Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LsNBX-BMOqOiRxP3LW7198SOYxc.roa
File: LsNBX-BMOqOiRxP3LW7198SOYxc.roa (raw, json)
Hash identifier: uPhbJbpB4QXt3P7T3/jRqtGvU44T1aqt0Gg0V37NxoI=
Subject key identifier: 2E:C3:41:5F:E0:4C:3A:A3:A2:47:13:F7:2D:6E:F5:F7:C4:8E:63:17
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DD3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LsNBX-BMOqOiRxP3LW7198SOYxc.roa
Signing time: Fri 01 Sep 2023 10:15:20 +0000
ROA not before: Fri 01 Sep 2023 10:15:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 119.77.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7635 (0x1dd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2EC3415FE04C3AA3A24713F72D6EF5F7C48E6317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:ab:41:8b:ef:25:c9:75:c1:25:2c:89:45:
af:18:aa:ce:65:ba:87:e7:14:c5:a5:29:ca:60:88:
3c:37:b8:28:f8:7b:00:f5:88:0a:8d:dd:8f:eb:f8:
59:7f:47:28:72:fc:ce:31:7c:84:41:18:29:ff:7a:
91:ae:b7:38:ef:06:26:5d:1d:5e:79:69:8f:30:26:
f6:96:71:8f:3f:45:55:b4:81:a9:fd:31:14:4d:76:
f2:c2:f6:a5:0b:72:e8:f7:e6:3c:48:dc:52:db:dc:
fa:49:d6:b0:39:02:28:60:d9:35:a2:d4:e3:88:44:
9b:9f:d2:e0:41:ae:fb:58:de:98:fe:e2:c6:5d:00:
2d:0d:0c:e4:fa:b5:58:e3:f0:d9:d2:0d:cf:99:9a:
90:f1:26:92:1c:d4:f3:9e:80:df:41:79:b6:ae:bf:
8b:b7:8a:88:bd:f7:1f:2d:bb:b2:ff:0e:e8:cb:b3:
80:7e:fb:33:72:79:47:51:a9:23:c6:a1:9b:5c:1d:
7e:80:ff:79:ea:0f:e6:8d:a6:66:d8:09:d7:92:a0:
d7:a2:bc:fd:68:21:71:35:48:85:dc:23:14:fc:95:
a9:7f:33:18:31:03:80:ee:d4:c5:cc:c5:00:96:0b:
97:c4:8b:68:f1:bc:c8:14:a4:ba:73:76:21:32:df:
ac:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C3:41:5F:E0:4C:3A:A3:A2:47:13:F7:2D:6E:F5:F7:C4:8E:63:17
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LsNBX-BMOqOiRxP3LW7198SOYxc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.224.0/19
Signature Algorithm: sha256WithRSAEncryption
9e:5c:9a:4e:1b:ea:9f:62:30:74:72:60:3a:51:3c:9a:de:25:
1d:63:c5:12:0a:91:3a:de:1b:da:66:0c:42:bf:8d:a8:0c:9a:
7f:b5:e3:cc:07:06:2b:c2:51:3b:0b:0c:e1:8c:fb:b2:82:63:
7a:fc:73:1a:43:a4:f7:ac:88:3a:9c:fa:f9:93:6e:55:28:d5:
ec:e8:ed:84:d6:0c:92:72:39:4b:46:6d:7b:0d:b2:bf:85:7e:
43:48:b3:a0:e4:36:6b:a5:82:5f:a3:e9:8e:e8:3f:f0:7b:1d:
27:56:3a:fa:ca:fd:3a:26:22:55:f2:e2:d8:61:67:ab:f2:fc:
6b:82:b2:bb:76:bb:42:dd:52:86:86:5f:ff:dc:a9:66:bc:bc:
eb:bb:f6:2d:d3:f8:19:32:5d:ed:6b:a6:17:9e:b2:3c:04:d7:
e4:79:22:fc:8f:60:95:3c:02:55:47:60:5b:40:44:38:5f:ad:
20:2c:8c:04:4e:4a:db:2b:94:1b:9f:71:56:d2:9a:9f:46:60:
6c:f6:fd:b7:eb:ab:ea:38:be:93:64:87:14:f2:d2:04:cd:2a:
af:36:23:4f:b9:51:87:d7:df:97:89:3a:fb:32:79:20:d7:ea:
10:24:6e:a2:70:5f:08:23:d1:8f:a4:df:d8:a4:a1:bf:c1:5f:
81:34:1f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org