Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yV5Ng5hf6ea_OVjg2ElHoGIsGmo.roa
File: yV5Ng5hf6ea_OVjg2ElHoGIsGmo.roa (raw, json)
Hash identifier: YO+H2FQi2jshKe4VCwH6OdOuSypYT9eaaeTA0C7QDMA=
Subject key identifier: C9:5E:4D:83:98:5F:E9:E6:BF:39:58:E0:D8:49:47:A0:62:2C:1A:6A
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FBC
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yV5Ng5hf6ea_OVjg2ElHoGIsGmo.roa
Signing time: Fri 01 Sep 2023 09:37:13 +0000
ROA not before: Fri 01 Sep 2023 09:37:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131628
IP address blocks: 175.99.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4028 (0xfbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C95E4D83985FE9E6BF3958E0D84947A0622C1A6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:fb:68:6f:0b:ae:1b:c3:bd:d5:c8:1e:6a:
77:e9:ee:de:49:ef:2a:73:82:bd:85:12:2e:40:e4:
86:1e:fe:34:d1:0c:eb:66:e1:38:46:65:dc:2e:45:
1b:86:84:78:1e:ae:48:72:b0:ba:36:f3:95:34:0a:
9e:51:0d:d3:b4:92:11:ad:53:a6:18:d3:b6:e5:50:
c1:17:4a:6d:4d:f6:c3:d8:e3:0f:e0:20:7a:6d:2f:
f1:27:46:0f:6a:53:14:43:86:10:1a:d9:95:e1:48:
f7:0c:47:21:47:8d:62:72:d8:3c:af:68:fb:1f:57:
e1:69:c5:02:47:79:05:02:e7:e0:54:b2:d4:68:a7:
a9:0b:c7:de:ef:65:62:49:de:32:04:86:f3:4d:c9:
de:3a:e8:85:9a:bc:7c:22:d8:a6:ac:11:90:45:b6:
9a:95:c0:09:6e:db:46:51:11:21:f4:a9:e1:06:23:
bf:a6:f4:19:af:99:9d:67:20:08:de:70:70:4c:a9:
61:71:be:a7:b4:78:09:6a:e1:44:ed:39:6f:ba:5d:
77:18:58:bc:5a:a1:cc:44:57:6f:63:01:01:24:32:
ea:16:d6:8d:ac:fd:85:9f:84:b1:12:68:83:51:95:
1d:f5:f4:47:d4:a2:e1:28:8d:3a:ec:38:c2:cd:b6:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5E:4D:83:98:5F:E9:E6:BF:39:58:E0:D8:49:47:A0:62:2C:1A:6A
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yV5Ng5hf6ea_OVjg2ElHoGIsGmo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.99.225.0/24
Signature Algorithm: sha256WithRSAEncryption
04:43:76:83:0a:9f:f8:85:74:5b:2a:81:04:74:74:b9:2e:ed:
00:62:4f:61:7d:b0:5b:8e:b3:6e:89:4b:e9:4b:d4:00:c2:f4:
24:1b:d5:0d:24:f8:01:f9:5e:f6:ed:74:88:7f:01:23:e6:59:
4e:17:e9:02:dc:16:a1:6d:bc:cb:00:82:61:36:92:5c:f3:06:
7a:81:3a:a3:ea:3b:ab:a1:d0:03:92:01:e1:01:28:ca:39:1a:
df:87:31:73:9b:da:5b:e8:ac:fb:9c:c1:f8:ac:c9:2f:af:8f:
b3:0e:b2:f0:b3:36:6b:d3:f5:fa:98:1a:1e:1c:54:f0:e7:ff:
24:a9:0b:c3:73:3b:fe:ba:e7:1f:2d:81:6d:8c:ad:df:7a:48:
41:fd:27:4e:9c:e9:b3:be:2a:48:64:aa:57:78:17:21:89:1e:
07:63:ca:45:81:20:79:7b:4b:de:c4:f2:6f:6d:49:a0:a5:3f:
cd:a0:4d:6c:27:9c:a8:d9:67:d4:5a:4e:4c:fc:9a:38:52:76:
66:20:22:0c:d3:7b:a0:a9:3f:1e:ba:2e:60:b9:ab:85:c7:f2:
4e:01:90:99:78:05:06:51:85:4a:69:88:ce:60:c6:66:18:97:
e1:eb:b0:22:70:3f:a6:c4:3f:4b:36:75:d1:2a:69:1c:18:97:
d3:2b:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org