Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1p-FFfPP9-QBgVe244VQ33oGphY.roa
File: 1p-FFfPP9-QBgVe244VQ33oGphY.roa (raw, json)
Hash identifier: j4Jwty8/l1l2rqGcXATrbYG9l+olZK4cDAuspQxIgnc=
Subject key identifier: D6:9F:85:15:F3:CF:F7:E4:01:81:57:B6:E3:85:50:DF:7A:06:A6:16
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D73
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1p-FFfPP9-QBgVe244VQ33oGphY.roa
Signing time: Fri 01 Sep 2023 10:14:49 +0000
ROA not before: Fri 01 Sep 2023 10:14:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 211.76.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7539 (0x1d73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:49 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D69F8515F3CFF7E4018157B6E38550DF7A06A616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2a:d8:94:35:bf:c8:11:c7:f0:60:c7:b4:67:
ed:ad:b1:87:97:e2:5b:0a:c5:c2:9e:e9:a8:c7:4c:
b3:e1:be:6e:90:51:02:19:82:8f:b3:27:65:c3:c3:
c4:4d:33:a9:a2:aa:36:d2:39:0d:73:20:79:ad:dd:
be:ee:c0:06:13:77:dc:cb:2e:66:01:48:c6:04:bf:
f8:07:6f:9b:01:39:a0:06:6f:1a:c2:af:ae:c0:f6:
2c:77:7c:40:a5:c5:54:fb:35:58:89:50:b8:2b:c5:
e7:43:fd:2d:31:fd:e7:7a:06:a0:89:56:68:ab:30:
4f:66:d6:f2:b1:bd:79:72:f6:98:02:39:22:e2:0f:
f5:1d:86:fb:db:50:98:a9:21:f3:21:35:3e:f0:9b:
ac:a9:08:bf:b6:a0:88:6c:b0:a0:d0:f5:f9:ec:79:
90:e6:31:b3:e4:04:d6:53:5c:e7:e3:ea:4e:81:04:
d5:59:5e:bf:5c:ee:ff:17:a0:cf:b9:64:d7:4e:d1:
b4:46:eb:1d:c6:c5:16:70:cf:c1:43:8d:51:40:4f:
8d:cc:be:98:5d:6f:c6:c8:22:f2:75:3d:54:32:92:
c0:42:43:fe:0b:73:85:f9:67:c4:4e:d0:91:f2:cd:
4e:51:f1:9e:3c:38:ae:5a:88:34:fc:d3:fb:46:2e:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9F:85:15:F3:CF:F7:E4:01:81:57:B6:E3:85:50:DF:7A:06:A6:16
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1p-FFfPP9-QBgVe244VQ33oGphY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.55.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c4:ec:97:86:38:70:61:6b:fd:90:cb:18:c2:c4:3a:22:fe:
22:5c:e5:fd:d6:50:2e:74:5f:8b:62:e6:d9:ad:ee:f1:62:c9:
4a:a8:0c:0f:d7:98:ef:d1:0c:1e:6c:15:1f:f6:37:89:da:41:
25:3b:4d:d2:ed:66:43:d6:22:e0:94:ea:32:f7:23:ad:ef:2e:
8d:6b:dc:94:f8:40:ef:41:62:a0:26:b9:ed:ed:23:61:f2:6f:
8d:6a:cf:12:1b:b3:4b:bd:5f:2c:b7:18:d6:e7:b2:84:a9:84:
30:2b:18:f1:26:04:3a:4b:74:86:e6:57:d8:b8:d0:c5:10:f9:
5a:c9:cc:2e:22:ee:0e:0b:4e:72:ab:79:ba:5e:28:1c:b7:ae:
9b:ea:30:e0:73:06:a0:a3:b9:e9:e5:d9:55:47:d5:f2:f8:d6:
3c:97:f4:50:9f:c7:5c:5e:ef:9d:ae:a4:75:e7:54:72:f6:a2:
b8:60:c3:11:40:9f:c1:c7:46:2a:53:c5:b3:c8:a0:21:3a:72:
64:bb:36:cb:26:3b:fd:89:70:97:9e:fa:a4:e4:1b:68:05:ba:
71:73:0b:ec:de:3a:57:d3:d3:31:cc:8c:07:3e:a8:6b:c4:d1:
ab:01:bb:ce:93:73:7c:a8:6c:fa:73:2c:a0:b9:71:7f:4e:29:
1e:65:84:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org