Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0GpoNoKvpTsuFuMVYP6wqXmz2jo.roa
File: 0GpoNoKvpTsuFuMVYP6wqXmz2jo.roa (raw, json)
Hash identifier: +cb5cY59yYOPqcj3Vd9jaEmZ7Aad+R+854KP1o46lEA=
Subject key identifier: D0:6A:68:36:82:AF:A5:3B:2E:16:E3:15:60:FE:B0:A9:79:B3:DA:3A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D50
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0GpoNoKvpTsuFuMVYP6wqXmz2jo.roa
Signing time: Fri 01 Sep 2023 10:14:39 +0000
ROA not before: Fri 01 Sep 2023 10:14:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 2407:4b00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7504 (0x1d50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D06A683682AFA53B2E16E31560FEB0A979B3DA3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:f9:6d:72:8a:09:88:ad:86:74:0b:90:24:
f9:2b:93:35:ee:d7:d6:49:a0:79:26:52:73:f4:98:
45:f5:04:92:a1:97:e4:ba:4d:6d:83:ad:48:49:e6:
aa:6b:75:91:bb:54:36:dd:78:02:c0:69:ae:53:f5:
ad:60:3d:a7:f3:01:cb:31:e0:b8:b2:bb:2e:48:3f:
82:16:79:56:ab:01:d3:82:93:3c:16:61:0d:8b:48:
06:39:bd:8f:bd:4c:d6:f6:ea:ed:1a:47:ea:6d:f2:
23:88:55:03:1a:62:7c:3a:7b:2d:b3:15:f7:2e:9d:
e5:ff:f4:a1:4e:64:29:77:85:43:4c:5f:7e:ec:5c:
88:cf:22:d1:40:9f:44:91:32:b4:b7:90:60:01:d1:
a9:06:82:48:1b:be:cf:a6:2e:13:e3:bb:02:2d:20:
f8:4a:d7:14:76:e9:7d:8c:89:55:8f:75:fa:02:d9:
2d:83:f9:55:d8:51:c1:b6:6b:1a:0a:14:5b:83:24:
a8:46:b2:58:65:c9:2b:66:7f:b0:2b:cf:90:77:15:
4e:18:b3:23:cf:f0:26:fd:d6:72:6f:cf:f8:51:d5:
11:e5:2e:8f:51:76:59:38:15:c0:0d:2e:10:6d:ff:
33:77:63:f1:75:b0:de:be:df:05:05:da:18:d6:a6:
ff:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6A:68:36:82:AF:A5:3B:2E:16:E3:15:60:FE:B0:A9:79:B3:DA:3A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0GpoNoKvpTsuFuMVYP6wqXmz2jo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4b00::/32
Signature Algorithm: sha256WithRSAEncryption
20:4d:3f:13:9d:b4:7d:4d:79:3b:1e:7d:25:cc:7b:a0:84:5f:
0e:4a:12:50:fa:76:57:31:2e:3d:b1:42:88:29:29:b9:47:15:
cd:b2:c4:9c:92:d9:e9:0e:63:19:86:4a:f1:41:73:c8:22:a5:
b3:bb:b3:4b:4d:e2:1c:84:bf:b3:ea:9f:c6:a2:1d:58:c7:42:
f9:f2:89:18:86:b6:56:5a:34:81:66:73:eb:e1:20:44:07:ad:
cd:fc:d8:bf:ef:68:87:fb:fb:9f:a7:e7:74:eb:78:56:8d:4e:
f2:34:e8:03:b3:e5:8e:ac:e3:b9:fd:b8:0e:b3:13:22:ff:12:
c1:ee:7a:c5:2d:d4:ac:0f:92:79:54:8c:e0:a9:24:49:9e:ed:
eb:92:6f:a7:ab:5a:94:80:bd:44:cc:e8:84:83:01:85:11:91:
87:42:3e:f4:e1:48:7c:1e:b1:6e:35:98:00:15:fa:8d:ba:02:
be:8a:e7:7c:84:97:ae:15:af:a2:1f:23:48:f7:6c:e1:4e:57:
36:72:a4:65:82:7c:21:07:27:f4:65:89:43:60:35:19:6b:30:
4a:16:e4:79:23:1f:e1:dd:ee:cd:ab:30:c4:88:75:54:4b:b9:
fd:05:17:fb:b7:01:0c:00:6d:f5:db:e0:2c:d7:80:dc:40:8d:
51:e5:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org