Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IOSQB1cQT6tc9OSrKyEML7OtosI.roa
File: IOSQB1cQT6tc9OSrKyEML7OtosI.roa (raw, json)
Hash identifier: f4Zzqlu1OwEV+zf0m8e8pPhFitCMKNJCTQFlvC++XG8=
Subject key identifier: 20:E4:90:07:57:10:4F:AB:5C:F4:E4:AB:2B:21:0C:2F:B3:AD:A2:C2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E6E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IOSQB1cQT6tc9OSrKyEML7OtosI.roa
Signing time: Fri 01 Sep 2023 10:16:02 +0000
ROA not before: Fri 01 Sep 2023 10:16:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 119.77.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7790 (0x1e6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:02 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=20E4900757104FAB5CF4E4AB2B210C2FB3ADA2C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:da:5f:c9:1b:68:0d:a3:e6:97:3b:86:94:
59:f7:8b:6c:38:23:95:df:df:12:d7:15:1a:5a:60:
77:fd:26:b7:f2:d0:71:09:e6:93:e6:fe:78:b2:58:
2e:cf:77:90:15:43:75:dd:58:f1:6e:df:49:6b:15:
49:5e:8d:b9:74:f8:f8:7f:d0:bc:a9:68:3e:87:13:
8e:7e:c9:94:67:3b:84:6a:ab:9c:93:45:b2:f2:26:
ab:a1:3b:ef:c4:c4:3f:b0:dd:96:0f:94:e6:91:18:
ab:ad:14:ca:a8:16:37:d7:56:cb:8d:22:5e:25:c7:
f1:69:2b:ad:ee:ec:0b:7b:08:4b:02:4d:11:18:75:
5f:40:0f:4f:97:1e:db:c7:5d:5e:98:f1:71:4f:1f:
77:b7:6a:63:1a:3c:02:b2:c1:ec:cd:9d:38:42:1d:
34:91:0e:c6:c9:5e:9e:9c:38:b6:83:08:6e:e7:a0:
dd:61:33:56:fe:40:e0:2c:6c:01:5a:e1:b6:c9:6f:
3a:5e:78:3e:39:b0:d8:9f:93:dd:8a:77:7b:ec:57:
f3:91:07:b3:cf:8f:5b:2a:be:9e:15:99:e6:db:d0:
7b:93:3c:2a:b2:47:04:34:bf:41:57:b4:b7:4c:c1:
d8:7c:a1:af:ee:03:65:7e:b1:77:fe:e9:e0:7f:55:
2b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E4:90:07:57:10:4F:AB:5C:F4:E4:AB:2B:21:0C:2F:B3:AD:A2:C2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IOSQB1cQT6tc9OSrKyEML7OtosI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.140.0/22
Signature Algorithm: sha256WithRSAEncryption
07:bd:e9:9a:55:a1:ca:e2:92:0f:0c:90:04:73:78:68:16:12:
52:13:c9:dd:e0:53:db:97:6e:45:95:df:a7:7a:63:00:ad:0a:
0c:dd:2f:70:fd:91:f7:e5:cc:70:a4:fc:4e:0e:5c:b5:c8:a6:
42:9d:4d:e7:ad:fe:1e:3d:bc:fe:9a:35:46:5b:d0:6d:64:cc:
0d:c2:69:8d:25:38:e5:5b:a8:76:33:f6:3d:72:3d:39:bc:55:
17:19:ce:ad:91:bc:6e:aa:a0:b4:3f:32:5a:88:b5:ca:89:bc:
c2:5d:0b:e8:35:d5:46:43:fe:d4:63:ee:1b:fb:8b:10:e6:c9:
e2:37:9b:f0:c8:3b:f9:4f:e9:b7:75:d9:ce:a3:81:30:ac:93:
f8:87:7c:93:7f:cc:9e:6d:c7:ce:46:42:8d:fd:2f:e7:32:9f:
ee:73:b8:f7:8e:8b:10:a1:84:48:6a:7b:ec:7a:a7:e7:a2:50:
4a:3d:a5:e9:7b:0f:58:61:c6:7d:b3:59:33:f6:ec:da:e3:1d:
f9:e4:56:58:65:f8:ba:20:4d:d5:71:23:45:98:44:b8:aa:93:
a3:04:aa:dd:94:57:9d:b8:2d:0b:d9:f1:f6:87:d2:d9:1a:7d:
fd:f7:07:58:2a:60:d3:ae:6b:b1:dd:a1:c8:52:ab:80:f4:73:
55:26:58:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org