Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/gDQpu42lYW8uNoHCYvrqAP3wOfc.roa
File: gDQpu42lYW8uNoHCYvrqAP3wOfc.roa (raw, json)
Hash identifier: pJ39/dRPYhmxJ0WS8HdB84IjleLfvjmog2ogs/bdw/0=
Subject key identifier: 80:34:29:BB:8D:A5:61:6F:2E:36:81:C2:62:FA:EA:00:FD:F0:39:F7
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FA9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/gDQpu42lYW8uNoHCYvrqAP3wOfc.roa
Signing time: Fri 01 Sep 2023 09:37:07 +0000
ROA not before: Fri 01 Sep 2023 09:37:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 2001:c50::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4009 (0xfa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=803429BB8DA5616F2E3681C262FAEA00FDF039F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:53:16:61:b9:b3:b6:c5:33:ec:56:10:34:
cc:99:0a:90:f4:5c:81:ed:57:90:50:42:d5:d2:26:
96:0f:ad:c5:12:22:0d:7b:a4:1a:2d:f2:44:42:04:
7f:cc:f5:38:59:17:d2:3f:9d:7a:b9:31:08:c4:4d:
3e:cf:e9:23:1c:b0:11:57:53:8b:bd:ca:f7:fc:3b:
89:d4:20:fd:74:03:c9:85:b8:e6:e1:12:6d:58:ed:
67:18:53:fc:b9:9a:67:15:84:c3:97:8b:fe:6f:84:
b0:ce:03:5e:dd:12:75:d7:a8:3c:45:f4:f9:98:5e:
4f:33:5f:77:f3:83:0c:c8:e6:fb:7d:20:c8:1e:c7:
65:fd:74:cf:f7:58:7b:25:8d:69:17:e9:96:08:1d:
1c:64:65:dc:b1:0a:29:8d:b6:bc:c8:c4:d7:c3:5a:
e5:a7:43:0a:7c:be:75:ca:41:30:06:a6:92:e5:7b:
eb:78:35:9e:10:1d:45:09:79:c1:73:1e:e4:05:95:
f2:d6:14:12:ce:86:6b:74:bb:9b:13:c6:5b:ea:69:
8a:93:42:86:47:d7:83:67:26:02:32:b5:49:fc:17:
a1:8f:9d:d2:6d:26:32:88:f0:8b:52:d3:3d:f4:af:
ce:65:fa:50:e4:da:81:2b:15:ff:27:3a:57:5e:86:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:34:29:BB:8D:A5:61:6F:2E:36:81:C2:62:FA:EA:00:FD:F0:39:F7
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/gDQpu42lYW8uNoHCYvrqAP3wOfc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:c50::/32
Signature Algorithm: sha256WithRSAEncryption
49:eb:ef:40:2c:9a:aa:fc:b3:e3:5d:9b:37:5b:d4:a1:48:aa:
e8:c2:8c:7e:69:c2:9a:95:c9:c2:32:21:71:a8:50:f8:88:2c:
47:4d:29:30:ca:1f:a0:9e:6a:01:52:98:66:41:d6:b7:9f:7d:
de:80:f4:8a:2a:3d:d6:ad:e0:d1:72:18:89:ea:81:0d:be:18:
5b:bd:36:d3:5c:c6:76:30:bd:98:53:03:f4:98:ad:d8:3e:95:
28:ac:8d:2c:c2:8f:f6:b2:c9:ea:bb:77:54:4a:16:3e:3d:2e:
0e:7c:5d:db:56:ca:1b:dd:a1:ce:40:e1:09:d4:cc:d8:94:11:
bb:98:ad:21:9d:7b:33:c5:c5:a6:6a:f6:16:3a:b3:ae:21:e6:
93:59:c9:68:89:6d:79:18:35:0b:8e:6b:d4:aa:77:0b:9a:d2:
e4:59:bf:6e:c9:00:7f:b4:16:54:e1:b6:72:df:01:b4:12:20:
b7:a4:25:ee:2b:f5:0d:68:5a:03:ab:e3:36:8a:4d:ba:ba:4b:
8c:a1:cb:b9:36:ee:2c:c5:3b:7b:32:a5:93:67:f2:4f:bd:e8:
19:89:7c:26:41:12:ce:d2:4e:d5:9b:aa:7c:fc:7d:81:9d:c1:
61:6b:58:f2:5d:0f:0b:be:bb:9a:15:db:c9:8a:39:c6:36:c8:
44:b2:3e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org