Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/CpEYD2pqIMO-O93Wz9PnaxlSxkg.roa
File: CpEYD2pqIMO-O93Wz9PnaxlSxkg.roa (raw, json)
Hash identifier: LzJC7sDZ3GDIw6Y7bFwPRxRdvTwZdfX5hej1GcxfPuo=
Subject key identifier: 0A:91:18:0F:6A:6A:20:C3:BE:3B:DD:D6:CF:D3:E7:6B:19:52:C6:48
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0BF7
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/CpEYD2pqIMO-O93Wz9PnaxlSxkg.roa
Signing time: Fri 01 Sep 2023 09:11:49 +0000
ROA not before: Fri 01 Sep 2023 09:11:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18042
IP address blocks: 115.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3063 (0xbf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 1 09:11:49 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0A91180F6A6A20C3BE3BDDD6CFD3E76B1952C648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2b:a1:4b:40:24:14:75:d0:60:a0:d8:0b:40:
25:0e:11:9a:0b:39:99:95:07:f8:8e:0a:ca:d5:37:
84:f8:a4:fb:ae:79:81:c6:10:dc:b4:89:f7:4f:5b:
2a:b1:83:ec:41:87:26:f1:a3:0f:87:d0:d5:07:c7:
7e:bf:39:49:dc:23:9d:18:cd:19:ab:55:23:30:1f:
a9:46:a1:df:26:26:e3:ac:50:6f:15:db:ef:07:0f:
fc:8e:7d:2e:c6:66:b7:7e:56:68:d7:20:63:82:10:
ce:d8:66:1e:2e:00:05:bc:d0:4e:20:7a:09:4f:39:
c1:c4:de:d1:74:31:f1:85:7e:3b:5b:78:42:ff:67:
53:ca:9e:f7:d9:c3:10:f9:5b:79:94:52:cc:68:28:
e8:5a:9d:f4:f4:d9:71:72:42:6e:1e:7d:36:5a:0b:
6f:aa:4a:1e:cc:ea:73:7a:e1:74:95:50:65:8b:f9:
77:ba:2d:e5:85:6f:d5:34:9a:9b:31:3f:b4:93:90:
b9:43:bb:52:1f:d4:b9:17:07:c7:4f:fc:b6:32:ea:
d7:67:f5:17:ee:b2:9a:5c:b2:7f:3d:87:aa:c5:46:
21:68:64:9c:95:34:94:80:c3:10:5a:33:be:32:43:
df:2c:9c:75:32:00:69:65:28:ab:f2:ae:82:9b:f6:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:91:18:0F:6A:6A:20:C3:BE:3B:DD:D6:CF:D3:E7:6B:19:52:C6:48
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/CpEYD2pqIMO-O93Wz9PnaxlSxkg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:a8:ff:8b:62:bb:b8:d0:b7:4d:16:44:4d:f0:2c:16:df:ed:
c6:fc:e4:fb:b2:ee:f1:6a:5b:50:65:87:2f:5d:82:a5:a8:36:
8f:b7:e3:f3:12:de:38:9e:ec:d7:a6:d0:7b:dd:27:b1:8f:4a:
79:28:53:01:9a:c7:05:55:24:fc:6b:51:03:01:ba:c1:23:38:
51:c8:8d:74:c8:79:80:41:38:d0:5a:35:6c:27:d4:1a:9b:0d:
98:6b:1a:8a:83:bb:9c:cc:d0:e1:9b:55:b5:97:fe:c7:12:d2:
59:03:fb:87:b1:78:e2:b7:54:c9:ff:1e:5d:73:a2:5f:55:d1:
48:82:44:9f:3d:77:d1:ec:62:e1:9a:5a:d2:fc:93:d5:1e:ba:
ce:6e:34:27:bf:6f:45:0b:83:19:2f:46:83:61:69:87:c7:a1:
95:19:68:07:0f:a4:90:8e:81:f0:f8:83:74:f2:2d:81:0f:b2:
8e:71:f0:f8:94:45:89:0a:be:20:d6:57:6d:c2:f7:0c:d6:9f:
7e:c3:5f:36:0e:6e:d0:98:0c:d4:72:41:21:4b:09:f5:af:e0:
e5:1d:89:df:05:97:c2:5f:5b:d1:1a:9c:d4:56:8f:65:e9:d0:
78:43:67:49:6e:d7:41:e1:c7:6a:af:85:f6:70:d1:7c:52:a5:
c7:d4:d3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org