Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fNmU8EtNRSmUxOurj4VpYfbmVOA.roa
File: fNmU8EtNRSmUxOurj4VpYfbmVOA.roa (raw, json)
Hash identifier: akZDsjX7ZA+cI1HT8gETaCQPoPSmKbyPTpw222jJ73o=
Subject key identifier: 7C:D9:94:F0:4B:4D:45:29:94:C4:EB:AB:8F:85:69:61:F6:E6:54:E0
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1009
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fNmU8EtNRSmUxOurj4VpYfbmVOA.roa
Signing time: Fri 01 Sep 2023 09:37:39 +0000
ROA not before: Fri 01 Sep 2023 09:37:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 210.243.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4105 (0x1009)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7CD994F04B4D452994C4EBAB8F856961F6E654E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:dd:fd:af:a2:72:35:ec:e6:0d:2c:0e:8e:
c0:b6:83:d7:d6:53:1e:af:be:92:ea:c9:6e:7d:42:
a9:61:fe:52:c7:17:23:c7:76:85:07:69:0f:66:b4:
d7:f1:c7:3e:03:86:a2:76:c0:2b:60:88:b8:f0:b5:
6c:97:ff:68:f4:2b:5d:b2:f7:9c:8d:06:9b:f9:ab:
33:66:73:99:50:f2:95:05:97:b3:7c:6a:67:ea:4a:
45:bf:a7:14:77:cd:60:57:84:89:a4:a1:c8:26:ef:
a8:c7:56:cd:79:9c:d7:c9:03:e6:0e:52:31:97:08:
0b:f5:56:f3:9b:83:2d:4f:f7:77:37:61:22:06:3d:
f3:c9:cf:db:cb:87:51:dd:d6:2a:bf:33:07:1b:25:
08:35:f9:a1:e5:0e:ee:b9:23:97:b8:7f:f1:07:f6:
99:9a:17:da:62:e5:c4:c5:63:04:d8:a1:54:e2:b9:
3f:98:2c:b2:cf:e9:8a:92:6d:56:b3:21:28:a8:34:
42:9e:34:96:4f:5f:65:ff:37:a2:36:99:e4:85:dc:
5a:73:ce:bc:1b:cc:ea:18:37:f8:64:cc:2c:e2:82:
23:3f:0a:03:51:d4:45:30:85:29:9f:2c:79:e0:2a:
6a:89:e6:6a:24:c2:75:af:f9:a2:52:40:14:27:0c:
2c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D9:94:F0:4B:4D:45:29:94:C4:EB:AB:8F:85:69:61:F6:E6:54:E0
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fNmU8EtNRSmUxOurj4VpYfbmVOA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.243.64.0/19
Signature Algorithm: sha256WithRSAEncryption
19:6e:a6:19:94:49:e6:93:0c:d5:6c:5d:94:6c:9d:82:5c:58:
0b:e5:45:33:05:0d:9c:27:a1:a2:7f:a5:69:98:3b:4e:2a:99:
0d:33:37:de:9b:92:fb:9b:ea:00:5d:15:3e:94:c9:10:9f:31:
c5:c2:95:9b:0c:21:bc:18:07:a1:47:6e:7e:5a:43:c5:60:f5:
e0:85:75:64:b9:b1:8a:c8:83:65:3d:ac:e1:47:be:3d:cd:3a:
73:02:1c:80:f8:3e:a3:44:c4:49:ba:05:78:01:a9:55:40:3d:
88:28:a4:07:1f:93:e6:77:70:29:6b:eb:1a:80:3a:7d:fd:cb:
52:f4:91:8b:f7:1e:01:d2:00:d2:3f:b8:9c:87:28:6a:e7:f7:
35:b7:5b:29:55:5a:1d:66:01:b6:1b:5d:a2:b2:ee:6c:a3:60:
a3:8f:f6:48:86:f5:73:72:69:05:2d:c0:b1:16:72:35:f9:cd:
65:ea:7d:e9:2d:65:a0:57:0f:5a:d6:c4:ae:c5:03:99:8e:8b:
8d:95:45:04:54:85:e9:d6:77:3b:ef:58:b2:4d:2f:66:57:8f:
23:17:4e:12:78:a8:f1:b8:0f:ad:28:2f:40:83:01:aa:32:92:
b3:a6:51:ac:33:69:e5:64:58:87:41:f7:44:1c:b8:18:56:16:
a1:f6:3a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org