Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/r3VSR1ayfP4OgcBGFh4MlG0JLOQ.roa
File: r3VSR1ayfP4OgcBGFh4MlG0JLOQ.roa (raw, json)
Hash identifier: CXn8R9xgh7BFx4tvU12aU/29tp+ZrYOSh/fdxhUflss=
Subject key identifier: AF:75:52:47:56:B2:7C:FE:0E:81:C0:46:16:1E:0C:94:6D:09:2C:E4
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FE5
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/r3VSR1ayfP4OgcBGFh4MlG0JLOQ.roa
Signing time: Fri 01 Sep 2023 09:37:26 +0000
ROA not before: Fri 01 Sep 2023 09:37:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131634
IP address blocks: 124.108.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4069 (0xfe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AF75524756B27CFE0E81C046161E0C946D092CE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:06:c5:63:4b:e9:6b:78:c7:61:80:94:18:
f7:69:24:ca:4c:d3:9c:aa:28:dd:05:85:61:f0:e5:
cd:70:d6:ab:96:7e:9c:23:40:fe:f1:08:c8:2e:39:
11:91:4a:ee:24:20:2c:16:ed:a3:8f:92:38:8c:13:
8d:22:cb:de:5c:12:57:97:0f:c0:96:b3:2c:e1:34:
15:75:c0:78:b5:23:97:11:78:47:5c:04:c8:4d:76:
71:71:4a:3c:56:74:da:a0:07:27:ab:3f:ad:99:c7:
1c:45:19:cb:62:61:f7:c2:54:6d:30:fe:62:08:89:
ce:fb:2e:e1:14:87:5d:0a:ee:db:ca:a0:e1:62:a5:
00:f5:bc:d1:1d:b0:22:6c:70:69:58:6e:60:4d:e2:
64:4e:68:86:46:37:2c:dc:87:fc:a0:ac:8e:79:f8:
8b:52:2c:11:31:ca:e6:c6:aa:30:d9:96:9b:6d:fb:
be:26:b2:d4:00:45:cd:2b:cc:fc:6c:21:e0:d5:93:
4a:96:07:5e:c6:b0:29:7a:ad:0e:41:ac:a0:c0:17:
36:3b:2b:fc:09:48:71:bc:18:e5:16:34:82:ef:65:
3b:35:56:d5:c9:df:9a:73:7e:87:0d:fe:53:20:85:
c8:53:da:d0:00:49:0e:f7:a8:6f:12:70:e7:c8:b2:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:75:52:47:56:B2:7C:FE:0E:81:C0:46:16:1E:0C:94:6D:09:2C:E4
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/r3VSR1ayfP4OgcBGFh4MlG0JLOQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.108.150.0/23
Signature Algorithm: sha256WithRSAEncryption
21:13:1d:4d:1c:4e:25:d3:3f:60:b3:d9:2e:6f:96:a8:e6:e6:
26:80:57:d6:3f:2e:8f:ca:03:7a:ec:ce:29:23:2a:49:0d:3f:
1d:63:77:2e:21:a4:41:47:bb:e2:23:c4:c0:d8:2e:2e:34:71:
05:49:ec:16:60:6a:31:81:da:11:7d:37:6f:a1:de:98:c4:59:
66:7a:bc:9a:c4:d7:1c:36:5e:68:18:3e:10:0c:70:30:e7:ec:
85:0e:13:91:01:fd:ae:01:ea:4b:ef:b4:ad:5a:18:90:84:3b:
ac:7b:57:88:4c:8e:21:0b:70:77:5a:c6:62:bf:b3:cd:4c:55:
da:56:f3:6c:7a:29:34:10:d2:61:ad:f3:24:a0:90:05:a8:67:
ee:66:48:34:54:22:ca:a1:03:fa:ee:50:0e:b8:94:f0:78:4e:
ec:ac:9a:53:bb:71:2b:0d:07:b5:e4:a1:a4:ff:1d:cb:10:b2:
ae:a9:29:4e:bb:13:03:64:8e:cf:c0:13:69:80:7a:40:d6:b2:
6c:9d:49:8d:94:4c:f5:18:d0:fb:e8:1d:e7:d8:29:fc:98:ff:
44:d8:e6:7a:51:f9:ae:25:f8:07:ec:d3:c0:00:c8:34:92:24:
4d:0d:7d:61:f9:f3:68:7d:bb:70:bb:0d:68:ff:4b:d8:37:47:
13:b1:38:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org