Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/eQ7buWLiA8J5zRwRFVwWTDLnGLw.roa
File: eQ7buWLiA8J5zRwRFVwWTDLnGLw.roa (raw, json)
Hash identifier: HIo0GNUuNe3+Ud9MApOGFn3Z2OnMJSbhLE7hUqDHF88=
Subject key identifier: 79:0E:DB:B9:62:E2:03:C2:79:CD:1C:11:15:5C:16:4C:32:E7:18:BC
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0DAA
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/eQ7buWLiA8J5zRwRFVwWTDLnGLw.roa
Signing time: Mon 10 Feb 2025 14:06:10 +0000
ROA not before: Mon 10 Feb 2025 14:06:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9416
IP address blocks: 122.99.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3498 (0xdaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Feb 10 14:06:10 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=790EDBB962E203C279CD1C11155C164C32E718BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:ab:84:32:ce:f7:c9:30:91:35:1f:e5:e3:
a5:1d:be:c6:2d:07:3c:5b:ed:76:a9:e0:cc:a8:f9:
cc:e2:b1:f4:14:03:26:6e:08:74:08:31:e2:76:4d:
8b:e7:cb:cd:c8:cb:a7:92:64:e5:90:de:94:8b:6e:
19:c3:d8:a8:05:8b:4d:10:37:a3:81:93:3c:8e:04:
e9:fa:a5:d5:c9:3a:56:8a:49:f7:84:fd:2b:9d:f6:
fe:fd:01:8d:1b:c5:ec:60:5a:43:8a:be:dd:2d:bc:
53:6f:30:19:9e:30:68:1f:b8:2d:e3:07:bb:07:d3:
95:8e:04:04:34:0c:02:16:ea:eb:11:2c:83:4c:28:
a5:09:5e:fe:65:59:a1:01:f2:8d:f7:b2:f2:8f:69:
ae:ea:e6:e4:f5:b0:40:07:e9:2d:a9:55:50:ba:cb:
29:fb:d8:62:0b:51:d3:19:4c:ec:64:49:76:5a:4a:
e3:09:a2:d9:51:17:4a:55:53:59:5e:f9:b2:31:03:
1f:e3:c8:fa:00:2c:97:f3:88:d3:a7:e4:f6:29:fd:
3c:4d:03:c6:35:4d:ba:0e:7e:87:48:7c:da:96:23:
47:a0:ad:ab:d0:73:3d:9f:f5:28:f3:ca:f6:ee:bd:
02:68:99:ab:ea:23:3d:a2:df:24:6d:70:0f:85:b7:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0E:DB:B9:62:E2:03:C2:79:CD:1C:11:15:5C:16:4C:32:E7:18:BC
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/eQ7buWLiA8J5zRwRFVwWTDLnGLw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.99.0.0/18
Signature Algorithm: sha256WithRSAEncryption
70:44:2f:8f:24:a1:a6:a8:ab:a9:6a:41:1d:e3:24:63:f9:53:
29:17:93:2b:de:50:27:8c:da:df:81:ff:95:55:2f:43:86:ad:
a4:0c:4a:53:36:e9:5c:fa:31:77:53:62:bb:d6:50:e6:66:91:
09:1e:74:47:f3:72:f0:2f:21:04:99:0d:86:38:01:fe:5f:fb:
f5:f5:2a:27:d0:20:e8:d7:b4:3c:33:0f:f1:c9:10:17:fb:4f:
28:44:43:86:b0:b3:71:35:0a:02:b2:36:5d:a4:72:ed:33:63:
47:75:f6:94:28:ea:1f:bd:e4:76:52:18:0f:f7:41:68:27:c8:
f3:b4:9d:06:1c:b3:f5:1d:70:f8:af:e8:6b:74:36:3a:d6:6f:
62:89:c2:7e:ab:9e:37:28:04:40:c6:7f:ce:16:0b:78:de:5a:
f4:ae:71:b3:85:a0:a2:b4:e7:16:b2:18:ae:80:31:19:95:fa:
6e:f7:c8:6f:a9:81:20:86:b9:42:fc:e5:27:b5:5e:29:82:9f:
b3:42:68:36:b2:07:fd:35:33:58:41:07:c6:fc:a3:b4:7f:f5:
7b:a6:cd:be:9d:84:17:28:3c:94:61:ec:e3:33:fc:4e:b1:4a:
3c:02:27:7f:74:23:6e:68:50:e5:6a:3d:89:6f:09:8f:67:99:
bf:0d:fb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:56 2025 by rpki-client