Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Bx7JFyPeRdtJBKohVV8y_92wo0A.roa
File: Bx7JFyPeRdtJBKohVV8y_92wo0A.roa (raw, json)
Hash identifier: F256WD/9WoSKnEcZ0kkLxnSxQQsGmakAgE2XLELLqBg=
Subject key identifier: 07:1E:C9:17:23:DE:45:DB:49:04:AA:21:55:5F:32:FF:DD:B0:A3:40
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E04
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Bx7JFyPeRdtJBKohVV8y_92wo0A.roa
Signing time: Fri 01 Sep 2023 10:15:34 +0000
ROA not before: Fri 01 Sep 2023 10:15:34 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 180.218.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7684 (0x1e04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:34 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=071EC91723DE45DB4904AA21555F32FFDDB0A340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:ce:62:bb:22:e4:9d:c0:7c:48:fe:2c:76:
69:99:3e:66:73:1c:9d:c4:cf:bd:98:6d:a6:fe:c6:
70:c7:71:19:dd:60:a3:4e:51:d4:51:e5:7b:b1:40:
23:03:1d:c5:ba:d2:ab:d6:5a:f0:8a:9b:eb:5d:8f:
e4:00:73:bf:33:0a:8b:8f:84:e1:2c:e4:66:f3:be:
93:50:f7:fb:3d:5a:fe:68:e2:7f:fa:34:d4:b9:01:
d5:49:37:0e:1f:fa:df:3c:f8:0d:b8:6a:ec:20:b7:
80:1d:44:73:47:3f:cf:a2:8a:f4:36:ef:df:58:ca:
4d:be:a6:f3:a1:0b:ae:c1:4b:28:32:3b:b1:56:70:
57:c3:09:39:0e:1b:66:33:61:56:4a:6d:b2:44:ed:
d4:da:4b:af:65:63:c4:fc:cb:cd:c3:c4:f9:25:df:
cf:02:ff:07:32:4e:6a:d8:c4:bd:1e:c1:a7:6f:1a:
b3:2a:d2:88:be:8f:d1:e9:07:33:86:ce:db:92:11:
4d:56:de:c0:47:08:79:75:d5:55:3f:ae:61:0c:f7:
44:5f:79:4b:5b:66:89:ae:1d:bc:e8:0e:4a:09:7c:
c7:11:b9:70:6d:0e:5a:8d:a7:64:61:c6:90:0d:9f:
d5:1e:a8:a4:77:03:b9:11:5b:0f:40:b2:40:3c:6c:
e6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1E:C9:17:23:DE:45:DB:49:04:AA:21:55:5F:32:FF:DD:B0:A3:40
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Bx7JFyPeRdtJBKohVV8y_92wo0A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.104.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:62:dd:c9:68:d3:71:68:48:02:10:8d:14:08:15:44:82:8b:
9f:17:f6:bc:9f:ae:d7:97:26:2f:e5:22:2d:e3:fe:31:bc:11:
c0:4f:a0:9e:bb:3d:7a:c0:ff:ce:97:f2:e1:46:b8:56:b8:0e:
58:00:6c:ec:fb:f4:83:d4:b8:a3:d0:80:1f:fe:1b:46:f0:be:
28:3b:8e:0b:6c:79:02:51:57:d5:96:98:a2:8e:07:b1:58:9f:
1c:9f:3c:13:42:aa:b6:a0:fd:e5:0b:b9:4b:ed:af:6e:43:39:
43:29:61:12:2c:fa:4b:e6:bf:bd:65:02:dc:58:74:4f:27:8e:
78:83:29:40:9d:15:ed:cb:61:04:9d:a1:64:b3:cc:74:7e:4c:
55:64:71:04:b6:a8:3f:42:7e:de:05:9a:30:d5:22:8d:1f:b5:
94:af:3c:ac:00:53:c1:64:d4:73:a5:ae:96:db:c8:27:19:0c:
d5:f5:33:0b:ee:20:ec:41:74:8b:be:57:0c:5c:64:09:66:e6:
6b:3f:49:51:f1:2d:16:45:cb:70:8a:a4:91:0c:a1:20:19:0f:
81:88:66:cc:d2:fd:64:04:0c:ba:f5:2a:70:7e:3a:22:1a:f6:
08:35:28:89:b7:33:7a:71:b1:64:3a:e9:41:3c:ea:f2:33:23:
68:74:f4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org