Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/9qHLOwOiWtpKU6EbXFjpAleQafA.roa
File: 9qHLOwOiWtpKU6EbXFjpAleQafA.roa (raw, json)
Hash identifier: UQFOmptZMLWSh96plGtzbhFEybdIQNW66LY5fcrozjQ=
Subject key identifier: F6:A1:CB:3B:03:A2:5A:DA:4A:53:A1:1B:5C:58:E9:02:57:90:69:F0
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0BFB
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/9qHLOwOiWtpKU6EbXFjpAleQafA.roa
Signing time: Fri 01 Sep 2023 09:11:50 +0000
ROA not before: Fri 01 Sep 2023 09:11:50 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9416
IP address blocks: 124.155.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3067 (0xbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 1 09:11:50 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F6A1CB3B03A25ADA4A53A11B5C58E902579069F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:16:b3:6b:1e:dc:d6:c0:d5:aa:53:86:ec:
d0:60:da:c0:d6:85:e2:88:ac:a1:ed:c2:e3:85:34:
23:00:65:84:3c:dc:39:74:5a:12:e3:a2:a7:91:26:
41:03:b5:67:9a:d9:e9:d7:7e:98:5c:c8:d4:5c:ad:
80:bc:f9:12:b9:3d:52:66:55:2f:2f:62:15:ec:1e:
0c:cf:51:d2:c8:7f:91:f1:7a:f0:e0:5b:9c:fe:a8:
34:ee:0b:9c:02:34:92:9f:82:86:9d:02:09:88:1f:
9a:24:79:a7:d9:9c:00:aa:74:15:c8:81:f9:74:c4:
a3:a5:52:9e:07:dd:ee:a3:bd:60:5b:dc:c6:b6:84:
7c:e8:a4:9d:bb:d1:91:16:65:4d:68:18:2b:d6:df:
7d:e4:94:1c:2b:d0:35:70:9e:f9:7c:7e:bf:36:d9:
23:38:4f:2a:5f:f0:40:5a:3c:ba:06:02:a9:eb:c4:
0d:7a:63:8e:96:4d:fe:b4:88:88:6d:97:c0:80:5f:
cc:ee:ac:51:cb:a7:b1:45:3c:a1:fc:35:a7:d2:35:
fa:96:71:f5:32:cf:77:e7:e5:49:0c:75:4c:0c:1c:
59:c3:6f:74:f9:ce:83:99:33:be:50:13:1d:1d:05:
96:0b:6f:ea:31:34:6b:2b:83:44:26:ab:fc:27:e8:
66:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A1:CB:3B:03:A2:5A:DA:4A:53:A1:1B:5C:58:E9:02:57:90:69:F0
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/9qHLOwOiWtpKU6EbXFjpAleQafA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.128.0/19
Signature Algorithm: sha256WithRSAEncryption
4b:f5:08:ed:7f:da:ec:31:b1:42:3e:c2:a5:ab:cf:7f:fb:29:
84:88:79:79:c3:7e:10:6a:2b:76:ec:b0:22:d3:81:fa:65:95:
94:78:4a:4f:c7:73:45:d1:2b:df:ee:9b:c7:54:35:a9:28:eb:
16:69:8a:82:2b:2d:15:69:9e:03:76:fb:dc:0d:95:bd:ad:1a:
e1:1e:75:d9:dd:97:46:c8:94:7e:e6:d7:3b:35:db:a2:7c:fb:
ef:eb:fd:02:68:20:4f:b9:d8:77:54:8f:91:12:1c:23:9e:84:
ca:ac:54:ea:95:07:f1:58:1c:d7:44:a9:3e:06:90:df:2e:6b:
9e:a4:3f:d7:c5:bf:67:72:d3:02:bd:00:f2:1c:3e:8d:1d:42:
61:6e:1d:63:d9:8c:d6:c9:03:9a:aa:d5:8b:1a:b1:72:2f:68:
b3:77:b3:27:6c:7b:df:1b:18:5c:b0:b0:40:20:e8:75:7e:31:
51:6a:7e:64:53:bf:0f:52:ed:2d:2b:e0:c2:db:98:00:d9:c0:
6e:41:6d:5d:77:3e:4f:60:64:1d:68:69:f3:db:9d:42:47:76:
9b:1b:09:99:6c:6c:58:6f:43:81:40:e7:08:eb:af:5d:00:a5:
1f:d2:9c:cb:c4:56:4b:14:cb:d6:86:6c:ad:04:b8:7c:95:69:
2e:22:c3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org