Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DdgRyqyIe7hD6dxAfuth0bJr5dc.roa
File: DdgRyqyIe7hD6dxAfuth0bJr5dc.roa (raw, json)
Hash identifier: FQXYTfHIgbrTtT7onnM6sxix7Fp+MXwzuHdQKKr4qDM=
Subject key identifier: 0D:D8:11:CA:AC:88:7B:B8:43:E9:DC:40:7E:EB:61:D1:B2:6B:E5:D7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E97
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DdgRyqyIe7hD6dxAfuth0bJr5dc.roa
Signing time: Fri 01 Sep 2023 10:16:14 +0000
ROA not before: Fri 01 Sep 2023 10:16:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 122.100.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7831 (0x1e97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:14 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0DD811CAAC887BB843E9DC407EEB61D1B26BE5D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:fe:5e:c6:ed:15:3a:45:03:a7:f3:50:24:
64:59:58:8e:43:0c:d8:98:13:40:96:7c:91:b0:3a:
87:bd:6c:eb:75:5f:cf:16:5b:ba:8c:dc:99:a9:0e:
2a:bf:57:35:8c:49:de:54:60:1d:52:4a:70:73:ee:
17:dc:29:2a:21:77:18:e1:d4:ff:4e:39:7a:9f:e9:
2e:95:2b:61:4a:b9:b7:14:03:9c:ea:70:00:ef:8e:
12:4c:19:b5:50:ca:9b:00:6f:2d:4e:15:d7:cb:ad:
91:40:67:1c:c4:09:ef:c4:a5:fe:2e:95:e5:db:2f:
84:71:d6:53:48:8f:87:3f:d0:00:8f:cc:98:45:04:
06:84:30:50:00:77:6f:a2:69:2c:69:1f:73:9d:7c:
01:8b:d4:fc:31:1d:07:74:a5:2d:01:1f:df:31:3e:
30:6a:8f:d6:5a:b3:80:04:a5:29:96:4e:52:f1:13:
d7:eb:64:1a:4a:ee:7d:57:f7:bf:8f:55:46:9b:98:
ea:03:bd:cc:6c:50:ee:ca:87:15:30:c6:57:3e:4c:
fe:fe:e6:c1:22:0d:6f:13:0c:ec:6c:89:c1:ae:8a:
37:0d:9f:17:03:63:83:68:3e:51:12:46:6b:59:ed:
06:1a:da:06:35:cc:f0:70:7d:93:a7:c1:79:4b:7f:
76:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D8:11:CA:AC:88:7B:B8:43:E9:DC:40:7E:EB:61:D1:B2:6B:E5:D7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DdgRyqyIe7hD6dxAfuth0bJr5dc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.64.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:9a:55:78:da:c1:c7:a1:04:af:80:ce:1b:66:47:7f:c6:d2:
b8:5b:df:57:5a:db:b1:b0:4f:e1:5f:f7:c5:9e:e5:b5:87:96:
5b:44:f2:66:96:e7:44:38:a8:a0:be:5e:76:f7:ec:09:c4:2a:
54:46:de:37:89:d7:ef:8c:f7:ce:cc:21:c9:9d:b1:13:3f:13:
4a:23:c6:cc:a4:a7:be:00:f3:93:52:a7:cb:38:b0:26:8a:68:
71:35:44:72:6f:80:dd:95:ce:d8:fd:7b:7d:e3:98:f1:51:e6:
0f:4a:a9:0d:19:e1:2d:51:51:b4:b7:e1:39:3f:c7:99:d1:4e:
51:b2:4c:82:76:5f:c4:71:28:86:59:82:49:bd:c3:82:ed:ba:
23:93:a3:63:f0:e1:b4:5f:a0:10:d7:85:69:f1:4b:d9:f8:0a:
bf:c6:69:ce:e7:e7:09:50:a0:5c:35:43:fa:6d:c5:c5:f3:17:
db:aa:16:5c:6e:79:de:2d:b0:28:5f:da:95:76:9b:64:db:95:
18:5e:8b:9a:e5:42:63:ca:31:ee:6f:a5:26:e4:82:2a:df:0a:
8c:b7:9f:fe:24:8a:17:d4:17:b3:98:e6:e0:4c:c0:0a:70:80:
fc:f3:20:89:14:59:1b:2d:8a:d5:cd:2d:6a:12:45:53:8c:97:
13:b7:8d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org