Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/uTOY4qdZROfQwUkWlilb3ji8Ch8.roa
File: uTOY4qdZROfQwUkWlilb3ji8Ch8.roa (raw, json)
Hash identifier: RwU6/9voC3w+BoJ+zJaXaAW3/DWFk0UWWBat4IlmLoI=
Subject key identifier: B9:33:98:E2:A7:59:44:E7:D0:C1:49:16:96:29:5B:DE:38:BC:0A:1F
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 129B
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/uTOY4qdZROfQwUkWlilb3ji8Ch8.roa
Signing time: Mon 25 Nov 2024 03:10:18 +0000
ROA not before: Mon 25 Nov 2024 03:10:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18049
IP address blocks: 210.62.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4763 (0x129b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Nov 25 03:10:18 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B93398E2A75944E7D0C1491696295BDE38BC0A1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:69:bb:ad:82:48:c2:ba:cb:f7:6b:23:60:3e:
34:cf:05:d2:2c:bc:38:42:86:dd:6e:b7:ae:05:3c:
c5:74:59:22:5a:ae:e1:3d:c2:46:ef:e2:fa:03:d9:
dc:b1:68:54:9a:9d:b3:7b:16:15:42:e0:5d:24:72:
07:cd:6f:98:77:92:23:f9:fd:4f:ed:1c:e7:50:45:
a0:fe:ec:b7:bf:7c:1f:08:9a:00:59:a8:54:6b:e0:
32:a7:71:3b:a0:5e:b6:75:ea:4f:ba:76:4d:86:47:
14:cf:61:21:e8:0b:25:fa:26:24:b0:ce:bf:4d:0e:
6b:60:a7:97:38:25:b7:e9:7b:52:40:26:74:4f:2f:
66:0e:23:b0:55:09:70:36:20:c9:79:10:27:19:c6:
1e:36:a6:26:9e:e4:b0:b1:c2:db:3f:e9:05:11:e3:
9a:e4:c6:b2:ec:2d:a4:61:38:37:36:5f:95:eb:41:
1f:60:14:65:b1:0d:7b:e2:71:86:fd:24:fc:a8:42:
68:08:ba:14:3f:8c:ba:7f:82:c3:6f:3a:96:18:2c:
60:8a:fd:45:be:c3:99:e1:e9:7d:90:6e:19:7a:00:
ae:07:a7:8f:ce:00:f1:a3:e3:cb:d4:a0:c1:6d:66:
25:cc:9a:11:c3:13:b3:32:8c:da:86:20:7a:ed:db:
80:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:33:98:E2:A7:59:44:E7:D0:C1:49:16:96:29:5B:DE:38:BC:0A:1F
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/uTOY4qdZROfQwUkWlilb3ji8Ch8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.32.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:55:94:08:f9:86:68:d6:83:9a:33:d2:76:43:33:fe:4d:91:
68:9d:e3:e0:59:82:98:c3:f9:0b:a2:f3:b3:bf:af:8b:22:54:
3b:0b:ab:92:ca:54:e7:54:e5:e0:b2:82:91:aa:da:56:1e:9d:
ba:16:82:40:6f:63:13:d3:49:27:07:ac:ee:33:f8:c8:07:2d:
7a:d5:fd:41:2b:73:3e:36:7d:67:9d:8b:9d:d5:82:5d:7e:96:
39:35:b7:91:99:da:67:78:78:47:fc:43:4e:6a:a4:11:91:12:
16:2d:e5:20:37:cf:16:a8:fc:0a:65:75:10:9e:b5:b0:fa:e7:
4b:9e:b2:19:51:f7:2e:33:09:d6:0f:ff:65:71:bf:d4:72:0d:
94:21:92:59:17:bc:60:4b:39:87:a6:5e:f2:51:e7:92:21:04:
46:42:20:b8:f6:30:af:a3:21:fb:f8:90:8d:7f:d9:5e:2f:d2:
b2:c9:35:a3:6c:af:2a:58:17:92:b0:1f:8e:04:26:3f:f0:f0:
93:d2:2b:82:2b:f3:08:43:ce:20:3f:c9:c5:08:45:7c:50:6b:
88:b0:57:a6:c5:74:cc:13:be:34:d8:b9:a6:29:16:9e:1c:35:
54:a7:05:f6:ee:06:89:13:40:ca:3d:ac:f7:05:71:c9:a1:71:
e8:bd:50:f8
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEpswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDExMjUw
MzEwMThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI5MzM5OEUyQTc1OTQ0
RTdEMEMxNDkxNjk2Mjk1QkRFMzhCQzBBMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXabutgkjCusv3ayNgPjTPBdIsvDhCht1ut64FPMV0WSJaruE9
wkbv4voD2dyxaFSanbN7FhVC4F0kcgfNb5h3kiP5/U/tHOdQRaD+7Le/fB8ImgBZ
qFRr4DKncTugXrZ16k+6dk2GRxTPYSHoCyX6JiSwzr9NDmtgp5c4Jbfpe1JAJnRP
L2YOI7BVCXA2IMl5ECcZxh42piae5LCxwts/6QUR45rkxrLsLaRhODc2X5XrQR9g
FGWxDXvicYb9JPyoQmgIuhQ/jLp/gsNvOpYYLGCK/UW+w5nh6X2Qbhl6AK4Hp4/O
APGj48vUoMFtZiXMmhHDE7MyjNqGIHrt24A/AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUuTOY4qdZROfQwUkWlilb3ji8Ch8wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvdVRPWTRxZFpST2ZRd1Vr
V2xpbGIzamk4Q2g4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BNI+IDANBgkqhkiG9w0BAQsFAAOCAQEAblWUCPmGaNaDmjPSdkMz/k2RaJ3j4FmC
mMP5C6Lzs7+viyJUOwurkspU51Tl4LKCkaraVh6duhaCQG9jE9NJJwes7jP4yAct
etX9QStzPjZ9Z52LndWCXX6WOTW3kZnaZ3h4R/xDTmqkEZESFi3lIDfPFqj8CmV1
EJ61sPrnS56yGVH3LjMJ1g//ZXG/1HINlCGSWRe8YEs5h6Ze8lHnkiEERkIguPYw
r6Mh+/iQjX/ZXi/Sssk1o2yvKlgXkrAfjgQmP/Dwk9IrgivzCEPOID/JxQhFfFBr
iLBXpsV0zBO+NNi5pikWnhw1VKcF9u4GiRNAyj2s9wVxyaFx6L1Q+A==
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:33:04 2025 by rpki-client