Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8e2K2jLZ7bpIzG3uKP_9_n5UUGM.roa
File: 8e2K2jLZ7bpIzG3uKP_9_n5UUGM.roa (raw, json)
Hash identifier: gtVZeI8ck9dNXNd7gjXBIoDRNKd1RcR80EMcxaMQjUY=
Subject key identifier: F1:ED:8A:DA:32:D9:ED:BA:48:CC:6D:EE:28:FF:FD:FE:7E:54:50:63
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E0D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8e2K2jLZ7bpIzG3uKP_9_n5UUGM.roa
Signing time: Fri 01 Sep 2023 10:15:37 +0000
ROA not before: Fri 01 Sep 2023 10:15:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.144.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7693 (0x1e0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:37 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F1ED8ADA32D9EDBA48CC6DEE28FFFDFE7E545063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:d5:47:48:1f:92:77:ac:5a:ea:7a:44:36:
42:36:c8:43:79:83:a6:d0:f1:2e:91:5d:06:c1:4e:
37:54:67:64:83:d3:fa:d5:a1:51:12:a9:99:71:6f:
88:ca:4d:12:47:83:05:88:15:25:62:9c:e1:1b:71:
f1:96:8e:b2:ec:ee:e1:f9:fc:86:1e:fe:9f:a1:f3:
4b:f1:9d:a0:45:3b:0e:bb:10:50:da:1e:c2:5a:52:
bd:2d:ca:07:d6:1d:90:c3:ad:f1:43:f5:ce:cd:85:
2b:c6:86:00:0e:d5:01:6d:59:76:a4:c4:de:ed:7d:
b8:4d:ab:96:ac:05:87:19:5c:29:b7:d0:db:86:15:
09:a9:01:db:4d:79:08:97:7d:b8:5a:e2:4c:20:d3:
32:83:34:f6:43:af:ce:a6:66:b6:06:4d:1b:3c:19:
87:74:27:54:1d:7e:d8:38:f1:44:8e:ff:3e:6f:71:
a6:76:f5:ec:cc:50:3d:f1:34:04:23:e3:82:46:89:
6f:59:8b:ba:ff:d3:58:6c:25:17:cf:c1:f9:35:8b:
7d:52:74:09:df:e6:77:a7:6d:d4:de:c8:d3:6c:db:
41:b6:55:3e:d0:ef:66:4d:9c:ee:2f:33:9f:99:c1:
ab:3f:a2:b2:de:cb:60:f9:4e:79:ba:a1:20:90:16:
6e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:ED:8A:DA:32:D9:ED:BA:48:CC:6D:EE:28:FF:FD:FE:7E:54:50:63
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8e2K2jLZ7bpIzG3uKP_9_n5UUGM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.144.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:99:05:a3:bc:5b:5a:2f:ec:64:bd:cd:87:30:da:8e:1a:3e:
41:b9:bf:90:f8:b1:b4:bc:5a:27:1a:92:37:7f:cf:97:8b:c5:
26:f0:e4:1b:61:be:5c:a7:ab:1a:5e:7e:9a:a5:b2:5b:50:73:
90:ee:64:92:fc:4b:74:82:1d:63:de:30:5d:25:e7:93:fd:96:
a4:a3:94:c4:33:3a:04:07:17:bc:be:4c:79:2d:97:9e:e0:11:
cb:d2:78:b4:f2:67:28:1e:d7:96:0b:c8:02:89:8a:ce:05:95:
16:d6:23:5a:22:19:25:61:f0:36:27:d7:4a:2a:e8:5e:e9:51:
de:0e:cc:b7:ad:3a:b2:13:d4:ef:d7:66:36:12:a2:06:5e:13:
90:ea:d5:33:2c:0c:c2:e5:0c:c0:7e:4d:95:67:37:7a:9a:62:
a4:cb:c2:06:44:b9:d1:d1:fe:78:39:82:dd:e1:bf:a3:06:d1:
39:e1:d7:55:04:28:33:2a:4d:90:c7:aa:2b:1f:44:b2:5c:23:
b8:84:d6:3a:f9:ba:b6:47:cb:4d:2d:a9:f8:4f:52:20:8b:ed:
cc:3d:7b:95:5d:c8:16:4a:51:78:6f:cc:3d:a6:a2:33:15:b2:
6b:e9:4e:96:b6:47:3e:28:fa:74:6a:6f:77:c9:88:ac:17:73:
2d:10:38:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org