Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/NDdFndGB_INXYfGfZcsS2MXe8Ok.roa
File: NDdFndGB_INXYfGfZcsS2MXe8Ok.roa (raw, json)
Hash identifier: k/1gISUCCbrHGqqqvn32bwmwlfzi7FJ63Q9877SLQ08=
Subject key identifier: 34:37:45:9D:D1:81:FC:83:57:61:F1:9F:65:CB:12:D8:C5:DE:F0:E9
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0BFE
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/NDdFndGB_INXYfGfZcsS2MXe8Ok.roa
Signing time: Fri 01 Sep 2023 09:11:51 +0000
ROA not before: Fri 01 Sep 2023 09:11:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9416
IP address blocks: 119.14.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3070 (0xbfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 1 09:11:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3437459DD181FC835761F19F65CB12D8C5DEF0E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:2e:f6:2e:d0:d9:dd:93:c1:22:dd:bf:24:
02:c5:65:bf:40:b6:80:2a:f2:7f:34:63:24:8d:c7:
37:1c:66:f0:28:a4:fc:43:6e:e0:19:70:0e:94:ba:
ec:82:34:96:18:10:66:e2:ab:8c:4a:64:1f:3a:b8:
27:51:51:fc:51:3a:3b:60:43:ed:95:c0:23:ae:e8:
a1:5b:19:7e:02:3a:ec:d4:35:e2:2d:83:36:17:29:
fe:10:58:d0:cf:b9:b4:b8:41:2d:d6:bf:f9:10:ee:
bf:05:a0:61:50:74:7f:f6:60:ec:ee:e1:21:dd:fc:
48:95:07:87:e9:98:92:64:49:2b:e4:1f:43:5e:42:
e0:24:28:47:16:2a:3b:f6:46:0e:f0:48:90:6b:50:
77:b1:95:4e:09:4e:ab:51:6b:54:16:14:58:06:45:
43:b7:08:17:51:18:02:a6:12:c0:60:a8:fe:b3:a2:
b7:6e:bd:05:90:b7:13:e1:74:29:8b:58:be:31:e4:
d2:2e:bf:8c:ab:09:14:ef:76:5e:d0:da:1a:e6:30:
2b:15:af:cc:7d:f9:75:89:bb:24:04:69:45:19:49:
8b:35:f5:a2:7e:34:64:97:08:67:ea:c0:95:43:0d:
a9:89:b1:20:f3:95:ec:26:8f:c3:42:02:78:27:80:
60:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:37:45:9D:D1:81:FC:83:57:61:F1:9F:65:CB:12:D8:C5:DE:F0:E9
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/NDdFndGB_INXYfGfZcsS2MXe8Ok.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.14.128.0/17
Signature Algorithm: sha256WithRSAEncryption
7c:95:45:9c:dd:7d:80:68:f1:6e:43:cb:ca:99:c0:77:bf:d5:
d6:9c:76:22:36:55:3e:4e:ee:2f:ba:f7:01:a8:9a:8a:fa:e3:
47:dd:a5:79:5d:cf:83:e9:59:3e:4a:ac:cf:12:ff:98:b7:1a:
f3:74:f0:38:73:5c:96:d5:e2:0c:c2:7e:c5:1f:35:4c:e7:ec:
e1:a6:13:52:cb:57:aa:9e:31:c5:81:aa:0f:e5:28:f0:76:f8:
fe:e7:97:a0:a9:2d:1a:f2:61:20:ef:b9:61:d9:1c:aa:fd:e5:
bf:1f:91:58:2d:0a:e5:48:b3:66:d3:21:5b:1a:bd:c9:74:fc:
c0:2f:c4:08:8c:92:bc:70:f9:5e:20:f4:eb:94:a6:f2:a1:e8:
5d:1d:4f:50:fe:2b:a1:1b:fb:ed:0b:45:b9:55:53:c7:74:df:
fe:5b:95:d0:ae:57:4a:0d:85:c3:3d:f8:01:a1:00:b5:8c:e9:
4b:dc:35:dd:29:bc:ad:8b:67:a5:d3:75:7e:18:33:1f:2f:0d:
fb:c5:a0:cd:8d:d7:d3:b6:a5:8c:42:26:ba:24:d4:dd:d9:71:
b8:7c:98:7f:ad:74:50:f1:5f:3d:5a:6b:c0:3e:50:74:00:88:
54:79:ed:97:1b:4a:6b:7b:ad:ea:69:fe:f7:96:78:a4:32:b5:
53:9f:8a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org