Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FJIk-KmB4E9MqRmDffSzfcsyj7M.roa
File: FJIk-KmB4E9MqRmDffSzfcsyj7M.roa (raw, json)
Hash identifier: IKwPQ8SFWHiKKIz7+J3gNhPyes3Q6x+/FLszZ6sex44=
Subject key identifier: 14:92:24:F8:A9:81:E0:4F:4C:A9:19:83:7D:F4:B3:7D:CB:32:8F:B3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1EA8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FJIk-KmB4E9MqRmDffSzfcsyj7M.roa
Signing time: Fri 01 Sep 2023 10:16:19 +0000
ROA not before: Fri 01 Sep 2023 10:16:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 2407:4b00::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7848 (0x1ea8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=149224F8A981E04F4CA919837DF4B37DCB328FB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:ab:e1:5a:d0:3e:3d:8c:47:2c:6f:07:a1:
20:d0:6a:33:64:c4:c7:e2:2a:eb:f1:58:3d:51:ca:
be:55:16:3c:d3:71:6c:3e:f0:27:4b:93:83:64:76:
7a:7f:6a:77:8e:a8:18:83:63:fc:ef:f0:63:f0:0f:
44:c9:b3:bd:f4:80:dc:f0:c0:1c:bd:5f:40:b0:c5:
0c:0d:38:0f:3e:6b:30:80:c3:97:0e:70:28:be:7a:
87:a8:87:1c:9c:54:7b:65:44:73:f2:54:89:9e:d6:
b9:5c:81:e2:be:40:b2:4c:df:6c:0c:66:99:18:cd:
44:9e:9c:98:af:c5:53:17:3b:6d:87:38:5f:8e:46:
a4:b0:6c:87:53:70:85:11:15:21:3a:79:1f:d0:17:
ea:ea:64:51:f4:e0:f3:f1:66:eb:63:c7:b1:d3:74:
2f:a9:b8:5f:61:28:f6:9c:4a:46:9d:58:b7:66:b6:
9c:ae:b2:44:ca:c2:21:d9:1a:13:45:b6:3f:89:ce:
fb:d0:93:40:c9:a7:1f:d4:9c:12:89:f2:69:2a:a7:
96:4e:91:54:67:36:69:f2:83:bc:1e:fe:ee:a7:f8:
4c:39:b4:d8:dc:3f:4f:00:98:6d:54:b1:a4:72:77:
0a:69:04:b0:8f:05:03:c2:09:42:92:92:fb:9e:9e:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:92:24:F8:A9:81:E0:4F:4C:A9:19:83:7D:F4:B3:7D:CB:32:8F:B3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FJIk-KmB4E9MqRmDffSzfcsyj7M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4b00::/32
Signature Algorithm: sha256WithRSAEncryption
2f:f8:3d:02:87:a1:1f:28:32:93:e4:37:ca:38:f5:94:c4:f8:
36:fc:f3:8c:14:e7:e1:98:d8:5c:7b:49:eb:c5:5a:eb:59:a9:
04:03:f5:4b:2c:1b:cc:c4:bd:8a:5e:01:95:c8:9e:da:a3:3e:
95:2a:2d:6f:d6:be:83:01:45:3b:23:47:ff:1c:ab:68:cf:b9:
e7:b1:8b:fa:57:a2:23:4c:b0:2b:08:90:57:76:6c:ab:95:4d:
6c:0c:48:da:4c:63:f0:76:2b:78:08:95:9b:3f:b2:f4:0a:3b:
18:a4:ef:15:88:83:25:e0:36:2b:ab:26:71:8c:77:eb:23:a7:
d2:18:12:13:9f:f0:f9:8e:8d:90:c1:8e:1a:7c:c3:13:6c:a6:
28:76:63:11:61:0c:d3:4a:bc:0d:62:92:bf:40:77:41:f1:fd:
ee:f7:62:eb:c8:8a:40:b0:03:1e:f8:9b:5e:bc:de:15:53:db:
04:ff:8c:10:21:71:e7:6c:8f:83:63:4b:05:78:5c:ed:dc:b8:
6d:6f:98:ec:4d:4a:bb:4d:94:18:ac:b4:d2:f6:2d:32:f9:1d:
35:01:21:f5:be:97:c8:99:3d:29:35:42:71:46:c1:92:7e:ae:
8a:f5:85:9f:bd:a0:20:7c:65:44:c9:4e:43:5d:84:c2:f8:1c:
87:4c:0e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org