89:28:f4:22:ad:fe:9f:41:08:b9:61:c1:9d:39:f4:
b4:82:bd:06:c5:31:26:f7:c7:39:0f:49:fc:28:b7:
9e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FA:77:ED:E7:A9:72:A2:83:32:A8:12:56:B9:A6:E6:BB:EC:00:1A
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cfp37eepcqKDMqgSVrmm5rvsABo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.32.0/22
Signature Algorithm: sha256WithRSAEncryption
19:82:6c:9b:2d:e1:49:f8:b5:aa:85:ff:4b:03:d0:58:2e:25:
aa:15:e6:be:69:2c:e6:1c:16:8b:61:ff:0c:bf:0b:db:f3:15:
15:1b:77:14:27:3e:27:89:ca:06:5d:01:84:36:d8:8a:ec:ba:
16:e5:4a:18:3c:aa:ed:31:e1:33:75:94:e5:db:bc:85:f6:aa:
42:f4:41:73:63:0d:46:9d:41:6b:8b:51:5d:63:a4:8e:fd:f6:
ed:c7:98:53:ef:f8:e7:89:05:e8:b7:2c:c4:a4:ab:9e:02:b0:
dc:b5:87:c4:b2:33:c7:66:bb:a3:9d:66:07:6c:0d:6b:45:98:
9e:02:b4:4a:11:04:80:93:be:b4:24:e6:50:d3:00:6d:ea:60:
05:1d:e4:ab:9b:3e:8c:85:b4:84:00:07:11:71:00:52:c0:38:
39:e5:3c:43:60:8d:1c:7f:59:81:0c:01:42:b1:0c:8a:2f:e4:
e1:20:96:fe:b0:28:64:9e:bb:98:4f:72:5f:49:a8:2d:50:78:
21:8d:f5:8d:11:0f:6d:81:dc:f9:de:41:48:5b:74:16:d6:8c:
80:16:ff:69:c0:79:93:35:a6:61:12:f8:49:3c:ae:e5:0f:69:
bc:81:50:fd:e9:4c:b5:f9:b6:d0:6c:08:8e:b3:93:a8:9a:af:
c7:21:9d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org