Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wIwkK9eHX2mpGtLfvUwsgt0aAdA.roa
File: wIwkK9eHX2mpGtLfvUwsgt0aAdA.roa (raw, json)
Hash identifier: gsKsFJmQB7rYoI9CndCG1kkK2zKBw70zZ8yDc1OeJNU=
Subject key identifier: C0:8C:24:2B:D7:87:5F:69:A9:1A:D2:DF:BD:4C:2C:82:DD:1A:01:D0
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1325
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wIwkK9eHX2mpGtLfvUwsgt0aAdA.roa
Signing time: Mon 10 Feb 2025 14:09:10 +0000
ROA not before: Mon 10 Feb 2025 14:09:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131628
IP address blocks: 175.99.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4901 (0x1325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 10 14:09:10 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C08C242BD7875F69A91AD2DFBD4C2C82DD1A01D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:51:c6:aa:54:f2:45:ed:f2:04:05:01:fa:
a2:a5:d8:62:cd:87:86:36:95:e3:18:7e:cb:ce:cb:
ea:ec:57:62:27:6b:86:e3:f0:0e:55:f5:8f:c9:e9:
86:b9:9e:71:98:b7:c2:4a:1f:c6:76:0c:8c:e6:01:
5f:fb:46:c3:8e:fb:25:cc:a2:c3:70:21:cd:fd:85:
53:05:c2:bc:15:17:e3:8d:41:07:55:5d:7f:1d:1f:
46:d1:22:9f:70:08:a6:96:c7:42:7e:1a:60:1e:2f:
f0:2a:a1:b8:e6:5a:15:ed:b1:e8:90:49:fa:26:8c:
d5:30:3d:4d:00:68:ac:9b:2e:9b:61:4a:66:1a:71:
10:eb:ab:35:bf:16:c1:df:40:07:03:89:64:f8:28:
85:c4:04:46:96:e2:88:6e:b0:03:7b:ff:be:44:09:
da:0c:20:f2:04:7f:99:19:e2:1b:db:2d:18:7a:3a:
13:d1:57:f6:c8:fd:35:9e:c6:73:9c:90:4e:f9:97:
01:93:fb:5d:0e:5e:05:04:88:d8:69:79:7f:69:f4:
ed:71:41:89:c0:3f:d6:09:ac:38:8a:5d:5f:62:97:
90:e8:e5:a5:61:08:cc:99:db:8d:8e:28:8c:73:04:
48:42:10:ca:19:fe:d4:b4:8e:c3:69:41:52:ff:3b:
23:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8C:24:2B:D7:87:5F:69:A9:1A:D2:DF:BD:4C:2C:82:DD:1A:01:D0
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wIwkK9eHX2mpGtLfvUwsgt0aAdA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.99.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:e7:3d:45:0d:7a:c9:1b:99:95:73:d2:90:55:26:9e:6e:a7:
f0:aa:07:4f:54:78:41:ed:e8:f3:23:1e:74:83:51:ea:47:a4:
18:89:7a:d4:6a:6f:59:2b:fd:fa:1f:15:e6:30:3a:3b:b8:a6:
dc:99:31:57:73:53:29:61:ba:a3:18:99:3c:f3:ac:fb:18:0b:
c3:e6:75:57:e3:e2:20:67:0c:66:c0:40:18:5f:37:8c:41:ad:
d4:65:b7:f1:40:8d:26:24:46:3a:67:30:65:ff:61:2b:7a:3b:
69:8a:8f:03:2c:c0:19:b2:d7:2f:a1:a6:1b:e1:5d:e3:db:64:
08:b5:5d:c2:85:ac:89:df:63:77:0e:7c:59:f1:09:0e:07:f4:
02:68:37:2c:0c:4f:03:fb:8b:60:86:03:04:bb:da:b9:cf:64:
af:a8:cb:30:21:b2:4a:e5:d4:a3:d9:76:b9:72:19:41:a0:92:
1c:45:8c:71:13:49:33:5d:dd:76:60:29:12:b3:3c:51:d4:74:
a5:0e:bb:15:05:49:b5:27:95:c2:fd:cb:32:81:6e:f6:43:d9:
6e:7f:b0:79:f0:65:d2:8a:d2:69:c0:e2:24:11:39:21:a2:19:
6f:97:72:ab:6f:d9:f1:75:29:05:70:4d:10:3f:d6:2f:f7:19:
eb:cb:81:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 13:44:16 2025 by rpki-client