Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JG3kU5JAp3ROHPGMSavxg6Uu_fU.roa
File: JG3kU5JAp3ROHPGMSavxg6Uu_fU.roa (raw, json)
Hash identifier: PFHNBmWMULSL3ib++aIRSGPr7/B4ybLfQhPeaDfKhAk=
Subject key identifier: 24:6D:E4:53:92:40:A7:74:4E:1C:F1:8C:49:AB:F1:83:A5:2E:FD:F5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1EB3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JG3kU5JAp3ROHPGMSavxg6Uu_fU.roa
Signing time: Fri 01 Sep 2023 10:16:21 +0000
ROA not before: Fri 01 Sep 2023 10:16:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 124.6.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7859 (0x1eb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=246DE4539240A7744E1CF18C49ABF183A52EFDF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:8b:d8:a7:22:f4:3c:8f:fa:c1:7e:4f:fc:
3c:9c:0b:9c:75:c6:44:4b:91:4c:43:2e:0d:6d:aa:
f8:37:ce:3e:be:94:5e:f4:d8:26:de:61:ae:09:75:
59:01:71:74:1f:5e:0b:2d:48:25:b1:9d:85:48:8b:
67:3c:fc:99:aa:10:4b:b5:76:63:f9:9c:fb:ab:01:
ef:16:8c:56:2b:03:1c:44:c5:b6:9d:7f:3c:0a:df:
b5:b0:20:da:ca:08:d3:21:a9:9a:c6:e2:ac:71:25:
a0:f8:33:10:c8:76:53:b2:2f:c0:41:55:fa:24:53:
69:46:ce:70:56:af:5c:78:42:45:41:bf:2d:66:f0:
2e:ef:c6:39:d6:25:d1:45:90:a7:71:80:56:d3:6a:
68:0b:f8:0f:bc:6b:d2:3e:bc:66:1c:51:62:2c:c5:
9f:ee:46:da:0e:37:6b:76:5e:fc:a9:b0:f7:59:63:
c9:83:b3:c1:dc:af:8e:9d:03:46:f9:0e:49:20:d0:
d4:55:26:4a:e6:00:86:86:e3:67:16:b7:c5:3d:48:
2b:78:17:67:af:66:33:13:b5:9b:c1:13:34:00:10:
4d:0b:7e:3b:29:e7:4f:03:5a:df:44:39:77:73:5b:
2e:1e:cf:4a:a3:42:d2:ae:3b:ae:e6:16:f6:d0:c2:
ed:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6D:E4:53:92:40:A7:74:4E:1C:F1:8C:49:AB:F1:83:A5:2E:FD:F5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JG3kU5JAp3ROHPGMSavxg6Uu_fU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:0a:29:39:29:b5:d4:e6:c8:1a:cd:14:a5:8f:8f:13:8b:e2:
9b:1d:a2:f6:69:f7:ab:45:a3:2c:5f:35:ca:77:ae:b7:1b:80:
4b:1c:db:83:c4:d4:ef:b0:1c:af:85:74:57:bc:0f:ca:d7:68:
b5:23:12:0f:e2:6f:e4:4b:50:f9:78:f6:ab:f7:08:f5:bc:09:
98:44:53:36:dc:35:21:ae:15:20:80:d9:84:8c:4b:5f:cf:2d:
d3:1b:87:bb:ff:c4:a2:e3:0c:b8:f0:ce:7d:83:a8:8c:8d:8e:
d4:27:40:b3:f9:52:65:47:a0:1d:54:3c:14:73:b3:7f:4d:41:
60:02:81:34:fa:dc:6d:a2:99:f8:ea:08:76:9d:f8:29:cd:39:
c2:49:81:6e:48:f4:f4:0f:3f:fc:5c:be:25:75:b7:91:b4:05:
dc:9a:5c:3c:37:9f:b7:4b:3b:5f:b6:4e:d8:9f:3b:01:f8:9f:
c2:eb:3a:9d:ba:11:41:a0:85:c4:4d:cd:bf:05:3e:34:c8:4a:
9f:36:ae:90:1a:c0:65:16:54:74:3a:83:84:04:4b:c9:51:ca:
77:07:2d:30:76:94:d9:aa:17:22:74:aa:8e:e3:1d:e6:e3:3d:
16:96:93:5f:ad:12:9d:b5:3b:25:e9:3d:9a:e7:e4:36:f6:d8:
b6:e4:6e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org