Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J9hXBKWJFzWmnadlZ7MC32hmjD8.roa
File: J9hXBKWJFzWmnadlZ7MC32hmjD8.roa (raw, json)
Hash identifier: kGIFQtvZwJRgHqth9FxQ5wRzvEYY62cCM/UOSFxT6XA=
Subject key identifier: 27:D8:57:04:A5:89:17:35:A6:9D:A7:65:67:B3:02:DF:68:66:8C:3F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D90
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J9hXBKWJFzWmnadlZ7MC32hmjD8.roa
Signing time: Fri 01 Sep 2023 10:15:00 +0000
ROA not before: Fri 01 Sep 2023 10:15:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 211.76.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7568 (0x1d90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:00 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=27D85704A5891735A69DA76567B302DF68668C3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:7a:c6:1d:2a:0b:b3:f4:3d:b3:5b:8b:b4:
c3:7c:11:1a:48:89:aa:8f:9c:07:78:c0:89:ba:f5:
b8:2b:e7:e3:37:81:9e:bf:aa:5d:40:86:42:c6:40:
4c:ee:66:63:81:a3:50:e2:92:8d:7a:d7:be:84:db:
64:22:74:2f:e0:86:ba:f1:55:69:55:e1:88:80:f2:
45:70:aa:83:90:0f:aa:6c:3b:5c:15:81:21:25:76:
3c:a8:90:44:1c:7b:7f:67:6c:e5:92:30:7c:f1:30:
29:f6:40:af:64:64:b6:e8:84:b3:86:ca:36:b3:8a:
a5:58:dd:29:08:8f:19:c3:95:62:98:d7:78:b6:4e:
f8:1d:17:f5:0f:0c:23:f3:2b:a3:f3:0c:48:5f:e1:
f7:07:69:c4:ab:8e:37:e7:2c:b8:a5:1f:90:e2:3c:
72:c9:45:65:e7:e0:70:ec:af:d3:35:22:14:51:0f:
ea:d3:1c:13:27:30:9c:5e:7c:f2:aa:3e:14:60:9c:
c6:14:8b:95:b1:62:88:db:3b:e0:9e:31:43:b0:c7:
b1:5b:c3:7f:d5:df:72:c2:03:24:2f:66:b4:0d:cf:
10:37:d5:f1:23:e4:e9:64:68:d5:93:c6:5e:41:23:
0d:8e:87:9c:2e:3d:26:1e:51:9b:07:b7:49:cf:69:
78:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D8:57:04:A5:89:17:35:A6:9D:A7:65:67:B3:02:DF:68:66:8C:3F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J9hXBKWJFzWmnadlZ7MC32hmjD8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.63.0/24
Signature Algorithm: sha256WithRSAEncryption
09:22:45:ec:81:bc:79:e8:16:c8:15:71:86:c9:fd:90:b2:df:
e3:07:c6:fb:20:ae:f3:b6:5b:4d:ea:6e:e6:04:16:bb:3c:f5:
82:84:c9:22:00:48:0b:21:27:82:8f:4b:e9:fb:79:af:8e:ea:
be:58:a7:6e:94:1d:26:80:8e:3a:74:59:2b:d7:4e:0c:ef:8e:
4b:54:b1:84:bd:47:56:8e:45:13:ce:30:9c:89:55:f3:a4:50:
be:fb:2d:00:de:3f:2e:fe:b2:77:c4:d7:88:82:b1:9e:b9:6b:
59:1b:56:ac:b9:e1:e9:3d:73:d9:1f:38:da:ef:03:aa:a4:a2:
93:63:69:41:c8:5f:29:15:84:ec:90:53:2d:d1:ea:c7:43:e4:
2c:bc:79:74:e9:4e:37:0a:df:d5:f1:e4:ee:eb:b6:ad:29:79:
e8:e3:11:6f:d8:95:52:53:68:ed:0e:d8:5b:34:19:81:c9:fb:
f4:28:7d:3e:a7:60:31:ed:e5:f2:47:e0:00:b2:7d:ce:e7:e4:
79:61:d3:0f:d3:0c:09:73:93:8e:d5:c3:9c:e0:28:95:17:db:
fd:0c:27:0f:03:fb:43:be:b3:e9:d7:73:c0:28:39:4d:34:f7:
9d:34:5d:5f:62:4d:aa:21:7a:20:22:b7:2a:96:6b:04:8b:9d:
7c:24:5f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org