Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JfNR9cYld7zq4eEzkPOsqNBT8VU.roa
File: JfNR9cYld7zq4eEzkPOsqNBT8VU.roa (raw, json)
Hash identifier: dAUO5yy3cDhp70T+dy4FZME75KZdsKKGJJg8t2qT4hw=
Subject key identifier: 25:F3:51:F5:C6:25:77:BC:EA:E1:E1:33:90:F3:AC:A8:D0:53:F1:55
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D59
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JfNR9cYld7zq4eEzkPOsqNBT8VU.roa
Signing time: Fri 01 Sep 2023 10:14:42 +0000
ROA not before: Fri 01 Sep 2023 10:14:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 61.60.215.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7513 (0x1d59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=25F351F5C62577BCEAE1E13390F3ACA8D053F155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:71:24:87:58:63:4b:fd:d6:e9:98:12:83:
06:f6:56:ad:f1:d3:4f:d2:28:f9:67:e9:fd:85:5e:
53:81:43:62:63:c7:a0:a8:26:f0:bb:2a:f2:37:5e:
ad:95:36:a0:ea:14:73:25:db:dd:08:af:3f:19:7b:
63:e7:1f:01:43:c2:6d:dd:dc:95:e2:bd:f9:53:2d:
c9:0b:35:88:9f:a5:16:6d:76:8a:77:b6:cd:78:9d:
40:da:ff:7a:3c:c4:3c:d7:06:2a:e1:3a:2f:d4:16:
d6:23:f0:e7:a2:c1:b0:7c:e0:21:b5:ba:f0:cc:6c:
23:7b:34:27:2f:4e:15:72:3c:03:ba:61:28:56:71:
d2:9e:4b:aa:fe:10:fb:12:07:5e:2e:14:16:cc:ae:
39:4e:a1:55:7c:be:0b:21:0b:29:48:c4:2b:11:2f:
b5:8c:4c:7b:b2:56:c0:25:1a:94:b5:60:82:b1:3a:
3c:33:62:70:1a:45:88:c9:2f:8b:96:d7:9d:d4:87:
40:d0:f6:a6:54:ea:8d:83:49:2a:b7:cd:2e:c3:64:
8d:3f:9f:c5:43:0d:85:fc:9c:5f:4f:ea:76:f2:e9:
04:b7:58:8b:68:71:66:94:59:62:0c:62:8e:e0:e4:
a7:b2:30:e4:c8:3a:2b:2f:44:b1:df:b5:52:df:08:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F3:51:F5:C6:25:77:BC:EA:E1:E1:33:90:F3:AC:A8:D0:53:F1:55
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JfNR9cYld7zq4eEzkPOsqNBT8VU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.215.128/25
Signature Algorithm: sha256WithRSAEncryption
4f:5c:58:15:8f:2d:60:bc:87:a1:db:c1:57:45:27:4f:a3:c4:
c0:70:18:84:84:74:86:1e:bc:6f:35:e4:35:66:47:4b:2a:ae:
ac:ba:28:f2:34:aa:23:ad:f9:ab:db:3b:39:a1:90:63:4b:1d:
69:6f:67:cb:1b:c0:ee:40:7f:d3:28:8c:16:46:ba:49:fa:f6:
66:60:e5:df:30:41:10:e9:78:4e:f5:14:15:a3:7f:6a:5e:fa:
65:e5:e7:55:a3:f5:89:93:7a:0e:b3:2f:90:90:a7:29:96:6e:
81:b5:60:89:78:a1:c5:db:0d:4e:5e:23:13:e6:76:1a:6b:b9:
56:20:b6:86:86:9f:8a:f0:bc:2a:d9:8d:ad:4c:b9:2a:57:12:
e4:ad:7d:e7:dd:fe:0c:7b:68:0d:be:d6:14:b5:1d:61:ad:96:
95:7d:60:74:a4:83:f5:95:12:28:c4:92:86:ae:5f:6a:c6:c6:
0c:cf:07:8b:b6:24:33:1c:cb:b8:eb:9a:6b:19:3c:4b:86:dd:
e6:28:eb:8b:cf:b7:80:1c:27:4b:ff:3d:81:ee:08:e2:50:ae:
0b:86:ea:e4:ac:22:30:35:08:4a:3d:51:2b:69:62:df:b7:ee:
f7:be:b3:d3:06:10:95:3d:7e:08:f9:55:79:0f:b7:ba:94:2e:
95:f2:10:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org