Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5flWqC9KuTvlQtMtBzs-zSWTAEI.roa
File: 5flWqC9KuTvlQtMtBzs-zSWTAEI.roa (raw, json)
Hash identifier: Cvq68ZfbDgXNV4cl+OMtg0YYaLg+yWulI5RZyEcMCYk=
Subject key identifier: E5:F9:56:A8:2F:4A:B9:3B:E5:42:D3:2D:07:3B:3E:CD:25:93:00:42
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D98
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5flWqC9KuTvlQtMtBzs-zSWTAEI.roa
Signing time: Fri 01 Sep 2023 10:15:03 +0000
ROA not before: Fri 01 Sep 2023 10:15:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 211.76.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7576 (0x1d98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E5F956A82F4AB93BE542D32D073B3ECD25930042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:67:20:fe:8e:40:39:f7:15:ac:ed:f7:5f:
52:38:9d:0a:ae:f5:71:35:d1:a1:1a:b1:d8:8d:4c:
4a:0a:71:9b:4f:5e:cd:d1:f6:0d:1c:ff:53:77:49:
79:11:7f:86:e6:23:e1:7d:ae:4a:99:33:ba:b3:91:
b9:3e:f1:f0:6a:cd:01:dc:47:39:41:c5:7c:12:5a:
03:26:66:3c:d3:3d:64:a5:9f:f6:d9:e0:99:a7:71:
11:0f:eb:ac:28:a1:06:5e:db:95:7b:db:65:14:54:
69:09:55:28:27:58:ce:68:60:b1:80:a2:90:fb:04:
ca:74:41:51:93:4c:fe:7d:b9:fc:db:93:ab:6a:5b:
c1:e9:9d:36:2a:d7:ad:2c:49:00:63:cd:95:22:18:
73:30:1d:e0:b0:f6:d5:8c:6d:a0:8d:83:bd:86:27:
31:4f:01:54:5c:27:24:11:11:6f:e7:2a:9c:a4:fc:
ab:b8:56:ff:59:2b:f2:62:72:42:43:c1:75:6c:08:
eb:81:53:b4:82:b8:c6:3a:d4:c1:21:58:ea:4c:1b:
3f:de:df:d2:83:ac:d6:cc:ad:13:84:28:f9:a2:48:
39:5f:ef:c7:6d:55:a5:fd:b7:7c:9e:b9:31:13:ef:
d4:32:ba:7f:82:1c:32:75:62:8a:07:bd:ef:eb:7b:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F9:56:A8:2F:4A:B9:3B:E5:42:D3:2D:07:3B:3E:CD:25:93:00:42
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5flWqC9KuTvlQtMtBzs-zSWTAEI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.78.0/24
Signature Algorithm: sha256WithRSAEncryption
67:bb:0a:17:f9:5e:84:0c:12:cd:39:70:54:e5:52:c5:e5:3b:
b1:87:95:6c:54:a3:b7:f3:fe:58:08:05:c4:83:8c:3f:04:72:
79:d1:e7:ff:e8:eb:36:5f:49:fd:92:c2:96:1a:fd:bd:76:f6:
07:98:ea:fb:e7:f5:5d:bf:d9:83:3f:1e:bf:72:5c:96:05:b3:
c7:b6:eb:75:7c:e1:1a:83:33:0b:61:63:5b:68:fa:79:79:36:
8f:f7:5a:76:76:d8:1b:c3:04:76:53:83:44:08:70:27:13:e9:
74:a5:1a:fb:39:fd:b3:49:50:8f:17:42:e1:b3:b2:8b:89:0d:
f3:6b:5b:1a:df:14:d3:96:97:0f:39:89:52:a1:d3:8f:29:e0:
01:d1:ee:74:a4:c3:6d:2f:0a:2c:28:c7:06:04:aa:b8:92:e3:
31:2d:89:8c:cf:5e:e0:df:30:e5:70:8b:84:91:76:c8:86:46:
a2:0b:eb:5c:c6:48:09:92:ff:dd:55:90:4f:38:58:9c:4c:fd:
bf:fd:6d:34:5b:78:71:c3:0b:6b:98:78:fc:20:99:14:cf:cf:
78:30:24:32:4c:5f:89:45:49:f9:4c:fc:9c:a7:3c:06:2e:85:
ac:69:85:33:24:90:a2:b2:8b:ba:ff:ea:dc:53:4f:a3:96:5e:
62:fc:97:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org