Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vx3aadC3jcCKO43FVZFyg7UzdMk.roa
File: vx3aadC3jcCKO43FVZFyg7UzdMk.roa (raw, json)
Hash identifier: RrbDVB8VNzHfsucMue2d80+O7Fcr77L5TT6BSaZUuEE=
Subject key identifier: BF:1D:DA:69:D0:B7:8D:C0:8A:3B:8D:C5:55:91:72:83:B5:33:74:C9
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1355
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vx3aadC3jcCKO43FVZFyg7UzdMk.roa
Signing time: Mon 10 Feb 2025 14:09:22 +0000
ROA not before: Mon 10 Feb 2025 14:09:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 61.31.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4949 (0x1355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 10 14:09:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BF1DDA69D0B78DC08A3B8DC555917283B53374C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:2f:eb:ee:3f:a9:a5:47:7c:50:c7:a7:48:
89:0e:71:da:33:eb:0e:01:26:3e:c0:96:cc:1d:db:
6f:97:11:58:90:06:09:3c:93:2d:76:b3:5a:51:65:
d7:83:5c:e0:a0:50:6d:28:e6:f9:e5:85:a2:62:1a:
19:05:dd:65:2b:93:15:bd:8b:6f:3b:07:21:61:b9:
d3:c6:80:3d:06:ab:96:65:80:49:b1:1f:8a:b2:f1:
6e:fd:03:9c:1a:e8:f6:a9:5c:83:fb:b0:63:26:33:
79:d1:17:32:46:64:a0:37:9e:53:99:e1:90:8e:f7:
4f:58:9d:ae:d2:8d:ac:5a:0a:de:3f:4b:b5:b1:de:
31:7f:e0:43:a0:47:45:5f:73:fd:52:c5:40:8b:42:
1c:9c:53:71:aa:75:9a:5c:23:c3:5a:02:84:df:86:
1c:c2:be:25:5b:19:0e:39:cf:de:4d:b0:2f:e8:bd:
8a:9a:bc:4a:03:63:e4:08:0a:df:a4:c4:2c:20:f6:
52:fb:51:f2:c1:35:3f:0f:75:e4:29:4e:7a:48:1d:
6d:ed:68:7f:c3:08:aa:03:1c:08:b9:f6:af:0a:cc:
30:8d:14:08:c7:64:1c:c2:91:30:63:e6:76:2a:a2:
4d:dd:0c:c8:5f:2f:08:cb:a5:ab:c5:04:c4:c4:24:
c9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1D:DA:69:D0:B7:8D:C0:8A:3B:8D:C5:55:91:72:83:B5:33:74:C9
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vx3aadC3jcCKO43FVZFyg7UzdMk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.31.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:79:35:90:16:70:04:be:5d:d2:3b:ce:13:81:7e:cb:bc:02:
b3:32:a2:c6:b1:a9:b0:30:01:50:45:f5:d8:dd:af:50:0e:ae:
68:ec:ed:ad:fe:77:7b:75:15:0e:1c:fb:f3:8d:51:a7:00:89:
1a:02:ed:f0:f2:b2:39:da:59:a9:28:d8:81:e6:e0:ba:b4:08:
92:3a:98:12:e6:02:b6:e7:ed:ed:1e:37:d5:19:fc:ae:c5:66:
64:ca:99:12:4a:18:08:e1:54:46:26:83:aa:29:ac:30:e8:06:
d4:b5:e9:2f:a6:b5:82:b0:39:88:3a:97:c4:2f:8d:cc:be:63:
25:ad:16:f0:0c:73:f5:79:b7:ac:dc:d7:55:fe:18:34:cb:ac:
df:13:b5:5d:88:0b:21:2d:da:52:6a:90:62:8e:14:92:0b:aa:
32:bf:7e:56:4d:78:7b:c8:f8:40:df:19:f7:f7:a6:53:78:cb:
ba:1b:36:32:ee:f3:3f:25:c4:3e:24:19:4b:f2:9a:5c:1d:e1:
fb:9b:07:2d:7f:15:a7:b3:aa:c1:6d:cf:12:c8:79:2b:64:a4:
1e:20:8d:45:fe:82:4d:bc:33:6f:77:4d:7f:a7:b2:a8:e4:49:
8c:02:64:2b:5f:32:97:f6:c7:4c:22:67:9d:c3:93:d3:1e:bb:
3f:45:df:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:17 2025 by rpki-client