Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/z_Mz8P9UUYv8qldQoiH-PqDeaa0.roa
File: z_Mz8P9UUYv8qldQoiH-PqDeaa0.roa (raw, json)
Hash identifier: 51h43OLF8MCkxsmoNceeMm9/x3QuUI3/3ZWpEBlDwaA=
Subject key identifier: CF:F3:33:F0:FF:54:51:8B:FC:AA:57:50:A2:21:FE:3E:A0:DE:69:AD
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1000
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/z_Mz8P9UUYv8qldQoiH-PqDeaa0.roa
Signing time: Fri 01 Sep 2023 09:37:37 +0000
ROA not before: Fri 01 Sep 2023 09:37:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131628
IP address blocks: 175.97.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4096 (0x1000)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:37 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CFF333F0FF54518BFCAA5750A221FE3EA0DE69AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d1:fb:95:b3:39:4d:7f:99:76:e6:18:fb:b3:
84:d4:a5:38:d4:0c:38:48:88:94:f9:1b:eb:3e:a4:
fe:2c:3c:65:59:be:8c:d1:ec:d6:5a:75:42:f6:48:
2d:e7:92:24:ed:96:88:ac:34:29:4a:f9:11:19:a6:
8f:49:e3:a4:f3:ca:2a:7b:ab:6c:8e:6f:bf:0d:35:
c6:05:45:5f:b7:fe:fb:08:6e:76:5d:0e:24:cc:13:
50:24:d4:20:5c:77:eb:f7:79:05:84:b3:3d:18:93:
ac:1f:f4:b6:d9:23:d5:c0:19:a7:1f:57:4e:69:a4:
85:c8:66:fd:26:d6:cf:a2:54:d8:76:16:d6:4a:37:
59:a2:d6:07:c6:ec:46:74:c4:d2:64:eb:5e:00:57:
07:c4:3a:d1:a8:68:ba:24:c0:8f:0b:cf:5b:58:63:
49:4e:14:74:0f:6b:db:24:91:64:c6:c7:29:fd:9f:
98:ff:33:95:a4:dc:cb:9e:c3:5a:aa:62:6f:18:c9:
1a:24:d7:9f:9b:b8:e3:c8:20:6a:f7:2f:a9:a9:ca:
a7:56:14:d0:cd:17:28:b7:2e:3e:06:b5:36:19:27:
58:69:0c:5e:0a:59:10:9f:f6:4f:b0:78:f2:99:c3:
bb:c0:71:9e:3a:9a:ca:99:25:0f:08:54:10:37:8b:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F3:33:F0:FF:54:51:8B:FC:AA:57:50:A2:21:FE:3E:A0:DE:69:AD
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/z_Mz8P9UUYv8qldQoiH-PqDeaa0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.97.192.0/20
Signature Algorithm: sha256WithRSAEncryption
87:c1:40:7c:52:1a:6c:ef:3d:96:a7:4b:38:f7:e1:0d:a0:33:
6b:3b:da:6d:5d:b6:2a:da:83:64:af:52:9b:5f:9d:89:ab:6e:
c7:cd:81:24:5f:ae:12:c4:e4:14:64:40:85:82:0e:98:79:49:
35:77:fc:eb:0e:c7:59:9f:6a:09:93:97:1d:a1:8e:a4:6b:68:
6d:a4:a5:16:c0:89:c9:10:52:37:91:cc:a7:f4:dd:93:81:c4:
4d:0e:9f:6c:24:3b:11:63:73:36:59:40:47:8f:74:61:ea:03:
a8:55:40:a2:27:f9:09:5e:1e:90:0e:d2:a9:70:a9:85:d5:22:
45:25:a8:18:38:d1:76:19:7b:02:4f:fc:e8:f2:88:7e:e5:95:
52:f3:db:16:37:d6:23:41:51:98:bc:a8:4e:c4:23:d8:04:62:
d2:56:86:fa:1e:5d:0b:28:76:4f:5a:92:8e:ab:9d:ec:07:6a:
1b:ba:70:71:be:0a:c6:05:ae:21:e9:02:d3:d3:24:bf:ae:2d:
f8:ae:f9:e2:a6:71:cc:35:ba:74:66:b0:d2:ec:af:91:4b:cb:
0b:58:64:1c:7d:03:e8:47:80:68:8b:ec:ce:77:29:a5:51:aa:
f8:19:89:41:ac:be:28:e5:31:18:d6:38:87:7a:c7:ec:33:2d:
60:1a:da:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org