Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/pUf4DWxDLxZutXaxyVbUoW4P264.roa
File: pUf4DWxDLxZutXaxyVbUoW4P264.roa (raw, json)
Hash identifier: GfETrFUHfU9+/MEzRVOXZw4eFb+oTtrRiRZrHS72+Ys=
Subject key identifier: A5:47:F8:0D:6C:43:2F:16:6E:B5:76:B1:C9:56:D4:A1:6E:0F:DB:AE
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0F81
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/pUf4DWxDLxZutXaxyVbUoW4P264.roa
Signing time: Fri 01 Sep 2023 09:36:56 +0000
ROA not before: Fri 01 Sep 2023 09:36:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131628
IP address blocks: 175.99.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3969 (0xf81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:36:56 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A547F80D6C432F166EB576B1C956D4A16E0FDBAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:35:0e:f0:59:eb:05:06:4a:06:63:61:4e:
1b:d1:40:b6:eb:b6:1b:6f:34:4d:82:c2:89:e0:35:
94:cf:f4:17:d8:d2:34:75:29:39:69:a2:b3:f2:52:
e9:a1:b0:bd:de:7b:5a:b1:9f:38:4f:cb:0a:70:c9:
77:fe:b2:31:8e:9a:7c:80:c8:39:d4:3e:6f:11:c4:
4a:9d:de:93:ce:61:20:56:76:ad:70:c9:3f:1b:c3:
a5:23:89:08:38:42:36:93:1b:de:71:1c:6d:82:87:
a8:50:68:c1:9f:2a:28:e3:26:81:ca:df:ff:76:14:
f8:8b:e7:d1:b4:e9:b0:f0:c2:c8:2c:6d:35:10:10:
c4:18:98:1e:c4:3a:06:25:16:ff:05:01:c0:60:93:
ee:37:ca:b4:5b:f2:19:2a:c7:2d:33:b9:51:8e:d2:
6b:08:36:64:f7:6a:96:b4:10:66:69:12:84:e2:36:
56:df:d2:a7:77:fc:8e:f0:58:a2:48:72:70:b4:50:
cf:75:56:88:71:b3:c5:62:18:86:7c:ba:13:01:04:
84:fb:1b:49:0c:0c:7d:1c:a6:8e:01:49:d6:02:78:
c4:0d:7c:cc:a9:40:e5:f3:93:3c:89:39:49:7e:58:
32:1d:2c:e5:f0:09:f3:bb:57:47:7d:35:bb:38:a0:
79:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:47:F8:0D:6C:43:2F:16:6E:B5:76:B1:C9:56:D4:A1:6E:0F:DB:AE
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/pUf4DWxDLxZutXaxyVbUoW4P264.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.99.226.0/24
Signature Algorithm: sha256WithRSAEncryption
04:61:75:19:00:5d:9d:29:44:d9:21:7a:c7:15:cf:7c:27:02:
98:66:9d:08:83:3b:05:7e:41:f0:5c:61:96:92:26:03:66:58:
47:d5:8c:28:3f:6e:50:59:a5:d4:80:d8:ef:fe:eb:64:05:fd:
87:5d:06:75:04:46:08:1a:52:14:31:2c:aa:b6:3e:8a:ba:06:
0a:1f:63:c3:ac:58:68:c9:ae:35:b1:a2:e3:00:70:b0:15:69:
3c:59:38:b2:87:b7:fc:c8:83:69:6e:8f:20:5e:3f:c8:56:fa:
cc:0e:76:b4:59:29:a4:5a:07:e2:52:5b:bc:ac:e2:ac:c2:9a:
61:a7:bd:9d:09:bf:f6:82:90:3c:d1:81:e7:25:83:12:d7:55:
2f:f0:c2:e6:12:fd:d8:86:32:c1:41:37:76:90:4c:f1:df:3c:
7a:d4:ef:e0:bb:bc:ce:a4:0f:84:a6:1e:c1:e7:40:0c:a2:da:
41:6e:6f:01:32:bd:87:4c:8e:44:8b:bf:21:3f:7f:75:4c:cb:
d4:18:b0:65:61:5b:d3:f1:5e:c3:84:18:a4:22:51:a7:4b:24:
7d:13:bf:72:04:08:ce:13:e2:66:d7:2a:6e:50:f8:e1:8b:ec:
09:5e:54:0c:c3:54:ca:5f:76:21:90:22:c5:6f:dd:f3:db:e3:
8d:59:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org