Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5Ill3PEDH3NYIBXXFKGuiVscHeQ.roa
File: 5Ill3PEDH3NYIBXXFKGuiVscHeQ.roa (raw, json)
Hash identifier: +XqKmW2M4uKjCgL4RmS0gheIlzJfABQ89EumnQ8Jv54=
Subject key identifier: E4:89:65:DC:F1:03:1F:73:58:20:15:D7:14:A1:AE:89:5B:1C:1D:E4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E38
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5Ill3PEDH3NYIBXXFKGuiVscHeQ.roa
Signing time: Fri 01 Sep 2023 10:15:48 +0000
ROA not before: Fri 01 Sep 2023 10:15:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 119.77.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7736 (0x1e38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E48965DCF1031F73582015D714A1AE895B1C1DE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d4:16:d8:df:c9:f1:92:98:15:9d:38:1f:76:
a8:12:8c:3f:f6:e2:9d:31:a9:1e:41:e9:3b:3b:66:
eb:2d:b7:b7:63:47:cb:2a:76:c2:7f:61:4f:25:8f:
29:9d:71:ef:c4:1f:eb:0b:6f:20:33:fc:c3:07:bb:
2e:d2:e8:f1:15:b0:c0:e9:0f:b9:71:74:96:ff:df:
30:03:56:d0:d5:c0:92:17:08:ea:12:6d:4c:62:a2:
19:6b:28:50:11:33:6c:0d:5a:cd:a2:44:05:ad:8d:
3f:3d:7f:4f:f7:f4:cd:43:07:fc:c3:93:5b:53:59:
31:b2:e5:24:e8:8d:5a:01:93:3b:5d:b2:79:97:d1:
52:c7:e9:fc:8e:67:0b:f7:c5:75:c2:cf:92:4a:4a:
72:61:cd:98:bc:c1:20:d0:02:0f:17:80:56:51:37:
34:80:eb:50:44:b1:c7:2f:c7:32:1a:3c:d7:3d:1f:
e0:26:7c:3e:1d:78:86:39:6c:46:16:b1:2f:89:96:
81:11:c3:0b:8e:d3:11:50:a6:ec:b9:8a:06:4c:be:
60:d2:18:c9:be:0c:d9:cd:b8:63:f5:3c:b1:21:3e:
38:79:0f:34:26:c3:e2:4f:45:32:5b:60:88:5a:77:
df:90:57:cb:6f:8a:63:0e:3b:f9:c9:22:8b:7a:59:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:89:65:DC:F1:03:1F:73:58:20:15:D7:14:A1:AE:89:5B:1C:1D:E4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5Ill3PEDH3NYIBXXFKGuiVscHeQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.128.0/17
Signature Algorithm: sha256WithRSAEncryption
40:1e:fc:66:d6:ef:d5:26:76:ec:de:ec:f5:f4:e7:a8:19:1e:
02:4c:9a:51:58:97:d5:96:a3:2b:02:ac:b7:2b:e3:50:5b:a4:
e5:d0:d0:04:90:20:52:2b:94:77:6a:d1:b9:3d:cd:28:52:4b:
8f:04:36:88:14:eb:00:d6:e2:f1:02:6b:b9:f7:fa:6a:dc:67:
20:10:6a:2d:c2:50:26:24:42:bd:3d:f5:e2:9d:06:3c:20:66:
53:2b:f2:7b:8b:d5:b6:19:6d:8f:66:8f:32:64:f5:cd:b5:fd:
ee:be:89:0c:90:a0:6d:93:b6:be:71:fd:bf:7c:24:28:9b:bc:
45:65:38:3c:6e:d9:07:7d:10:5e:eb:cb:f8:b0:e2:6e:e8:ef:
2a:57:08:ab:8c:5d:39:ba:8a:a9:6d:2e:bb:5a:fc:89:05:c2:
99:78:7b:38:69:01:fa:bf:40:ac:4a:04:5c:0e:b5:ac:f5:58:
94:82:47:75:4a:87:92:a4:64:aa:1b:99:24:c4:03:47:ab:35:
46:0c:b6:c9:93:54:49:bc:03:18:32:77:11:4c:30:ef:9a:e4:
5a:11:66:9f:6c:9d:06:c1:11:b1:25:bc:e9:8c:c8:bf:75:eb:
5a:b3:0d:18:18:2b:58:88:22:b7:fd:f5:fb:0a:aa:0f:38:97:
0d:7c:56:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org