Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/C1xsjZNfSuuP8PnmaQqBhAmp5A4.roa
File: C1xsjZNfSuuP8PnmaQqBhAmp5A4.roa (raw, json)
Hash identifier: DdnJnTl/QTDDCw5/MvJ/0ILjGmB+SwWKUFvrsy1icUA=
Subject key identifier: 0B:5C:6C:8D:93:5F:4A:EB:8F:F0:F9:E6:69:0A:81:84:09:A9:E4:0E
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0BF4
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/C1xsjZNfSuuP8PnmaQqBhAmp5A4.roa
Signing time: Fri 01 Sep 2023 09:11:48 +0000
ROA not before: Fri 01 Sep 2023 09:11:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9416
IP address blocks: 115.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3060 (0xbf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 1 09:11:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0B5C6C8D935F4AEB8FF0F9E6690A818409A9E40E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9e:3c:45:f1:7d:e0:5f:fa:bc:bc:b2:c2:ae:
8e:0c:73:a1:b2:28:22:60:d2:f9:a9:81:c1:eb:b5:
49:65:57:3f:33:79:86:e9:fb:e5:6c:43:35:1b:89:
36:d2:b7:88:db:19:12:a0:1d:6c:b3:9d:c1:cf:ad:
17:81:b4:28:45:c3:cc:2e:f3:ea:eb:c1:93:94:18:
c0:85:3a:45:46:fc:b1:37:82:83:62:13:71:ba:89:
12:8e:ae:e6:de:21:c3:50:b0:3f:ed:29:92:fe:d8:
dd:09:96:2a:bb:29:a9:e4:94:e0:38:f1:42:63:8a:
f3:10:12:fd:92:e1:c6:dd:60:07:57:85:1e:7d:13:
22:88:26:f2:70:86:79:c3:97:38:24:9d:ed:89:a4:
04:ab:96:53:be:fc:36:aa:dc:41:f5:3a:50:7b:b2:
48:48:06:80:c4:f8:cb:52:36:74:26:b2:44:3e:d0:
e6:3f:5e:19:b3:d3:ed:2c:b4:4c:2b:7a:b1:90:18:
2e:26:c5:5b:3e:ea:78:91:b1:09:af:a1:e3:46:bb:
0c:0c:78:50:80:52:38:06:85:9a:46:62:d0:83:46:
54:15:53:b4:1b:c4:15:f8:80:79:ed:46:8d:5e:96:
86:8f:be:5c:8d:bd:64:3f:0c:a1:96:c8:87:bf:a7:
80:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5C:6C:8D:93:5F:4A:EB:8F:F0:F9:E6:69:0A:81:84:09:A9:E4:0E
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/C1xsjZNfSuuP8PnmaQqBhAmp5A4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:76:51:be:73:e9:1c:ed:a8:47:d2:bf:56:13:d5:0d:5c:60:
33:fb:ca:e5:66:d4:98:80:a2:18:73:4e:c7:e9:cc:3a:35:ca:
8b:7f:f7:6f:cd:34:46:8d:a2:db:ee:4b:85:11:5c:c0:42:b8:
8e:d2:fc:ab:db:57:6d:f9:63:75:ed:34:a7:40:6b:5e:6d:cf:
97:64:25:c7:90:02:d5:f8:e2:d0:f6:c1:80:f7:b8:f8:a8:f9:
ec:eb:99:6a:0e:02:9f:1e:61:22:4e:25:14:0e:db:99:b6:32:
f1:e8:18:6e:31:25:f0:52:bf:dd:99:61:0c:fb:2e:4b:fa:db:
e4:d7:f9:23:90:67:c4:e4:d5:80:cb:cd:73:ee:d7:8f:d3:93:
8b:58:4e:b4:f5:1a:37:cc:cd:f0:10:54:3e:8c:c1:d7:91:9f:
ea:62:67:b2:31:27:6e:c8:27:87:42:25:cb:82:2b:2c:01:b7:
cc:2c:9b:ad:da:11:b6:37:0c:17:e0:b4:06:3a:4a:88:7a:0c:
ac:5f:66:66:4d:35:84:9f:14:18:1e:bd:14:95:7a:94:09:72:
63:16:88:38:b3:e5:58:cc:76:8c:ad:ed:7c:c1:5f:5c:f2:af:
c0:27:ad:14:fb:ef:02:01:1f:d3:8f:d1:da:fe:2f:2c:42:98:
09:73:f1:29
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICC/QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5
QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yMzA5MDEw
OTExNDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBCNUM2QzhEOTM1RjRB
RUI4RkYwRjlFNjY5MEE4MTg0MDlBOUU0MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDsnjxF8X3gX/q8vLLCro4Mc6GyKCJg0vmpgcHrtUllVz8zeYbp
++VsQzUbiTbSt4jbGRKgHWyzncHPrReBtChFw8wu8+rrwZOUGMCFOkVG/LE3goNi
E3G6iRKOrubeIcNQsD/tKZL+2N0Jliq7KanklOA48UJjivMQEv2S4cbdYAdXhR59
EyKIJvJwhnnDlzgkne2JpASrllO+/Daq3EH1OlB7skhIBoDE+MtSNnQmskQ+0OY/
Xhmz0+0stEwrerGQGC4mxVs+6niRsQmvoeNGuwwMeFCAUjgGhZpGYtCDRlQVU7Qb
xBX4gHntRo1eloaPvlyNvWQ/DKGWyIe/p4CTAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUC1xsjZNfSuuP8PnmaQqBhAmp5A4wHwYDVR0jBBgwFoAUmZu+Ex3100bydifM
T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H
L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL0MxeHNqWk5mU3V1UDhQbm1h
UXFCaEFtcDVBNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBz
KzANBgkqhkiG9w0BAQsFAAOCAQEAKnZRvnPpHO2oR9K/VhPVDVxgM/vK5WbUmICi
GHNOx+nMOjXKi3/3b800Ro2i2+5LhRFcwEK4jtL8q9tXbfljde00p0BrXm3Pl2Ql
x5AC1fji0PbBgPe4+Kj57OuZag4Cnx5hIk4lFA7bmbYy8egYbjEl8FK/3ZlhDPsu
S/rb5Nf5I5BnxOTVgMvNc+7Xj9OTi1hOtPUaN8zN8BBUPozB15Gf6mJnsjEnbsgn
h0Ily4IrLAG3zCybrdoRtjcMF+C0BjpKiHoMrF9mZk01hJ8UGB69FJV6lAlyYxaI
OLPlWMx2jK3tfMFfXPKvwCetFPvvAgEf04/R2v4vLEKYCXPxKQ==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org