Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/hJOFRjEowpbp9pMUvTuETZktUts.roa
File: hJOFRjEowpbp9pMUvTuETZktUts.roa (raw, json)
Hash identifier: CaBf99RIAIXR0B5V2Myq/BZCrUaX/WIvUKbRu6ks6vY=
Subject key identifier: 84:93:85:46:31:28:C2:96:E9:F6:93:14:BD:3B:84:4D:99:2D:52:DB
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FF4
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/hJOFRjEowpbp9pMUvTuETZktUts.roa
Signing time: Fri 01 Sep 2023 09:37:33 +0000
ROA not before: Fri 01 Sep 2023 09:37:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 61.30.239.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4084 (0xff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=849385463128C296E9F69314BD3B844D992D52DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:f4:b0:c8:a6:8b:0a:2e:af:11:42:cb:40:
55:38:0d:4f:72:8c:3d:2f:25:4c:70:fc:86:e8:29:
1a:b1:3e:26:78:b7:6c:99:f6:88:4a:4d:91:c7:00:
3d:67:08:a2:e1:96:9f:33:87:af:dd:83:df:b4:dc:
b9:82:be:d2:ef:c0:36:3c:86:b4:06:5f:89:9c:11:
b7:5f:26:ae:75:70:86:22:76:a4:25:71:25:56:4e:
d2:68:a4:c6:aa:a6:c9:08:94:a5:10:3a:00:49:7b:
f2:27:4d:fb:29:36:59:cc:a9:0d:f9:30:12:43:f4:
dd:fc:a2:9f:f4:06:29:af:88:0f:d8:1c:7a:e4:a0:
cf:59:0a:0c:84:22:4d:80:f8:4f:40:2d:5c:37:af:
30:18:c5:16:7d:4f:7d:e2:09:69:e3:ac:52:d1:d7:
09:1a:74:7d:00:4c:14:b3:06:24:67:ff:f9:e5:f5:
b8:82:23:63:40:b1:b1:89:4f:9d:00:68:82:42:ba:
3a:99:25:eb:33:b9:67:61:28:94:dd:db:2b:fb:5f:
4d:d4:17:90:39:98:37:05:45:69:98:86:92:72:e1:
d4:50:ad:1a:87:36:22:96:d4:21:a9:d7:7d:a6:b9:
2b:21:99:71:8f:88:2b:b0:b8:05:7a:0c:16:e3:d9:
db:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:93:85:46:31:28:C2:96:E9:F6:93:14:BD:3B:84:4D:99:2D:52:DB
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/hJOFRjEowpbp9pMUvTuETZktUts.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.30.239.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:dc:51:11:98:6e:23:48:20:13:e3:44:21:25:c5:96:31:af:
fe:f9:3f:c8:aa:d7:76:96:f8:a8:8f:6b:f8:69:3e:24:0f:72:
68:07:c4:34:3d:c1:c2:ab:c6:a3:8b:a8:54:c3:2f:b3:61:b8:
06:15:56:c2:1f:20:7b:a0:5c:bc:37:0b:30:6a:14:9d:0f:ca:
0d:85:f4:06:8c:cf:78:b5:5d:a0:d0:51:bf:43:9e:e0:7b:43:
74:0c:89:61:5e:b7:c5:73:ea:fe:43:f5:7a:b7:ec:b8:d0:66:
e4:80:73:54:0f:e4:ca:d7:e5:60:91:68:85:ab:89:d3:61:b4:
47:34:30:87:b9:80:92:7c:51:aa:16:8f:ad:a0:c6:56:86:c5:
15:f3:af:5a:5a:f1:22:cd:82:0e:3d:8d:7c:ec:b1:0b:83:bd:
e8:af:f1:3f:45:21:ae:b5:9b:fd:8a:d2:46:3b:ca:3d:0f:7f:
1a:2f:cd:8d:0c:0a:8e:db:f2:3e:e0:ff:97:10:66:14:72:33:
e1:46:1b:25:7f:81:cf:75:6b:c9:c9:be:c1:fa:ad:ea:fc:a2:
4a:cc:63:15:6f:6a:7b:11:89:47:23:55:1d:55:38:be:3c:6e:
ba:e1:6a:d2:f2:78:c1:7a:c0:bb:a2:41:b5:fb:9f:a0:e0:96:
b8:75:26:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org