Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/810tMP5W0TpKvyEqJfGAa0UdWS0.roa
File: 810tMP5W0TpKvyEqJfGAa0UdWS0.roa (raw, json)
Hash identifier: Z0iz4UxE9tTkT6t4CNfNYcztHAYDYInXXnnutnAxCkM=
Subject key identifier: F3:5D:2D:30:FE:56:D1:3A:4A:BF:21:2A:25:F1:80:6B:45:1D:59:2D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E48
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/810tMP5W0TpKvyEqJfGAa0UdWS0.roa
Signing time: Fri 01 Sep 2023 10:15:51 +0000
ROA not before: Fri 01 Sep 2023 10:15:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 61.58.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7752 (0x1e48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F35D2D30FE56D13A4ABF212A25F1806B451D592D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:71:9a:d5:c6:eb:1d:d7:32:d9:e7:af:18:
0d:dc:99:73:c2:cc:e4:8a:10:ea:02:45:ad:60:5b:
51:6c:2c:0b:f2:2a:a6:49:d3:4e:42:84:29:37:cd:
9c:4b:4a:0a:7a:ee:56:89:40:76:08:ec:83:2a:a4:
21:10:40:2e:9e:d6:61:2c:6e:28:d5:3b:90:72:c5:
63:f2:23:f2:79:27:97:1e:d6:2b:23:f1:65:d0:0a:
0a:cd:ae:f2:86:66:df:75:ef:34:ee:08:c0:49:e5:
6c:dc:9d:25:cd:fa:df:51:52:98:98:4d:3d:b5:18:
1c:14:eb:e7:27:f9:0b:6d:8d:4c:12:8d:0c:57:08:
c0:1b:4c:94:5c:ae:6c:c6:b0:b9:8f:25:ac:7d:4a:
e7:45:67:d5:76:dc:94:c0:1a:f1:d3:57:0e:09:a3:
6f:6e:ed:ff:94:eb:81:33:32:56:c3:d5:0c:e8:8e:
46:f1:b0:08:50:3d:1c:57:43:2c:29:98:85:14:60:
bc:73:78:ac:e9:84:8f:1b:50:71:7d:fb:bf:3b:8c:
c9:07:4f:60:ef:b1:7f:81:06:3b:09:66:69:79:24:
57:f5:82:bb:c1:13:bc:bd:dd:04:06:af:a7:90:b2:
26:80:47:21:61:4a:ab:cd:70:f7:82:86:5a:02:d5:
41:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5D:2D:30:FE:56:D1:3A:4A:BF:21:2A:25:F1:80:6B:45:1D:59:2D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/810tMP5W0TpKvyEqJfGAa0UdWS0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.122.0/23
Signature Algorithm: sha256WithRSAEncryption
27:fa:0c:6a:43:df:41:84:ef:d4:89:4c:2b:9e:71:54:87:4b:
5c:c4:fb:4a:0e:64:08:35:67:23:64:b1:b1:73:76:0b:63:cb:
7e:06:8a:4f:f7:ec:c9:95:a9:c5:9b:35:02:54:c4:74:c7:5e:
03:01:26:9c:cc:3e:c1:be:bf:30:86:b5:cc:da:27:ba:9d:77:
b6:bc:c8:cc:d3:c7:b8:e8:ba:e8:d6:f9:7e:fb:74:59:b7:a1:
2b:36:36:3a:f4:2c:57:24:1b:57:9f:9e:7f:9b:6b:3b:19:63:
ff:43:1b:94:51:78:c4:1a:57:9f:84:9d:3c:8f:b8:36:76:77:
9e:fe:c7:aa:bb:16:8e:87:5c:7e:7f:e4:80:d3:3a:49:17:e0:
0f:73:ba:63:82:c2:22:10:24:ad:84:1c:8d:b3:80:0f:33:e7:
98:ee:86:c3:ab:d1:6f:4d:3c:7c:8f:77:db:f0:4b:92:08:8e:
03:0b:56:fa:bf:41:7a:f8:10:7d:a9:64:dc:85:b0:f4:63:05:
76:c8:c3:0f:c7:9f:e8:2b:fc:e9:c0:b2:d8:ec:55:0a:1e:5f:
96:32:ba:b7:a0:f7:52:2a:bc:62:f9:9f:14:2a:94:e5:7c:38:
c5:dc:2b:87:c0:8d:f1:78:35:b6:b3:fe:cb:df:d0:f7:4f:56:
35:10:aa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org