Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Pgj9iRrCHhXIVknJobAzjA-MPvE.roa
File: Pgj9iRrCHhXIVknJobAzjA-MPvE.roa (raw, json)
Hash identifier: lpNrFtWB4pA+KUCDFZmDw9icu+3hf++aHptj7cD8kjQ=
Subject key identifier: 3E:08:FD:89:1A:C2:1E:15:C8:56:49:C9:A1:B0:33:8C:0F:8C:3E:F1
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0BFF
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Pgj9iRrCHhXIVknJobAzjA-MPvE.roa
Signing time: Fri 01 Sep 2023 09:11:51 +0000
ROA not before: Fri 01 Sep 2023 09:11:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18042
IP address blocks: 123.252.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3071 (0xbff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 1 09:11:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3E08FD891AC21E15C85649C9A1B0338C0F8C3EF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:6e:03:07:56:de:25:7f:e9:45:af:48:d8:
20:78:b3:85:6f:38:88:4a:1a:f4:3f:e5:79:e3:3b:
40:b7:89:63:cc:0d:a2:d1:23:e2:3f:e8:db:87:0c:
fa:f4:76:b2:12:ba:29:ec:39:e3:83:ff:8b:21:e3:
18:27:31:f5:ed:5f:c3:7c:53:8d:11:5a:c1:3f:0c:
92:6a:bb:1d:3f:f6:22:e2:8e:96:a8:8c:87:e0:02:
de:ec:db:6c:53:9c:08:23:8c:88:a6:51:ff:9c:e0:
d9:83:14:ae:36:ff:40:3c:ef:0c:7b:20:57:42:36:
68:52:1d:34:e0:07:84:48:e8:0b:17:aa:4c:14:f2:
5c:a5:7e:6e:02:1f:dc:a6:60:ca:9b:63:69:85:52:
b0:f3:3f:bc:4c:af:91:e7:5a:3f:d2:98:33:b8:6a:
df:08:9c:2e:82:c2:aa:25:fa:6f:43:c8:c6:d4:f9:
ef:ab:4a:0a:70:0e:d1:69:45:4e:c9:43:fe:04:f9:
82:f3:87:81:69:55:be:90:5f:9b:b3:19:74:e7:39:
a4:02:bf:5e:af:65:43:9f:83:c3:05:f3:ae:66:72:
24:44:70:b6:74:2e:f5:38:33:cb:6d:8a:c5:ed:7f:
e5:0d:4b:32:b2:74:8e:6e:f2:84:ea:4f:37:57:50:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:08:FD:89:1A:C2:1E:15:C8:56:49:C9:A1:B0:33:8C:0F:8C:3E:F1
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Pgj9iRrCHhXIVknJobAzjA-MPvE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.252.0.0/17
Signature Algorithm: sha256WithRSAEncryption
87:36:b5:58:ed:50:af:7e:a7:93:87:e3:c4:90:c7:93:96:a7:
f9:5c:6b:63:f2:d3:56:3c:30:48:f3:2a:c2:6e:a2:36:c6:fe:
65:99:24:05:e7:b4:45:a6:97:b1:b8:2f:67:3a:ed:48:62:ba:
f4:64:c3:e8:ad:99:3f:e3:f0:c0:98:a0:a1:94:57:a6:dc:f9:
a0:33:5e:1a:f8:36:64:a3:94:a8:3a:ad:69:12:ad:0e:f6:ec:
9a:3c:b5:95:bb:9f:be:17:75:43:69:e1:21:8f:a2:30:61:97:
54:5c:a5:66:1b:d6:a4:60:98:ae:ae:0d:f4:58:25:6f:42:16:
9e:d3:a6:61:df:5a:e0:9b:4c:e6:92:c9:61:c6:68:2b:d6:4b:
61:02:3d:de:fb:c8:87:59:f5:29:19:05:59:bf:46:e7:57:a0:
ac:0a:f3:e9:4f:65:74:73:56:d8:11:a3:43:78:de:e8:52:ad:
5a:16:a4:d1:e4:c9:c9:81:0e:b7:d3:4a:45:90:69:8b:42:77:
23:4c:2b:99:b1:0d:ac:b7:3f:6c:26:9f:d1:79:79:c4:1d:c0:
10:e5:fb:d4:c1:ac:db:51:81:9d:a9:74:bc:45:ab:fd:1f:de:
fb:6e:17:1d:b0:8e:10:9c:1c:49:97:e9:a1:53:db:c6:ac:95:
4c:b7:bf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org