Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/y3-ybr-9e6GzB2w2xd4pv18p_oA.roa
File: y3-ybr-9e6GzB2w2xd4pv18p_oA.roa (raw, json)
Hash identifier: TAY+uZ2y/7817Gb+0+0dflxppqBcthCHZQuSdUoM9zY=
Subject key identifier: CB:7F:B2:6E:BF:BD:7B:A1:B3:07:6C:36:C5:DE:29:BF:5F:29:FE:80
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FCB
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/y3-ybr-9e6GzB2w2xd4pv18p_oA.roa
Signing time: Fri 01 Sep 2023 09:37:17 +0000
ROA not before: Fri 01 Sep 2023 09:37:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 103.224.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4043 (0xfcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CB7FB26EBFBD7BA1B3076C36C5DE29BF5F29FE80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:42:57:e9:83:ae:6f:bf:ef:37:12:b3:9a:
70:7b:85:42:3f:1f:07:f7:5d:be:48:b0:55:db:5d:
c6:0f:23:32:5c:a2:9e:6f:d5:cf:e9:aa:17:a7:99:
0a:e9:cd:81:2f:b1:3e:ed:87:86:a9:fb:4a:da:da:
a1:1b:0f:e4:db:e0:a0:58:f9:9a:fb:11:04:2e:0e:
d6:1c:34:39:0b:2a:a2:d9:60:12:53:c6:63:12:ab:
19:1a:01:eb:2b:c4:a5:6e:49:b8:16:59:47:57:65:
e7:ba:76:fe:25:9c:49:a3:b8:93:1b:5b:89:25:c8:
80:a9:f7:82:1b:49:83:23:e3:c2:e6:d6:72:8a:7c:
1b:2a:6a:09:df:01:30:68:d2:53:8d:78:13:22:8a:
36:81:ae:d4:ba:da:44:ef:f2:c2:ea:68:ae:6d:d6:
a2:cb:b9:ab:7f:af:8c:cc:83:1c:d4:e2:58:26:5d:
55:8e:82:81:37:45:68:1a:76:4e:52:55:1a:9b:5b:
e3:69:a1:8a:ae:18:2a:26:e9:2b:72:44:53:f8:b8:
b4:a5:06:5b:25:1e:de:fd:63:51:9a:fb:17:65:a6:
4b:9e:22:92:22:3e:95:c1:d2:b3:2b:c2:4f:ec:3c:
0f:26:ac:0d:e6:39:3c:a9:57:10:10:4a:7c:92:45:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7F:B2:6E:BF:BD:7B:A1:B3:07:6C:36:C5:DE:29:BF:5F:29:FE:80
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/y3-ybr-9e6GzB2w2xd4pv18p_oA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.132.0/22
Signature Algorithm: sha256WithRSAEncryption
36:f3:b6:eb:de:4a:a1:b6:c1:11:4e:7c:26:65:d3:66:ec:64:
1a:e4:63:60:6f:3b:59:86:20:42:2d:34:59:71:6a:48:d6:c9:
49:2a:bc:7d:d6:c6:a0:b1:b4:d7:cd:ec:bb:f8:1c:7f:78:99:
0f:0b:6e:b3:e7:08:20:bd:62:0a:76:63:d0:32:2b:ec:ab:99:
31:f0:a8:51:b3:59:5f:07:0b:11:40:97:fc:44:42:f0:44:b3:
7d:06:80:55:43:47:47:06:5a:b5:b6:a2:93:d3:56:2f:70:5f:
08:1d:2f:96:18:b7:61:28:9d:a8:4b:36:bd:db:87:5e:78:8f:
06:f3:ba:05:c1:0e:6b:9e:45:6e:5d:26:6a:54:f2:0b:ef:20:
6b:ab:b1:f4:76:e5:eb:fd:04:86:38:c5:23:c8:13:d7:79:ec:
94:1b:e8:ca:4e:66:e9:46:e8:b9:80:79:54:a9:72:a2:1b:5c:
27:4b:2e:9f:4b:1f:17:4b:d8:a2:9b:2f:83:b6:d2:7d:32:a7:
35:cf:4b:8a:b5:a3:ea:e2:32:7b:bd:6c:e0:a7:5d:62:ff:5e:
6e:86:75:60:23:f6:f2:d8:ef:63:10:9a:f9:8d:20:e5:08:8e:
84:d2:8d:f6:aa:a1:b0:5d:d4:60:79:fa:2b:9e:29:f8:c3:86:
39:ae:b6:76
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICD8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw
OTM3MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENCN0ZCMjZFQkZCRDdC
QTFCMzA3NkMzNkM1REUyOUJGNUYyOUZFODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2AEJX6YOub7/vNxKzmnB7hUI/Hwf3Xb5IsFXbXcYPIzJcop5v
1c/pqhenmQrpzYEvsT7th4ap+0ra2qEbD+Tb4KBY+Zr7EQQuDtYcNDkLKqLZYBJT
xmMSqxkaAesrxKVuSbgWWUdXZee6dv4lnEmjuJMbW4klyICp94IbSYMj48Lm1nKK
fBsqagnfATBo0lONeBMiijaBrtS62kTv8sLqaK5t1qLLuat/r4zMgxzU4lgmXVWO
goE3RWgadk5SVRqbW+NpoYquGCom6StyRFP4uLSlBlslHt79Y1Ga+xdlpkueIpIi
PpXB0rMrwk/sPA8mrA3mOTypVxAQSnySRZObAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUy3+ybr+9e6GzB2w2xd4pv18p/oAwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQveTMteWJyLTllNkd6QjJ3
MnhkNHB2MThwX29BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AmfghDANBgkqhkiG9w0BAQsFAAOCAQEANvO2695KobbBEU58JmXTZuxkGuRjYG87
WYYgQi00WXFqSNbJSSq8fdbGoLG0183su/gcf3iZDwtus+cIIL1iCnZj0DIr7KuZ
MfCoUbNZXwcLEUCX/ERC8ESzfQaAVUNHRwZatbaik9NWL3BfCB0vlhi3YSidqEs2
vduHXniPBvO6BcEOa55Fbl0malTyC+8ga6ux9Hbl6/0EhjjFI8gT13nslBvoyk5m
6UbouYB5VKlyohtcJ0sun0sfF0vYopsvg7bSfTKnNc9LirWj6uIye71s4KddYv9e
boZ1YCP28tjvYxCa+Y0g5QiOhNKN9qqhsF3UYHn6K54p+MOGOa62dg==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org