Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ESq0DQXyqaXtDHzxGq1Icf5ZN9A.roa
File: ESq0DQXyqaXtDHzxGq1Icf5ZN9A.roa (raw, json)
Hash identifier: ccvXl3W7nheb6jlk1PBGHI6/CG/jeMsCNzLXMkw7+kU=
Subject key identifier: 11:2A:B4:0D:05:F2:A9:A5:ED:0C:7C:F1:1A:AD:48:71:FE:59:37:D0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E2A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ESq0DQXyqaXtDHzxGq1Icf5ZN9A.roa
Signing time: Fri 01 Sep 2023 10:15:44 +0000
ROA not before: Fri 01 Sep 2023 10:15:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7722 (0x1e2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=112AB40D05F2A9A5ED0C7CF11AAD4871FE5937D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:47:33:a6:3a:f4:92:92:ab:5b:aa:a1:52:
66:56:9f:bb:e6:d6:36:d6:e4:50:fb:b0:e0:08:c7:
b1:89:96:55:8d:aa:59:ec:7f:a9:8d:4e:05:9a:3a:
cb:35:58:20:e4:ff:a1:08:7e:ec:13:b5:e0:bb:d2:
d8:11:21:2f:ef:d8:7c:25:89:2d:d2:aa:e1:b6:ad:
d9:5a:a2:32:56:26:d1:2d:cf:2a:d6:b5:0a:c8:b1:
e9:1d:07:90:4e:b6:c0:9f:7b:f7:30:3a:a7:cc:6c:
0d:d7:35:ae:c1:fc:fc:55:93:46:89:09:1d:df:c3:
5f:90:2c:00:33:37:02:4f:64:85:85:d6:26:2d:9f:
29:8c:bb:52:b9:37:3e:a2:be:ff:f0:a2:be:d6:43:
28:32:32:d0:4f:10:8c:90:bd:97:ee:99:76:5c:b4:
66:3d:33:bd:27:fc:1e:bc:4b:a1:26:7d:39:15:80:
b1:ff:9f:eb:09:77:9f:f9:60:70:79:9d:5d:fe:e7:
3d:47:fd:28:5b:58:8b:5f:0d:5a:cb:25:b9:63:26:
af:f5:3c:55:1e:f4:c2:f3:08:a3:a4:a4:2b:dc:08:
75:b7:c8:a7:1a:3f:f7:93:15:c0:c3:6b:58:fe:ea:
78:5f:a2:9a:a9:00:45:89:1b:e8:07:ea:db:d7:85:
39:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2A:B4:0D:05:F2:A9:A5:ED:0C:7C:F1:1A:AD:48:71:FE:59:37:D0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ESq0DQXyqaXtDHzxGq1Icf5ZN9A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.156.0/22
Signature Algorithm: sha256WithRSAEncryption
40:8d:e3:a5:d9:66:e7:55:24:d7:be:c0:b7:9b:34:4e:c4:96:
b0:30:b8:1b:10:b7:7b:0b:23:d3:0c:09:74:94:e7:13:bc:63:
18:21:63:47:d8:77:bb:ce:de:8e:74:97:79:8c:5a:33:8d:47:
8c:50:71:8d:49:14:c1:80:08:c2:7b:f3:85:74:8f:a6:7e:a5:
04:69:62:71:c9:5f:f7:90:86:78:9f:63:ab:65:50:c0:8a:00:
66:70:b8:35:fa:04:f9:54:06:b6:31:86:0f:79:4f:10:e1:ee:
1a:53:ae:8b:03:b3:42:b7:e0:62:0b:1e:87:8e:18:17:3a:89:
12:4f:a9:b4:3a:89:e2:24:b2:3e:52:67:73:27:4c:35:cb:ad:
e0:8a:99:ef:d1:ea:d2:57:ff:6a:92:4c:d4:f7:70:88:34:e3:
cb:7e:5f:86:db:f8:9b:68:d7:d5:f9:84:69:96:ad:65:74:df:
b6:bb:07:ae:4f:ed:84:82:a1:1e:05:d6:c2:83:5f:52:53:23:
09:13:31:c7:e1:4f:59:b0:15:49:03:7b:00:d0:58:65:b4:12:
00:23:68:27:fe:f6:a7:c4:aa:5a:8c:20:8e:a8:08:12:85:48:
53:96:d4:3b:ff:40:96:c6:ea:a3:d7:15:a3:59:57:25:b0:c6:
79:ee:ea:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org