Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vr5odZjUTMv7Yt5u6juuMZ5tOCE.roa
File: vr5odZjUTMv7Yt5u6juuMZ5tOCE.roa (raw, json)
Hash identifier: C3NZ8T2b3i4htf4oArHWR+ENzWdSmjbtub06ld8XpVw=
Subject key identifier: BE:BE:68:75:98:D4:4C:CB:FB:62:DE:6E:EA:3B:AE:31:9E:6D:38:21
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 11BC
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vr5odZjUTMv7Yt5u6juuMZ5tOCE.roa
Signing time: Mon 26 Aug 2024 05:24:19 +0000
ROA not before: Mon 26 Aug 2024 05:24:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131634
IP address blocks: 210.17.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4540 (0x11bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:19 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BEBE687598D44CCBFB62DE6EEA3BAE319E6D3821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:44:cf:ee:da:84:1a:9f:0d:c5:f2:32:aa:
27:88:3b:d4:c2:e7:91:32:b7:38:45:f2:4b:a9:62:
47:21:d9:65:76:be:13:50:1f:b9:a7:eb:65:b6:78:
9e:7d:d8:c9:55:bf:a6:fa:87:f6:2c:28:43:6b:b5:
7b:f4:c0:e3:7b:9c:16:d8:ca:fb:9b:69:36:37:f4:
56:f4:9e:ea:b2:05:f0:5d:3c:74:1f:5c:bc:1e:5a:
85:a0:1a:c1:a7:b7:8b:67:33:d4:e8:47:ea:9c:a3:
18:f7:67:84:ad:76:7a:c7:cc:ac:1f:c2:fa:f6:a6:
88:b7:d1:09:26:e8:e8:60:df:36:a9:70:44:be:1c:
63:52:c3:fb:01:f6:a0:c4:ac:b3:05:35:2f:38:13:
c9:bd:e3:6a:c9:90:45:0d:37:9d:81:27:95:c8:1f:
34:9f:45:75:a6:3c:33:f0:71:06:fc:4c:8c:79:3c:
40:04:f0:55:05:0e:75:5f:d5:10:d6:d5:d3:aa:7d:
cd:ef:9d:87:93:e1:e5:6d:b1:33:97:92:4d:46:e7:
1e:e7:2b:0d:94:87:7d:2a:26:f3:8f:c9:d8:4a:35:
21:8a:57:bf:78:91:5d:24:bf:74:11:3e:53:20:b1:
b1:a8:ba:12:29:17:6b:41:83:f7:ad:7a:7f:17:3b:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BE:68:75:98:D4:4C:CB:FB:62:DE:6E:EA:3B:AE:31:9E:6D:38:21
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vr5odZjUTMv7Yt5u6juuMZ5tOCE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.80.0/24
Signature Algorithm: sha256WithRSAEncryption
52:68:28:7e:b0:af:0d:5c:d7:d6:d4:fb:ab:e7:28:1d:fd:5e:
4b:5f:a7:76:14:73:e8:46:6c:88:b7:bb:5a:c7:e0:0f:16:5c:
97:88:cc:2c:7f:a1:50:ae:26:b2:72:1a:9f:7a:66:3b:1e:1a:
cf:6a:75:2b:37:50:49:0b:ab:34:c2:93:08:07:2b:46:4b:8d:
a8:c4:18:df:50:83:ed:cd:9b:0f:40:b6:9f:9e:11:ce:4c:89:
64:97:7e:92:b8:23:d2:cb:ad:e5:48:c3:13:6a:5c:19:e8:eb:
68:3c:84:78:25:9d:74:3e:ff:09:b8:18:e7:3c:43:91:0c:bb:
10:59:fa:eb:d4:b0:77:2b:82:37:6b:ca:14:c6:8a:ae:f8:6a:
69:ce:39:9e:1d:b8:d4:89:aa:4e:0e:50:39:59:88:f3:ec:16:
27:3f:27:44:d8:71:e1:73:fb:71:49:2b:71:7f:5d:4f:9e:f2:
fd:1f:0e:bd:7c:98:94:33:a8:8a:dc:73:73:63:27:87:54:87:
fa:5c:d1:db:8c:27:61:1f:5b:06:ec:02:68:22:13:26:d8:02:
00:ab:a5:48:40:6b:c9:55:85:b0:0c:a8:de:e1:8d:0c:97:05:
6f:eb:e9:d6:49:1d:2d:85:da:d9:cb:6e:f7:98:5e:40:ec:f0:
31:63:f2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:05:01 2025 by rpki-client