Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8s3sBzO3IzJMGhCvQ8sj6mpsjn8.roa
File: 8s3sBzO3IzJMGhCvQ8sj6mpsjn8.roa (raw, json)
Hash identifier: g62bTH9dYTX7qoYUMkrx2pfJwI/Z2yyZjywAzV7tvRU=
Subject key identifier: F2:CD:EC:07:33:B7:23:32:4C:1A:10:AF:43:CB:23:EA:6A:6C:8E:7F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E4E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8s3sBzO3IzJMGhCvQ8sj6mpsjn8.roa
Signing time: Fri 01 Sep 2023 10:15:52 +0000
ROA not before: Fri 01 Sep 2023 10:15:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 114.198.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7758 (0x1e4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F2CDEC0733B723324C1A10AF43CB23EA6A6C8E7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:8e:12:83:1a:a6:1f:40:02:d6:b1:99:67:
82:1f:c2:4d:d4:c9:10:0a:8e:fa:a6:4b:c0:ac:2a:
bb:18:04:dd:36:d4:85:7e:7d:d6:61:91:bf:98:df:
22:82:dd:33:98:a5:93:9b:1f:df:c3:32:e9:c4:5f:
a7:3d:78:78:c5:66:9b:9a:06:28:7c:ca:93:59:89:
4c:ce:c3:ab:ce:62:86:b5:3a:4a:69:81:81:02:68:
24:3b:c3:9c:81:fc:e3:81:65:0f:46:31:a9:47:fc:
3a:55:ed:3a:b8:ea:04:7b:ec:11:cd:3d:04:e9:59:
af:88:e8:e7:0a:0b:c0:a0:89:c2:da:34:3b:28:84:
0b:4d:a4:eb:b4:9f:f0:58:36:b9:66:06:36:db:b4:
a7:39:c9:e3:67:2f:7d:4c:51:b4:85:31:8f:37:b4:
bc:b1:0c:1c:34:87:b9:1b:b3:b0:28:5e:0b:a7:1c:
ed:e5:33:ae:9a:07:47:fb:e7:8d:5b:e0:4d:45:85:
17:0a:99:53:6e:48:d7:6b:09:a7:1b:2c:2a:14:e2:
c0:09:97:d7:48:49:f2:ac:0b:1c:ca:b0:b7:1c:59:
07:9a:df:11:da:4b:b2:d2:01:4e:d6:d5:62:c0:39:
52:b4:7c:76:d8:08:7a:e4:79:f8:95:08:5d:0a:4c:
cf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CD:EC:07:33:B7:23:32:4C:1A:10:AF:43:CB:23:EA:6A:6C:8E:7F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8s3sBzO3IzJMGhCvQ8sj6mpsjn8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.176.0/20
Signature Algorithm: sha256WithRSAEncryption
08:14:e4:09:54:2e:6b:94:32:95:ec:ef:2d:a2:9f:70:0c:b0:
61:0a:83:36:32:fa:74:09:d6:94:af:cf:ec:38:3e:09:d2:08:
6e:e1:6c:aa:9d:82:06:75:02:eb:47:57:f6:ee:db:10:7f:c0:
22:15:14:94:55:fb:69:04:70:2f:fe:20:b2:eb:69:09:b7:0d:
ad:6e:39:10:64:49:d6:56:6b:67:59:33:c9:b9:ad:67:ce:31:
6e:f1:86:01:6f:18:0a:1b:31:cd:55:f7:ba:5f:f7:49:7f:b4:
8c:26:11:ac:ab:db:7e:0d:6e:4e:88:a1:69:64:4c:97:05:79:
49:39:73:28:d5:a5:f4:10:17:94:a0:98:df:bf:64:92:bb:44:
e0:4d:96:61:00:2f:1e:1b:23:3b:58:4a:19:89:6c:26:f3:92:
39:2a:7a:ea:39:d2:24:31:07:fc:21:d1:33:66:18:f8:37:33:
13:1a:68:8e:7f:ab:8a:2f:9a:db:cb:89:97:fc:f0:1e:66:da:
4f:29:9c:ec:be:41:c5:39:d0:e9:ee:ca:27:1a:00:47:76:f2:
1e:ea:5f:c7:ee:a2:06:97:33:6d:f5:c8:0c:67:e8:b5:ca:0a:
76:25:c0:e9:70:7e:6d:b8:dd:95:bb:5b:89:4c:bd:ea:46:7a:
c1:d4:ef:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org