Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LoqT-_11qouBYQGDhy7xuLfX0xw.roa
File: LoqT-_11qouBYQGDhy7xuLfX0xw.roa (raw, json)
Hash identifier: pxXBmgtvkIN6S4OldQPw4HKs1f3csW6llHA1JpJHy1Q=
Subject key identifier: 2E:8A:93:FB:FD:75:AA:8B:81:61:01:83:87:2E:F1:B8:B7:D7:D3:1C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1EAC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LoqT-_11qouBYQGDhy7xuLfX0xw.roa
Signing time: Fri 01 Sep 2023 10:16:20 +0000
ROA not before: Fri 01 Sep 2023 10:16:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 122.100.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7852 (0x1eac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2E8A93FBFD75AA8B81610183872EF1B8B7D7D31C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:e3:45:cb:9f:68:74:a4:b5:6f:f2:25:7f:
4c:f5:a7:a7:ae:b4:55:de:05:f6:32:df:02:fd:38:
3b:a9:18:00:7c:d9:ce:16:40:e1:d2:61:90:a9:3a:
f7:82:d9:c1:23:a8:1d:de:2f:c5:63:9c:78:33:3e:
aa:10:9f:56:8b:1f:11:52:36:c1:46:34:ff:db:47:
95:89:77:31:8e:5e:ff:b9:6a:c2:92:21:e6:f3:13:
32:30:17:aa:68:68:64:64:fe:dc:b1:7a:c9:76:20:
73:51:fb:d3:a6:ab:bc:2a:b8:f6:4b:91:b0:ee:15:
7d:2f:b2:f5:06:10:e8:71:c7:80:24:2e:d1:87:4f:
aa:aa:74:1c:9e:42:65:cb:ab:f8:b0:a6:be:68:a8:
34:8c:59:61:b9:35:85:b1:e3:a0:61:90:2b:49:9d:
2b:dc:69:11:d5:78:3d:aa:ee:ed:ec:d9:6b:c3:e0:
d2:d7:70:06:2b:42:48:06:4b:d7:9d:71:db:73:46:
c3:86:95:d7:fe:a5:08:c1:81:61:a0:16:9c:36:0c:
79:e6:e7:ca:7b:a1:11:2b:a7:42:e9:5e:ec:b0:c2:
9e:65:3d:80:de:d0:38:af:89:97:28:e5:3b:b4:9c:
81:0d:62:ff:27:66:05:e1:47:c3:cb:57:6f:27:7a:
74:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8A:93:FB:FD:75:AA:8B:81:61:01:83:87:2E:F1:B8:B7:D7:D3:1C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LoqT-_11qouBYQGDhy7xuLfX0xw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.112.0/21
Signature Algorithm: sha256WithRSAEncryption
52:54:21:9c:ba:78:e2:77:48:3d:5f:13:a9:9f:b4:ea:3a:5d:
cb:32:d9:75:99:d1:7b:8c:04:39:8e:d1:5a:1c:12:dd:27:a9:
cd:a4:ee:39:8e:a1:a9:b6:60:45:02:9c:e3:bf:c7:b5:6e:32:
ae:e8:d1:72:7d:b1:5f:07:d6:f8:b1:54:1f:ab:ce:b2:e1:ea:
05:e5:a5:af:56:ad:d4:be:f2:e0:ad:06:ec:d8:9c:b1:b0:f2:
a2:ad:f9:e4:9e:57:8b:2e:a2:ef:7e:95:97:03:15:9f:57:dc:
c2:7a:0e:e3:bf:a1:01:33:93:4e:5a:42:2a:63:aa:cd:25:35:
d7:05:02:5a:39:54:4a:e4:49:6e:db:6f:d4:45:1d:a0:c2:8a:
bb:95:32:c8:3c:49:e1:4b:fd:95:a1:b9:fd:2d:19:f5:95:19:
10:b1:b4:a4:9c:d2:3f:1f:65:b6:9d:95:3f:98:09:b1:67:d8:
ec:68:b1:55:c0:f3:5d:4a:29:1e:b3:91:ac:69:a0:a5:0f:2c:
65:d2:17:40:44:97:9e:3a:3c:00:ba:14:9b:fe:0e:b0:35:de:
f4:5b:22:4d:01:f4:ec:ab:0e:1b:7d:b4:31:4e:da:57:6f:e7:
04:7b:3c:56:00:aa:fa:5e:f6:25:1e:77:38:70:d2:22:90:99:
fd:63:3a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org