Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/tZCxScrfotlOU0b9ApZHDw4Sezo.roa
File: tZCxScrfotlOU0b9ApZHDw4Sezo.roa (raw, json)
Hash identifier: JRA5FwQ7xA+QVXcLBKSuuU04tRCKhqQB/drXu5T7Qz8=
Subject key identifier: B5:90:B1:49:CA:DF:A2:D9:4E:53:46:FD:02:96:47:0F:0E:12:7B:3A
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0C06
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/tZCxScrfotlOU0b9ApZHDw4Sezo.roa
Signing time: Fri 01 Sep 2023 09:11:53 +0000
ROA not before: Fri 01 Sep 2023 09:11:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18042
IP address blocks: 119.14.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3078 (0xc06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 1 09:11:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B590B149CADFA2D94E5346FD0296470F0E127B3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:45:f0:4b:58:e9:8d:dc:a6:5a:7b:f8:46:
45:6f:b9:fa:9e:47:8d:18:20:1b:21:89:0e:ee:c0:
34:cc:8c:c6:28:76:7e:47:c1:ae:92:92:ef:58:33:
5a:8b:9f:d2:fa:70:3c:27:46:9b:32:14:03:a5:e1:
e4:9c:60:c0:1e:b9:8f:66:05:7d:a9:75:3c:73:87:
0c:38:8f:ae:dd:79:63:9e:d0:99:b7:d6:9d:ed:13:
f9:8d:2d:3c:12:c1:a8:19:9c:58:11:c4:7c:85:98:
20:3a:b0:ac:49:e0:31:30:8d:1e:a6:d4:1d:16:9f:
47:6d:74:0b:1f:84:ed:90:30:9e:35:4d:48:ed:ae:
39:54:a8:a5:e1:bd:5c:25:14:fe:e8:53:56:f5:5c:
e1:cf:2c:bf:b1:cf:df:6d:e5:13:dc:bc:fc:0a:5d:
f0:15:c1:f7:de:1c:ae:d7:2c:a5:81:50:3c:70:4b:
da:10:56:79:d2:55:f9:b6:f0:63:a9:17:4d:ca:72:
d6:db:54:37:84:ed:9d:55:a4:c6:79:a5:e1:d7:6b:
9c:ab:56:dd:d2:9f:02:7e:da:87:78:78:99:4a:52:
bc:4a:f2:fa:51:d6:b5:12:e9:dd:dc:a3:b2:06:d4:
03:b6:bd:d0:0c:47:9d:bf:30:a2:54:86:df:18:3a:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:90:B1:49:CA:DF:A2:D9:4E:53:46:FD:02:96:47:0F:0E:12:7B:3A
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/tZCxScrfotlOU0b9ApZHDw4Sezo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.14.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b0:40:f0:20:a8:9d:8b:83:e2:f8:6a:42:b8:b4:63:ac:84:0f:
7f:38:d5:8f:c1:7b:f9:15:47:99:03:f1:84:e0:85:b7:ca:39:
35:7c:60:de:47:e4:56:01:3c:fd:3d:02:e2:fc:0b:fb:7d:32:
04:55:8e:bc:fd:78:ff:54:19:11:ee:ed:ec:52:2f:23:51:cf:
1c:82:40:05:de:e4:0e:62:80:ad:b0:cf:23:04:5a:4a:af:d1:
70:42:4a:0b:3a:ad:5e:c0:e4:89:ee:95:33:05:e7:b1:db:db:
f1:51:7b:07:6f:bb:3b:eb:f7:60:90:c6:f1:78:52:92:9a:9c:
0e:08:41:ab:d1:bf:ab:0e:ee:12:76:1c:d5:bf:ea:38:00:0b:
f7:15:d3:1e:f3:dd:97:fb:93:03:24:97:0f:3f:1a:3b:ee:c8:
9a:88:a2:e8:08:71:17:46:db:66:84:9b:41:c0:66:3a:3c:ba:
2b:78:fc:a2:35:f8:40:d3:9c:6f:df:c6:7e:cf:32:b6:81:28:
b9:c7:96:a8:c2:2f:95:2f:82:06:24:26:e3:6c:52:fd:7d:d1:
35:ba:7c:5e:7f:ac:7a:a4:6b:82:6a:31:51:1f:ac:cf:46:2d:
01:45:71:a8:ac:59:a2:04:41:80:65:29:3d:ed:b4:ee:6b:d6:
cd:65:7b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org