Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/q0W9qBJdv93HgR-49lfIgwaZtVE.roa
File: q0W9qBJdv93HgR-49lfIgwaZtVE.roa (raw, json)
Hash identifier: dY8e/uwAQMo5w5OswL/QvOo+MCZqojlsNEfiAZ8DbLs=
Subject key identifier: AB:45:BD:A8:12:5D:BF:DD:C7:81:1F:B8:F6:57:C8:83:06:99:B5:51
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1309
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/q0W9qBJdv93HgR-49lfIgwaZtVE.roa
Signing time: Mon 10 Feb 2025 14:09:00 +0000
ROA not before: Mon 10 Feb 2025 14:09:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 60.199.162.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4873 (0x1309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 10 14:09:00 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AB45BDA8125DBFDDC7811FB8F657C8830699B551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:37:8d:3b:60:c2:13:1a:71:0c:4a:44:e8:
21:97:34:a3:65:23:28:07:ee:ef:24:44:e4:3d:34:
fb:e1:6c:47:ef:bf:1c:3d:4a:5a:bf:6f:0d:51:56:
9b:a2:59:77:0c:01:28:b5:73:29:66:56:dc:04:9b:
d1:fb:89:fd:52:5c:14:69:3f:19:b4:e8:bf:b0:36:
98:ca:8f:c7:72:52:d6:44:61:e9:bb:d0:b2:69:d0:
31:68:32:25:9b:e5:54:cf:e4:0b:8f:29:3b:d3:a7:
ec:da:a8:c8:c8:57:dd:79:c6:4d:fc:75:fd:4c:79:
df:71:52:d6:ea:5a:91:40:21:3d:09:ac:92:c1:09:
82:29:c8:2c:c5:1a:ae:79:91:4c:a1:7b:4f:d3:34:
be:07:b4:54:b8:ff:d6:77:a8:d2:f4:b9:56:11:56:
2b:62:8f:5e:0b:5c:c2:16:7a:aa:de:bb:32:f0:b2:
e8:e0:e0:58:71:18:9e:27:17:82:0c:43:49:4c:90:
a1:43:ac:b3:86:8e:6c:22:ed:60:58:7b:2e:f0:68:
80:dd:48:63:2e:f4:f7:8d:9d:e0:5b:9a:dd:d8:ea:
c4:5c:9b:2a:fc:28:71:67:e0:79:3f:88:c6:ac:1d:
e2:57:7c:e2:d7:9d:75:73:44:44:da:82:8a:fd:49:
94:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:45:BD:A8:12:5D:BF:DD:C7:81:1F:B8:F6:57:C8:83:06:99:B5:51
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/q0W9qBJdv93HgR-49lfIgwaZtVE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.162.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c6:b5:cd:41:54:da:83:20:03:56:2c:e4:d1:06:88:c5:bf:
92:a7:6f:60:42:48:d8:fe:ea:ba:9d:b0:ee:aa:15:f8:63:40:
cb:ba:72:0b:83:ad:84:41:02:ae:cd:f4:70:c6:2d:76:0d:d5:
22:51:73:ca:2f:c3:dc:16:f3:85:66:e4:d6:8d:e1:ea:f4:40:
08:7c:b9:97:ba:00:c4:d6:c0:7f:75:73:1d:8f:90:6b:38:ef:
25:7d:cb:67:ae:36:ac:4c:af:f7:69:30:2c:36:55:6e:32:fb:
48:85:6d:3f:2c:37:88:0f:7e:be:d3:3a:cd:f4:11:8a:50:4e:
d0:32:84:4f:be:07:56:80:b5:dc:40:fb:a8:26:13:11:43:e9:
d6:21:e6:7a:63:bb:b9:7a:8f:d9:28:df:bc:84:ed:63:45:40:
73:da:c7:36:f8:b1:e5:8b:b5:56:1a:a0:42:82:72:83:15:e8:
26:1d:7f:79:0d:fc:17:eb:b7:fa:4d:4d:5c:6a:d9:71:c2:a7:
b4:45:f4:29:08:25:fa:c0:7d:8c:25:1d:64:a8:f8:ea:17:c0:
62:aa:d1:68:70:74:f2:ef:db:f1:5a:a2:fb:04:0f:88:e5:b0:
6c:9c:14:5b:6b:36:76:15:93:52:e3:8b:86:f6:9b:97:0b:82:
02:b3:f3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:00:08 2025 by rpki-client