Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Kn4ty9crMYOpnRDXoLaO9y3wh80.roa
File: Kn4ty9crMYOpnRDXoLaO9y3wh80.roa (raw, json)
Hash identifier: /q1zqRk+KLXVbMik/0LjKbyCoMK3msmkJ9etLPMnHyA=
Subject key identifier: 2A:7E:2D:CB:D7:2B:31:83:A9:9D:10:D7:A0:B6:8E:F7:2D:F0:87:CD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DE8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Kn4ty9crMYOpnRDXoLaO9y3wh80.roa
Signing time: Fri 01 Sep 2023 10:15:27 +0000
ROA not before: Fri 01 Sep 2023 10:15:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 123.0.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7656 (0x1de8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2A7E2DCBD72B3183A99D10D7A0B68EF72DF087CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:96:a0:93:2c:52:1a:a2:20:a7:a4:b6:9c:
42:15:39:d7:86:90:57:2d:56:b8:a2:75:4c:e5:a1:
82:70:5b:a4:d7:43:a8:a3:46:2d:72:5c:cb:47:88:
38:77:65:df:8a:06:8f:60:7c:be:dc:41:b7:54:32:
aa:f6:7e:e0:8e:87:82:fe:87:26:dd:16:2d:50:f4:
00:1c:8c:a7:c2:fb:4e:77:0d:1d:3f:16:d0:f1:36:
9c:e6:f2:a2:f0:90:2e:85:31:ce:92:d6:a4:e0:e8:
1a:df:6b:c4:89:e0:3c:3c:6e:c8:6a:08:c9:bb:72:
db:02:c6:30:24:da:91:60:fe:10:bd:42:b2:59:3c:
85:23:16:69:14:43:df:71:28:be:72:37:f7:69:0d:
db:63:f4:52:d1:c2:85:b0:20:c8:5c:02:b1:11:f8:
00:12:37:aa:99:65:82:18:ce:97:d3:c4:d7:4a:68:
16:26:19:ae:89:e1:4c:b8:ad:9c:84:19:4e:6d:cb:
f2:0b:de:4f:9e:01:93:a6:ba:c2:1d:cd:f8:cf:7f:
cf:07:14:05:06:8a:76:cb:dd:c1:d5:37:e5:08:c0:
7d:b6:1e:48:0d:c3:47:04:80:8f:c1:0d:73:b5:50:
a4:89:d8:43:1c:c0:5c:32:44:48:f6:d6:e9:56:56:
9c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7E:2D:CB:D7:2B:31:83:A9:9D:10:D7:A0:B6:8E:F7:2D:F0:87:CD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Kn4ty9crMYOpnRDXoLaO9y3wh80.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.46.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:80:06:eb:9b:64:a6:99:89:07:b2:96:6b:5f:e0:f7:7b:75:
51:73:9c:ce:d5:d8:60:3d:cf:e6:2b:d6:64:d7:8f:9f:42:0c:
23:80:2c:3a:55:a1:5f:4b:93:a5:1d:e6:db:48:0d:7d:45:7b:
29:50:5c:b1:ca:b5:54:20:a2:85:4f:57:cf:15:5c:ae:6e:c7:
f1:8a:ea:a1:25:f4:f9:66:bf:d0:aa:92:36:43:2c:d2:ad:b3:
8a:75:3d:a6:e8:af:66:f6:94:fd:1f:42:c9:47:b5:b4:6d:ef:
7f:64:18:4e:8d:47:fc:f0:31:e0:e0:54:ad:9e:01:83:e2:06:
01:b3:0b:9e:d5:e7:38:81:ab:8e:ab:6b:25:d5:46:41:4a:18:
e6:b1:dc:7b:c2:46:bf:b3:33:9d:13:b4:47:cd:12:48:0a:db:
54:01:44:e6:5b:33:e3:f6:5e:de:70:8f:61:dc:a2:62:cb:34:
ac:5e:54:79:4d:88:b6:7f:b3:30:4d:19:ff:55:a7:de:d8:dc:
e7:3d:6d:82:f4:46:36:0e:47:c2:5d:33:24:49:ce:e4:7f:df:
83:29:9a:d9:81:e8:ac:65:ca:c8:61:eb:8c:9c:bf:c5:a8:80:
98:59:f8:b3:d3:b0:a5:73:90:f5:d7:eb:38:44:08:ba:95:f2:
f9:af:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org