Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6jn5zT0SsMPVoJsr4efpo-lmEPk.roa
File: 6jn5zT0SsMPVoJsr4efpo-lmEPk.roa (raw, json)
Hash identifier: rBDhLlap1XiISnKnqEYLvpCZoNRMEk1Pj8EDJRUxNAs=
Subject key identifier: EA:39:F9:CD:3D:12:B0:C3:D5:A0:9B:2B:E1:E7:E9:A3:E9:66:10:F9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E79
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6jn5zT0SsMPVoJsr4efpo-lmEPk.roa
Signing time: Fri 01 Sep 2023 10:16:06 +0000
ROA not before: Fri 01 Sep 2023 10:16:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 114.198.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7801 (0x1e79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EA39F9CD3D12B0C3D5A09B2BE1E7E9A3E96610F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:54:f8:53:44:49:3e:4b:a7:89:42:53:64:
72:98:0b:2b:27:8d:8b:53:66:84:46:2c:5e:90:5d:
33:cf:03:45:29:c7:bc:3c:8b:7a:e5:d1:1c:a1:3a:
99:0d:e3:80:fb:8f:be:23:95:8d:47:6f:f3:35:23:
8e:88:4d:af:28:90:05:1e:e0:70:56:99:3f:66:ef:
f5:11:3c:d2:80:ef:fa:0a:d5:b0:47:82:19:c6:26:
ac:28:11:90:3b:53:79:5a:ca:ea:2a:61:d4:41:4a:
9d:78:53:5f:ae:79:2c:ed:d8:d5:77:b9:ca:10:e0:
ea:3f:15:7d:a8:f6:0c:1b:3a:c3:04:05:c3:48:db:
bd:78:de:3a:d0:43:5d:65:9b:bd:40:22:43:85:8c:
99:de:d4:a5:11:34:da:db:01:4b:a4:82:e9:e6:c4:
cc:5e:7c:37:ad:c4:02:1a:59:44:61:74:c3:c8:af:
6c:20:05:8b:70:f6:5e:ca:aa:a3:49:fe:1b:ea:b6:
b6:a8:a8:f1:a5:00:ff:61:e3:51:91:96:e5:fa:61:
47:07:05:ed:8e:81:92:ab:03:23:f5:83:4e:e4:cd:
9a:e9:b7:08:c0:5a:fa:b4:2d:7d:1e:58:2a:89:5e:
54:9e:26:15:2d:46:07:70:b5:4f:3c:fa:dd:7c:73:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:39:F9:CD:3D:12:B0:C3:D5:A0:9B:2B:E1:E7:E9:A3:E9:66:10:F9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6jn5zT0SsMPVoJsr4efpo-lmEPk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.160.0/22
Signature Algorithm: sha256WithRSAEncryption
45:d6:19:d2:3c:05:5e:fe:6e:f3:e2:76:cf:60:58:40:e0:00:
11:12:82:a7:87:eb:0d:9a:45:bf:3c:ab:6e:d0:60:50:1b:1c:
52:e9:c2:f6:1a:ca:0a:8a:62:d7:bf:f7:9d:0b:88:41:c9:86:
88:89:38:be:4f:74:5d:51:9e:16:a7:d0:7d:ab:17:eb:1c:82:
5f:a3:29:80:c3:89:81:9f:9d:e0:3e:0a:25:dc:76:f7:f8:5a:
89:f4:11:45:0a:fb:31:32:f6:2c:2c:2c:17:e9:80:a7:d1:19:
42:00:bd:d6:8c:fc:9f:a8:e5:d0:b4:a2:22:4d:fa:a3:73:e5:
a6:da:e6:c9:57:ec:fd:8a:51:7e:2f:9b:7d:01:0c:c4:ce:62:
8e:44:1a:8d:00:e0:b1:14:87:36:dc:c6:cc:5b:0c:50:ce:85:
41:4a:97:45:11:3d:29:22:bf:d4:3c:47:60:2e:96:e3:9b:c7:
d4:aa:74:5e:e5:57:20:f5:62:4d:83:a4:07:2a:eb:ff:62:2b:
92:a5:13:40:20:1f:2b:ba:d2:0c:69:66:df:5d:c8:bd:e1:75:
5a:c8:d7:d1:da:98:91:32:6c:07:23:f2:2d:a6:84:09:c1:a0:
a1:23:6f:8b:b5:ce:0f:46:da:16:38:e2:a9:32:1f:80:16:6a:
cb:4a:1d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org