Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/uF3_OOicVqhJgVr1JkldC4Ph-pg.roa
File: uF3_OOicVqhJgVr1JkldC4Ph-pg.roa (raw, json)
Hash identifier: 4gw7ImrEn6NdHGAjHrKQqL7I3NajGoJCZWxYyI1D+7k=
Subject key identifier: B8:5D:FF:38:E8:9C:56:A8:49:81:5A:F5:26:49:5D:0B:83:E1:FA:98
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 100C
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/uF3_OOicVqhJgVr1JkldC4Ph-pg.roa
Signing time: Fri 01 Sep 2023 09:37:40 +0000
ROA not before: Fri 01 Sep 2023 09:37:40 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 210.17.76.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4108 (0x100c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:40 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B85DFF38E89C56A849815AF526495D0B83E1FA98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:59:91:fa:33:6a:e0:ee:13:d3:50:76:a7:
91:f1:b1:58:56:89:1c:93:44:eb:f1:15:3a:21:83:
9c:3b:79:b2:98:59:e8:a3:18:c3:f9:86:d1:03:08:
f2:7f:a3:1a:a6:34:85:8b:7f:13:bd:4c:44:9f:00:
01:31:93:fc:cc:ea:1e:f8:82:34:ad:b4:b2:a0:84:
a1:22:3c:01:cc:34:71:21:e6:fa:af:e4:ef:b8:0b:
cd:07:67:5b:d8:26:d3:45:b3:25:19:a4:13:1d:29:
14:4e:41:e4:1c:c7:a9:76:17:09:96:44:76:ac:b2:
c8:ce:dc:38:da:2b:05:69:95:a4:87:cc:91:e7:8d:
0e:c1:f0:d8:7c:91:a5:52:d1:86:12:0d:2a:96:0e:
bf:31:fe:c9:07:73:a7:6a:03:eb:26:2d:c0:11:cc:
85:cd:3c:1f:13:6d:36:1c:44:bc:9d:71:a1:5e:2e:
7a:2e:ae:9e:55:12:cf:1b:d6:bc:46:88:7f:a3:33:
f6:83:14:86:6e:c2:dd:78:a5:2f:e5:d5:28:78:46:
ab:79:fb:fc:23:fc:f9:3d:54:e6:25:89:c3:b1:81:
28:c2:f0:b1:78:1d:a0:a9:b6:10:0a:2d:da:eb:42:
db:cd:a3:63:1d:88:77:da:71:66:65:ee:37:89:a3:
b7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5D:FF:38:E8:9C:56:A8:49:81:5A:F5:26:49:5D:0B:83:E1:FA:98
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/uF3_OOicVqhJgVr1JkldC4Ph-pg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.76.0/22
Signature Algorithm: sha256WithRSAEncryption
37:c7:7b:99:fc:c6:7a:af:d9:da:61:e7:fd:4f:54:6e:b6:e4:
d0:64:35:c2:d7:2c:81:50:70:8b:33:a5:47:51:de:83:ea:b8:
2e:7c:e7:c4:bc:b0:74:de:18:ce:b1:5f:9f:a7:40:eb:7f:1e:
49:cb:27:de:96:51:70:86:fc:f8:69:5f:e8:03:96:7a:67:cb:
c3:2b:47:7a:9d:5e:08:b4:64:91:0f:ba:7e:3b:da:ea:53:37:
13:c8:6f:ec:a6:91:6a:0a:8f:c9:7e:7b:83:4d:5e:a4:c2:d0:
2f:df:cc:9a:4f:bd:fe:2d:ce:e3:83:b2:72:a1:c2:c1:d0:07:
ca:6c:77:86:2f:3a:8b:b2:b4:09:c7:c7:f3:d2:45:30:67:32:
36:bd:fb:8c:e6:74:c9:9b:9c:64:10:18:b2:cb:49:76:61:d8:
84:83:12:3e:d1:48:cb:6d:00:fb:aa:a5:ce:26:1a:17:0e:27:
a7:81:33:d7:fa:e7:13:dd:38:b4:fe:44:e0:85:f1:53:ad:32:
92:3e:52:54:dd:a1:2d:09:bf:d2:71:13:1a:11:d6:d5:b9:df:
1f:f4:64:08:ee:3c:b3:a1:ec:fd:11:5f:4a:f9:e1:e7:d0:4c:
61:1c:af:ae:99:3e:5c:ec:a5:a6:a6:ef:b3:4a:34:6a:6c:3a:
2f:ed:cb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org