Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/qqoTTEXcFTXgJtDbr5pQOdybNXE.roa
File: qqoTTEXcFTXgJtDbr5pQOdybNXE.roa (raw, json)
Hash identifier: aXI4FhO7NDI0zEr5a3k2JXOf+u9X0t5n9EXIs/xPLz8=
Subject key identifier: AA:AA:13:4C:45:DC:15:35:E0:26:D0:DB:AF:9A:50:39:DC:9B:35:71
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0F90
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/qqoTTEXcFTXgJtDbr5pQOdybNXE.roa
Signing time: Fri 01 Sep 2023 09:37:01 +0000
ROA not before: Fri 01 Sep 2023 09:37:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 61.57.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3984 (0xf90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AAAA134C45DC1535E026D0DBAF9A5039DC9B3571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:ac:68:79:e5:92:c8:54:ed:2c:b1:ca:bb:
87:b4:6a:5e:1b:62:35:74:a5:51:a4:ef:67:a5:e5:
0e:f0:ad:6c:06:75:db:68:bb:d9:82:da:7d:b6:ac:
89:f6:cc:02:aa:7e:9c:d1:0f:89:e4:5b:d8:93:29:
1d:8e:0e:51:6f:d5:19:2b:48:dd:32:bf:6a:d7:7f:
52:87:58:51:03:eb:09:7a:c5:d8:c3:c6:20:d7:8e:
5f:c1:c8:4e:f7:7e:9b:71:ea:9d:e0:9f:66:34:a0:
a9:ab:3a:bd:2b:d3:ce:34:98:66:38:e0:b3:7f:57:
52:b9:ac:99:43:58:93:df:02:64:50:f0:0e:e6:f0:
fb:c6:38:a1:d8:83:72:08:7c:9b:2f:04:c0:ca:45:
e9:2e:63:de:36:70:3f:b9:77:7a:9a:81:66:ca:66:
c6:e1:5f:64:7f:07:d3:b9:99:b3:ba:fc:47:d0:6c:
9e:f4:01:8d:3d:24:53:72:98:0b:fe:80:33:9c:14:
50:6f:6d:35:f9:33:04:6c:8e:a1:5a:7b:8e:49:4a:
32:d7:ec:88:5a:d9:98:00:74:d3:6a:0f:36:0d:61:
16:f3:04:04:c9:1d:cb:d6:ff:91:79:16:df:48:19:
75:d4:69:4d:70:96:5d:98:12:9a:f3:08:64:81:66:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AA:13:4C:45:DC:15:35:E0:26:D0:DB:AF:9A:50:39:DC:9B:35:71
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/qqoTTEXcFTXgJtDbr5pQOdybNXE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:28:53:a7:f0:bc:13:d6:dd:30:bc:ea:cd:de:e0:85:4b:47:
f5:d6:bc:3d:6c:b4:e3:64:c8:df:b3:86:99:a2:3a:aa:4f:80:
44:50:cb:d2:84:b0:fb:7f:8b:21:b0:3a:2b:56:7b:55:ce:7d:
e6:d1:d3:24:42:72:0d:15:e3:a8:be:33:f7:75:96:fa:50:35:
18:ec:ed:b5:ee:90:dc:06:14:a3:23:7b:1b:92:05:0a:ab:65:
a7:3e:41:40:01:e5:9d:11:20:3b:36:b3:2d:49:7c:56:a0:17:
63:a0:05:fd:1f:b7:94:07:de:22:ff:83:dd:ea:53:8c:a3:1e:
c6:33:b7:21:a2:e6:fd:35:01:a6:33:08:ab:2f:46:f5:8f:10:
e5:7c:a2:6a:1b:cd:7d:e5:1c:33:2d:75:81:56:d1:ee:39:e8:
89:a9:a3:4d:e8:b2:db:1c:fd:80:76:02:5d:f4:48:33:e6:ec:
ba:86:63:b5:16:32:71:7d:02:8e:b6:a2:44:7f:9c:e0:ca:59:
12:6a:7a:d0:72:ed:d2:a7:56:e9:1d:bd:2e:fb:1a:52:41:35:
78:17:14:87:42:61:3a:2c:ac:a0:36:32:0a:60:dd:0b:95:0b:
6a:92:dd:61:ef:96:25:1b:16:09:e3:8d:52:5c:46:84:4f:08:
82:8b:6f:7b
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICD5AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw
OTM3MDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFBQUExMzRDNDVEQzE1
MzVFMDI2RDBEQkFGOUE1MDM5REM5QjM1NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKJqxoeeWSyFTtLLHKu4e0al4bYjV0pVGk72el5Q7wrWwGddto
u9mC2n22rIn2zAKqfpzRD4nkW9iTKR2ODlFv1RkrSN0yv2rXf1KHWFED6wl6xdjD
xiDXjl/ByE73fptx6p3gn2Y0oKmrOr0r0840mGY44LN/V1K5rJlDWJPfAmRQ8A7m
8PvGOKHYg3IIfJsvBMDKRekuY942cD+5d3qagWbKZsbhX2R/B9O5mbO6/EfQbJ70
AY09JFNymAv+gDOcFFBvbTX5MwRsjqFae45JSjLX7Iha2ZgAdNNqDzYNYRbzBATJ
HcvW/5F5Ft9IGXXUaU1wll2YEprzCGSBZqxHAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUqqoTTEXcFTXgJtDbr5pQOdybNXEwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvcXFvVFRFWGNGVFhnSnRE
YnI1cFFPZHliTlhFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BT05ADANBgkqhkiG9w0BAQsFAAOCAQEATihTp/C8E9bdMLzqzd7ghUtH9da8PWy0
42TI37OGmaI6qk+ARFDL0oSw+3+LIbA6K1Z7Vc595tHTJEJyDRXjqL4z93WW+lA1
GOztte6Q3AYUoyN7G5IFCqtlpz5BQAHlnREgOzazLUl8VqAXY6AF/R+3lAfeIv+D
3epTjKMexjO3IaLm/TUBpjMIqy9G9Y8Q5XyiahvNfeUcMy11gVbR7jnoiamjTeiy
2xz9gHYCXfRIM+bsuoZjtRYycX0CjraiRH+c4MpZEmp60HLt0qdW6R29LvsaUkE1
eBcUh0JhOiysoDYyCmDdC5ULapLdYe+WJRsWCeONUlxGhE8Igotvew==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org