Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H7MmmGCMG0wPOe3BJ2uvO-khyT4.roa
File: H7MmmGCMG0wPOe3BJ2uvO-khyT4.roa (raw, json)
Hash identifier: IFQYW8R3OT/VUy82mkCeUTGF8zl5wBVrE/ZuBz00RFI=
Subject key identifier: 1F:B3:26:98:60:8C:1B:4C:0F:39:ED:C1:27:6B:AF:3B:E9:21:C9:3E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E51
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H7MmmGCMG0wPOe3BJ2uvO-khyT4.roa
Signing time: Fri 01 Sep 2023 10:15:53 +0000
ROA not before: Fri 01 Sep 2023 10:15:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7761 (0x1e51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1FB32698608C1B4C0F39EDC1276BAF3BE921C93E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ab:bb:d4:f9:8a:52:1d:db:7c:31:ed:3f:b4:
43:ff:32:26:94:bf:49:49:e5:d1:85:47:50:6d:f8:
47:10:13:22:e2:ca:3f:34:d3:06:7c:13:d8:6c:af:
f8:5c:1a:08:7c:d9:ac:2b:c4:f5:ce:b6:2e:6d:0f:
7e:ce:d1:37:d3:0f:ef:30:a6:4c:df:44:64:7a:09:
bc:6e:90:a4:e7:be:29:09:6e:7a:ca:ec:02:bd:5b:
48:a7:11:f3:65:99:11:a4:1c:5a:17:ea:0a:2e:7b:
13:ee:7e:60:5a:48:36:06:d4:49:a0:b3:8d:81:c3:
83:3f:00:30:1f:81:50:58:13:63:19:82:0e:63:c4:
52:ad:25:0a:55:45:0a:f3:c9:97:05:6d:07:e7:bf:
3e:77:71:d2:f2:3e:06:1a:7d:a7:81:5f:9b:c2:65:
d5:52:0e:1b:82:96:67:77:1a:4b:0b:9d:2c:9d:0b:
6c:45:f5:32:0b:13:07:56:07:8b:2e:37:0d:b7:84:
ac:c8:f3:09:99:60:f7:72:bc:95:61:36:e1:ce:ab:
22:9b:30:3c:c9:85:e8:f7:c7:af:38:14:63:e2:d0:
c0:fd:07:9f:6c:b4:65:54:db:a1:00:ab:b0:a3:8b:
96:8c:b3:36:f5:c6:cc:f0:96:a7:81:e6:3d:2d:a1:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B3:26:98:60:8C:1B:4C:0F:39:ED:C1:27:6B:AF:3B:E9:21:C9:3E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H7MmmGCMG0wPOe3BJ2uvO-khyT4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.136.0/24
Signature Algorithm: sha256WithRSAEncryption
01:26:64:dc:d0:9d:a5:5d:a1:4f:2c:e9:00:d3:f8:ac:d5:d9:
36:49:60:2f:2f:b5:db:e0:60:ed:1c:f8:4d:fc:26:86:81:77:
13:a3:7a:08:b5:02:1e:93:09:1b:be:02:02:a4:de:d3:b9:1c:
06:c9:26:43:e6:3a:74:22:72:e1:5c:70:ea:d5:7f:a4:c1:e3:
27:fb:4c:75:9b:95:74:2d:a4:dd:4b:92:b5:a8:cc:9e:32:3c:
f0:ea:25:fa:2a:0e:ee:54:66:12:9f:0d:2c:e9:0d:b8:c5:98:
5b:4a:9b:c4:3d:f3:5b:87:2e:2e:9e:70:35:2b:71:e7:7f:51:
6c:21:2d:14:bb:61:3b:43:25:31:f1:f4:f3:26:e8:76:d1:79:
ad:cd:62:e3:71:63:ac:13:a8:ef:34:98:64:8e:20:37:3b:65:
59:90:b4:fe:ec:32:c0:50:8f:b8:8d:96:7c:8f:0e:17:be:8a:
da:8e:29:e3:4f:b2:14:5d:b8:2c:7c:68:14:0a:c4:c4:85:63:
8e:95:96:13:ca:12:33:5d:50:8a:ed:41:22:fe:d9:9c:2e:3f:
89:e4:60:94:7c:12:1a:e9:ce:c4:0c:d9:28:c7:3c:53:e4:07:
16:7d:f6:fe:a0:ce:d4:70:ba:4d:4d:c4:d0:e8:8c:b6:73:51:
8a:d4:20:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org