Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MKY/Ne9UrgcWbwGhTPLewzjoLZbWE2Y.roa
File: Ne9UrgcWbwGhTPLewzjoLZbWE2Y.roa (raw, json)
Hash identifier: clBGWMPBiWKEpLbN/3OxWoh6xecw6I88NklH2N5MAzk=
Subject key identifier: 35:EF:54:AE:07:16:6F:01:A1:4C:F2:DE:C3:38:E8:2D:96:D6:13:66
Certificate issuer: /CN=9D9E97B00D2E15C41AE7071732018C2B137E53A1
Certificate serial: 0B38
Authority key identifier: 9D:9E:97:B0:0D:2E:15:C4:1A:E7:07:17:32:01:8C:2B:13:7E:53:A1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/Ne9UrgcWbwGhTPLewzjoLZbWE2Y.roa
Signing time: Fri 01 Sep 2023 09:20:31 +0000
ROA not before: Fri 01 Sep 2023 09:20:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7478
IP address blocks: 210.244.192.0/19 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2872 (0xb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D9E97B00D2E15C41AE7071732018C2B137E53A1
Validity
Not Before: Sep 1 09:20:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=35EF54AE07166F01A14CF2DEC338E82D96D61366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:e9:5d:92:00:44:d1:e7:21:98:78:11:00:
0a:1f:e2:fe:57:8c:8f:ce:af:28:e8:79:62:88:ed:
cf:a7:96:8d:26:fb:db:1a:8f:88:1f:eb:ec:4a:dd:
28:ff:1d:f0:38:4d:cd:66:01:a2:c1:80:20:29:76:
b0:0f:c6:d8:90:4f:27:47:ca:52:6a:17:20:0f:8f:
b8:11:5a:31:6d:ee:47:7b:c8:37:ad:fe:0e:cd:7b:
e1:30:ea:27:28:69:02:d7:86:9c:d2:b7:3e:63:eb:
84:01:aa:a3:2e:03:19:e3:39:79:cb:09:f9:b6:b7:
57:89:c1:6c:ea:a8:64:0f:83:3e:3f:cd:8b:8b:09:
ae:3f:24:b3:d9:0c:dd:03:2d:65:5c:47:9e:08:09:
53:2f:50:e9:cb:1f:74:67:b8:84:35:db:59:4b:9f:
cc:98:d5:0d:77:df:a4:9c:c6:fd:c6:69:8f:2b:b8:
8d:23:be:87:b8:23:49:5c:a8:26:32:75:aa:dd:0b:
46:f1:38:e9:cc:33:b3:ea:ca:f1:05:67:05:74:c5:
69:a3:b3:44:ff:af:a8:76:3a:5c:73:26:86:55:23:
b5:c7:7a:37:04:a5:4c:a1:29:54:d0:96:42:7b:f4:
46:7e:4d:d1:67:9d:65:8e:6e:83:95:0f:43:fd:8c:
1b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EF:54:AE:07:16:6F:01:A1:4C:F2:DE:C3:38:E8:2D:96:D6:13:66
X509v3 Authority Key Identifier:
keyid:9D:9E:97:B0:0D:2E:15:C4:1A:E7:07:17:32:01:8C:2B:13:7E:53:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/Ne9UrgcWbwGhTPLewzjoLZbWE2Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.244.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:99:f7:6b:e7:b5:09:bf:37:0b:3e:e5:00:ed:24:63:c9:bc:
03:dc:3f:b3:a1:75:f3:fd:52:30:83:97:20:8c:e2:10:ec:b6:
73:dd:7e:46:1d:ea:c4:75:c3:5c:92:72:f0:12:95:7b:d3:ef:
07:dd:3d:ae:ba:34:8f:6e:ac:e8:3a:58:cd:cf:c4:c7:c7:ab:
4c:7e:af:bd:9c:1d:ba:06:f1:dd:36:ce:c6:36:56:1b:7e:51:
c8:c5:bb:8b:c7:cd:d3:3c:5f:a5:45:0a:5d:3a:73:94:88:fb:
e5:a1:9c:0a:a6:f8:99:7d:18:1f:d5:dd:fd:50:29:cf:30:03:
24:a5:29:36:74:0d:55:70:e6:4a:e2:0b:b2:16:01:95:88:53:
e9:61:fc:54:76:1a:c3:cc:19:51:ca:d5:c4:00:c3:87:2a:ae:
11:a1:e9:bf:c3:05:a8:3a:45:f4:73:c7:b1:fb:ad:00:b1:8f:
ba:08:49:fe:bb:65:15:50:b0:44:a2:1d:9f:38:24:3c:e5:43:
f7:0a:0b:cc:2c:04:3d:10:aa:a6:de:e3:4c:c9:6d:70:a3:49:
32:57:3d:d3:c8:62:43:05:0d:0f:db:8e:df:7b:14:49:0b:09:
e4:41:67:92:fc:fc:bf:93:cf:30:05:af:9f:c4:2d:a9:7c:39:
73:f7:e7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org