Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2yI-XbgYTJAEJYA8tDanEMSynZc.roa
File: 2yI-XbgYTJAEJYA8tDanEMSynZc.roa (raw, json)
Hash identifier: P1457kTLBmmoN8x5dvVV7wNEeOBdZfSN6qFNCgUMvAg=
Subject key identifier: DB:22:3E:5D:B8:18:4C:90:04:25:80:3C:B4:36:A7:10:C4:B2:9D:97
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DE5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2yI-XbgYTJAEJYA8tDanEMSynZc.roa
Signing time: Fri 01 Sep 2023 10:15:26 +0000
ROA not before: Fri 01 Sep 2023 10:15:26 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7653 (0x1de5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:26 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DB223E5DB8184C900425803CB436A710C4B29D97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:41:2f:51:62:03:95:9f:9a:70:16:46:39:16:
2a:72:a9:e2:62:df:52:fd:0e:99:65:d3:d7:24:50:
9c:c1:0f:45:48:6f:05:af:07:ea:8e:dd:31:49:3a:
d8:cb:e4:06:b5:6e:c0:6f:da:46:70:5b:38:71:3f:
68:1e:4f:e5:29:2d:a9:c6:06:77:65:49:5c:e1:24:
ac:43:dc:0a:88:bf:2b:48:0b:6a:67:de:3d:4d:c6:
20:3b:15:a1:3f:47:44:67:48:58:71:26:e1:11:5d:
6e:0d:64:26:e7:cb:04:80:51:16:c4:0f:9b:ab:28:
79:f5:f7:e4:17:e2:65:5e:ae:20:56:62:4c:68:dc:
73:60:12:af:0f:b0:eb:0c:d7:c6:a1:e2:8a:f0:d3:
e8:40:bd:26:b3:ec:53:26:55:27:0d:c2:fb:0e:7d:
e6:ee:d9:8b:6f:2c:10:08:d3:1e:24:09:ef:f1:a5:
fd:cd:99:f8:29:bb:22:b9:19:89:56:ad:c5:7b:f2:
67:b6:4d:79:d1:d6:aa:97:cd:66:b9:5f:82:81:9c:
63:1a:e0:9e:28:ac:f4:8d:3b:51:7a:be:c8:bb:df:
1c:9a:be:16:4d:5f:37:06:9d:99:ad:8c:60:f8:43:
25:71:3f:d1:68:bd:c8:fa:58:f3:64:76:b6:3c:fa:
57:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:22:3E:5D:B8:18:4C:90:04:25:80:3C:B4:36:A7:10:C4:B2:9D:97
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2yI-XbgYTJAEJYA8tDanEMSynZc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.139.0/24
Signature Algorithm: sha256WithRSAEncryption
38:42:50:c6:14:19:51:7b:2d:6c:69:70:03:a4:93:8a:52:c5:
37:17:2c:57:a6:eb:0d:98:f6:bf:75:38:42:10:89:6a:b1:17:
6b:4c:6c:22:ec:4c:22:5d:48:c1:17:e5:fc:35:89:a7:eb:bf:
2a:f7:90:6f:2a:92:be:ee:8d:a2:c6:a1:d7:9e:ff:81:4f:ff:
a7:cd:41:ea:c2:5b:a3:30:b7:d7:12:fd:e4:0b:7e:d1:a0:b2:
69:00:94:f9:c4:12:22:4d:9a:f5:95:1d:7f:d5:ef:1a:85:b5:
b2:28:44:e3:ab:af:83:24:c7:51:47:6c:9c:9c:ef:3e:eb:43:
ba:21:68:a9:2d:05:6e:f1:d0:08:8f:93:f3:82:6b:77:f6:a9:
82:29:a9:30:ed:ec:62:e0:97:2d:ae:4b:23:eb:6b:81:1e:6c:
53:f9:3d:a6:20:cd:da:0e:10:f2:6d:48:49:4b:53:d5:97:cd:
c5:2e:50:56:9d:55:08:27:b3:d6:f4:dd:e8:cc:9d:49:03:b5:
32:27:8a:7e:0c:b3:a2:7c:c4:45:e7:ec:6f:28:a0:0f:0d:3a:
da:d0:0b:26:66:28:3b:1d:97:1e:42:bc:21:c0:30:f5:40:0b:
6f:a0:37:94:33:87:82:f0:bf:c9:36:9f:cb:1d:f8:29:5e:da:
d1:52:9d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org