Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AbyZbTHGg4vDd7VSYNE8y4fskr4.roa
File: AbyZbTHGg4vDd7VSYNE8y4fskr4.roa (raw, json)
Hash identifier: VRVk3LhMHJwtdVNNSPtg7rY7Qg6inbthwlKAS3eaWso=
Subject key identifier: 01:BC:99:6D:31:C6:83:8B:C3:77:B5:52:60:D1:3C:CB:87:EC:92:BE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E1C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AbyZbTHGg4vDd7VSYNE8y4fskr4.roa
Signing time: Fri 01 Sep 2023 10:15:41 +0000
ROA not before: Fri 01 Sep 2023 10:15:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 211.76.46.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7708 (0x1e1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=01BC996D31C6838BC377B55260D13CCB87EC92BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:e8:9b:14:4a:0a:1d:51:c8:49:9a:7a:99:
e2:0f:79:05:46:b5:3b:57:04:f0:5d:24:1d:6b:a5:
14:07:ad:8f:08:28:97:1f:b2:94:d1:c5:9d:86:8f:
f5:dc:98:55:0e:94:05:c4:45:83:0c:f4:c0:38:f2:
71:41:be:2e:76:49:20:57:cc:81:5b:07:d4:21:b0:
62:c7:ec:8b:b3:09:28:41:d8:1f:76:d8:0f:19:f9:
1d:16:91:06:9e:41:7d:7b:e7:8c:99:4e:04:af:f8:
bb:07:44:6e:4d:95:31:16:fe:0e:a1:7b:6c:d0:4b:
43:67:97:13:7f:40:5d:bf:dc:28:43:fd:a5:83:37:
1a:d5:fc:37:2f:6c:2a:2c:96:7d:10:6f:5b:b7:4c:
88:73:f0:f6:85:1b:b9:0c:f6:d7:29:86:ee:0f:05:
1f:98:29:7d:d6:92:76:68:e0:3d:a8:35:af:1a:b8:
11:69:44:8e:f8:50:95:48:38:03:87:7c:5a:aa:18:
ee:76:37:48:57:51:76:fb:61:03:33:8d:57:5a:36:
43:42:bc:c9:6b:dd:59:2b:9e:46:24:d2:85:84:44:
80:99:66:e8:50:ee:b1:08:fd:e4:f5:59:a0:f8:10:
7e:76:ff:67:31:68:21:c2:06:f5:e4:f7:c4:ac:80:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BC:99:6D:31:C6:83:8B:C3:77:B5:52:60:D1:3C:CB:87:EC:92:BE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AbyZbTHGg4vDd7VSYNE8y4fskr4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.46.0/23
Signature Algorithm: sha256WithRSAEncryption
96:2b:f0:5b:f7:03:7a:80:27:e3:c1:6a:89:5d:2b:c6:f5:85:
e2:e9:b0:4a:5b:7b:e0:25:90:59:90:af:4b:5e:f3:a4:ff:29:
3c:c4:00:4f:08:5b:11:a1:84:8c:a2:25:52:32:50:11:4b:28:
40:5c:d3:eb:5e:57:c7:bb:9a:07:67:9a:69:76:da:33:e8:a1:
2f:97:1c:34:51:de:47:b6:b0:22:53:a8:f9:50:76:28:d3:e2:
3f:5a:7c:c6:6a:bb:2e:22:c1:b8:c0:13:86:70:3f:d8:a6:93:
98:73:22:0d:5a:8f:bd:81:de:2b:54:d1:72:d5:3d:a1:8e:93:
ea:54:fe:00:55:dc:f2:69:6f:d6:58:58:49:26:e1:2e:ea:68:
5d:55:50:3a:da:d8:1b:b8:33:a9:a8:41:66:0b:64:69:49:74:
a3:67:cd:a8:ce:68:e7:83:ad:42:39:16:30:67:45:c9:74:23:
9b:96:35:2a:46:67:61:b2:63:b3:36:09:7c:0a:6e:87:40:cb:
a4:d8:01:82:ab:df:3c:19:7e:a6:f9:7f:d5:05:83:d2:21:ba:
ee:92:28:2c:08:68:ea:68:b3:b5:c2:bc:9a:3a:80:cd:d3:fb:
01:65:83:1c:e8:71:c6:7b:6a:57:cf:ef:c5:1d:70:3d:3f:18:
ce:5a:22:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org