Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/sQ1MfJVN7f7KOUCztz7cvYcUFJo.roa
File: sQ1MfJVN7f7KOUCztz7cvYcUFJo.roa (raw, json)
Hash identifier: K1CGH9oLidzHC1ZccHETPcGAaHllcT2vxUjZQoXn9Tk=
Subject key identifier: B1:0D:4C:7C:95:4D:ED:FE:CA:39:40:B3:B7:3E:DC:BD:87:14:14:9A
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0F79
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/sQ1MfJVN7f7KOUCztz7cvYcUFJo.roa
Signing time: Fri 01 Sep 2023 09:36:53 +0000
ROA not before: Fri 01 Sep 2023 09:36:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24158
IP address blocks: 203.105.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3961 (0xf79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:36:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B10D4C7C954DEDFECA3940B3B73EDCBD8714149A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:f2:0c:d6:19:67:8e:62:f0:28:3d:cc:e5:
02:ab:a7:bd:17:de:9a:f8:51:4a:ac:82:4d:d8:88:
d9:11:45:9c:9e:1c:86:54:09:39:63:fb:0e:fb:16:
c2:ca:11:a0:cc:15:e3:2f:cc:04:b7:a7:dd:72:c9:
67:91:41:52:48:79:10:23:4f:c9:20:cc:6a:5d:6c:
1a:b1:21:35:34:5a:52:0c:c5:92:7a:3f:eb:d1:ab:
c9:1a:8f:80:d6:26:db:84:f4:ca:5e:2d:e9:34:a6:
8d:52:f4:d4:9b:a1:d5:48:24:95:34:d7:2a:0c:6e:
48:2f:f7:1e:e0:e7:56:ae:f7:d2:90:f7:3a:5f:d7:
6b:3c:8e:01:0b:5d:ea:d1:3b:22:21:02:6b:f1:68:
88:37:3a:d8:01:0b:8a:fc:e6:1d:9e:e5:4c:88:9f:
53:74:dc:9a:bd:6b:82:31:0b:cc:f9:13:83:db:74:
97:7b:26:11:d9:e8:0c:84:32:a9:3c:34:3d:91:da:
2c:9f:53:95:31:4c:63:f5:43:45:62:91:03:fd:08:
0f:ee:4a:66:62:a6:b2:2c:d6:c1:36:44:55:8f:49:
b3:38:f4:64:18:04:19:f9:d9:7d:d7:6b:56:28:60:
c4:bc:96:91:9f:ca:c3:2a:4b:df:49:40:41:40:40:
c1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0D:4C:7C:95:4D:ED:FE:CA:39:40:B3:B7:3E:DC:BD:87:14:14:9A
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/sQ1MfJVN7f7KOUCztz7cvYcUFJo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.105.224.0/24
Signature Algorithm: sha256WithRSAEncryption
68:49:61:8f:47:00:64:93:fd:2c:35:24:49:33:2d:7f:08:57:
07:05:78:68:ba:80:c3:b4:23:1f:73:15:74:6e:27:d1:f0:8a:
0b:12:1d:bb:86:68:08:e8:ca:e4:91:34:cb:da:77:f8:f7:a4:
75:36:ec:95:33:f2:b3:2d:f0:f8:05:62:74:b3:b4:85:87:3f:
b0:08:c6:e2:b3:57:7f:73:0f:48:fc:fd:7e:9f:9b:25:f2:6c:
77:61:65:93:bb:24:ca:70:8f:68:39:7d:20:b3:1d:da:ea:18:
bb:eb:a4:97:15:c0:85:85:da:6c:a1:6e:34:5a:45:44:9c:25:
69:42:13:0e:11:e0:2a:81:1d:4b:8f:b0:26:c5:d8:65:25:70:
6a:c8:9e:78:7d:66:25:fc:7c:c5:a0:33:5d:ae:91:09:a7:d9:
29:f4:81:c3:9b:32:97:83:c6:66:91:85:18:94:5f:bd:43:ab:
f1:1c:13:07:39:da:71:28:0d:c3:fd:68:42:5f:d9:86:82:94:
84:8f:7b:96:94:bf:49:49:13:c4:1f:d3:3b:93:94:76:5e:f1:
68:8c:3d:00:a1:7f:fe:43:e1:b3:21:79:eb:41:12:e0:1a:49:
5e:97:6d:96:29:08:8c:0e:72:c5:5e:29:87:52:ec:c1:c8:0b:
b1:e1:78:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org