Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/goaj7tqBpN3adSVZNexn5PCf6iU.roa
File: goaj7tqBpN3adSVZNexn5PCf6iU.roa (raw, json)
Hash identifier: J+8NegRs8ffYYresu7ZL08SAExTS4DkZuKZnQs2DhZ8=
Subject key identifier: 82:86:A3:EE:DA:81:A4:DD:DA:75:25:59:35:EC:67:E4:F0:9F:EA:25
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FF1
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/goaj7tqBpN3adSVZNexn5PCf6iU.roa
Signing time: Fri 01 Sep 2023 09:37:32 +0000
ROA not before: Fri 01 Sep 2023 09:37:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 210.17.19.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4081 (0xff1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:32 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8286A3EEDA81A4DDDA75255935EC67E4F09FEA25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9e:7d:87:8c:86:3d:74:3c:d4:62:10:69:29:
18:87:b6:21:77:50:6a:d3:b8:df:d7:d3:bd:b4:66:
3e:0c:87:7b:a1:9b:fa:09:ec:05:af:89:c9:5c:33:
8a:27:61:fd:b2:c3:42:f1:f4:6e:14:ef:6d:d0:12:
5c:8d:b1:c6:31:12:ae:d4:de:02:29:73:fd:21:4e:
92:48:9b:2c:0b:1a:e5:87:74:e4:92:4c:57:de:3e:
ed:fb:8a:f7:c7:81:9c:f9:90:d8:24:d2:60:6a:72:
52:6b:66:9d:ed:e1:43:a5:37:05:5b:65:a6:de:b0:
f7:1c:c3:61:b0:8f:13:ff:26:f6:c8:e1:3d:ef:0a:
09:60:2d:12:3f:c7:a3:f0:56:53:c2:1e:1b:f6:87:
8e:2c:f3:88:50:bd:0b:78:c7:41:c0:a5:07:5e:63:
54:66:50:59:df:de:44:d1:bc:ab:51:c6:aa:11:57:
4f:b9:0d:ae:cc:6d:57:94:97:1d:3f:d2:53:54:c7:
a1:44:f8:20:27:1b:02:21:35:66:bb:d0:47:ce:d3:
a6:13:48:4c:f2:3a:b6:00:b7:ed:84:5c:c9:9d:17:
72:6f:0a:f8:81:9c:02:8d:be:87:05:40:63:f0:fe:
84:9c:4a:2b:b2:d4:5b:e7:91:a5:7c:db:f7:19:5e:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:86:A3:EE:DA:81:A4:DD:DA:75:25:59:35:EC:67:E4:F0:9F:EA:25
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/goaj7tqBpN3adSVZNexn5PCf6iU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.19.0/24
Signature Algorithm: sha256WithRSAEncryption
57:da:52:f0:6b:4b:79:14:ca:9b:e7:35:2e:6b:be:0f:a1:8f:
98:1d:0e:f9:3d:ac:8f:f0:69:09:40:ef:7a:b0:83:d8:99:6a:
d9:ad:56:7c:ba:c9:80:f6:3c:4b:14:7f:97:91:de:b8:ea:aa:
37:95:2f:06:96:33:bc:e9:ef:7e:77:43:27:1b:d5:e8:ca:d5:
b4:60:09:5f:af:2b:b4:9f:b3:44:e6:ef:86:bf:1a:49:20:73:
57:0a:65:95:fd:e6:9c:aa:c9:79:96:99:58:66:c5:c6:0f:21:
2a:98:a3:fa:a7:07:d3:d9:b5:ba:b5:24:12:90:34:12:bb:42:
a6:77:36:85:3e:d7:88:e4:5d:fb:e1:08:f1:a0:98:28:3d:d9:
4f:67:24:db:15:2a:3f:1e:cc:9a:35:63:a1:6e:bc:a0:d5:19:
21:7f:7e:8f:f7:93:8e:2c:7c:c0:bb:21:35:c8:75:b2:58:f8:
19:af:87:ce:0e:af:af:f1:ad:23:9b:e6:42:eb:d9:21:19:40:
86:50:2c:11:d2:78:46:c4:15:d1:4f:c9:c3:5d:a4:1f:bf:44:
9e:74:50:aa:ae:a0:35:0d:2f:a2:d1:15:58:be:7c:f2:95:48:
82:b5:bc:44:bf:a3:9e:59:26:16:66:c6:61:f7:85:9f:46:d9:
f5:1f:56:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org