Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N9D_5JKmu5Hl5yyj7RcrRpjYfzw.roa
File: N9D_5JKmu5Hl5yyj7RcrRpjYfzw.roa (raw, json)
Hash identifier: BatJKvq6cJ/c8HWUVNx8JRbUW1NDlVLokEJX4+GUZBo=
Subject key identifier: 37:D0:FF:E4:92:A6:BB:91:E5:E7:2C:A3:ED:17:2B:46:98:D8:7F:3C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E86
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N9D_5JKmu5Hl5yyj7RcrRpjYfzw.roa
Signing time: Fri 01 Sep 2023 10:16:10 +0000
ROA not before: Fri 01 Sep 2023 10:16:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 119.77.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7814 (0x1e86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=37D0FFE492A6BB91E5E72CA3ED172B4698D87F3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:28:ce:19:4e:ce:00:70:86:45:26:3d:e1:9b:
c8:fb:67:59:4c:4e:8a:7f:a3:08:64:ed:31:b9:d2:
66:b9:bd:2e:1b:29:3b:b8:93:b8:8e:e0:11:f7:e5:
d2:fa:57:0d:0a:76:ce:f1:55:01:01:3d:f6:86:1e:
6c:55:2b:b7:41:98:5c:5c:68:5b:09:07:f4:47:97:
a4:92:3d:4b:33:db:b8:7e:9f:f0:b5:ee:15:73:db:
e9:16:9e:c8:32:f6:54:75:eb:07:0b:6a:ed:e5:dc:
72:b1:49:58:e1:e0:fa:fe:d6:06:58:0e:25:3b:42:
3d:b0:68:9a:73:ad:90:86:a5:96:0e:c9:ac:c2:c6:
21:cb:16:90:d0:2a:b3:78:07:84:d3:bd:57:e3:63:
40:ee:33:6e:cf:03:5d:2e:6f:73:21:db:39:b4:c2:
5f:11:bc:41:0e:cc:aa:a5:98:a2:f1:60:7b:0f:8a:
b1:3d:08:6d:ce:a4:ae:dc:76:f9:cd:82:ca:06:6f:
59:27:20:de:56:ab:ce:5c:87:9b:49:a4:96:2b:67:
b8:f1:ca:05:46:90:37:a6:4c:eb:ab:e5:02:1e:e7:
3f:d1:2d:66:5c:07:f0:4b:36:95:aa:15:18:35:47:
4f:b3:8d:ba:93:db:6c:73:9e:34:79:c2:62:a6:85:
e8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D0:FF:E4:92:A6:BB:91:E5:E7:2C:A3:ED:17:2B:46:98:D8:7F:3C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N9D_5JKmu5Hl5yyj7RcrRpjYfzw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.128.0/22
Signature Algorithm: sha256WithRSAEncryption
09:28:52:17:2a:98:e2:36:57:74:c3:48:34:b2:aa:72:8f:8e:
a4:af:c9:30:d7:14:73:09:5b:97:ad:4d:ea:fa:bf:18:b7:17:
91:29:b6:61:f4:10:6c:ff:ba:1e:61:e6:72:98:3d:ac:75:df:
12:96:39:ad:c4:b7:dd:b6:25:4c:8f:77:05:8a:d4:37:6d:ea:
d3:79:ad:88:85:82:80:94:c2:be:dd:26:d7:71:ba:db:d6:ba:
c6:52:8b:2a:d6:fc:6b:df:e9:fd:b4:83:dc:96:27:8e:be:b9:
26:ef:75:ee:70:f7:af:b4:a5:e7:55:cc:86:fb:03:7e:4c:9d:
56:23:9b:96:99:b7:7d:9c:ea:13:80:68:81:08:64:48:5d:36:
70:1a:07:a5:5a:a4:34:c0:fa:4b:d0:22:c8:c3:58:3f:91:95:
85:0c:c8:c9:1e:b9:bf:0a:0c:4b:69:a0:32:ce:9f:9d:83:36:
0e:df:66:58:3d:6b:ef:b6:3e:cb:56:d1:41:f7:64:02:0f:df:
29:bc:60:75:5f:d7:bc:7c:76:1f:d9:d4:09:74:ab:a7:8a:d5:
8d:d1:67:0c:95:a0:a9:ba:20:9f:9d:e7:39:a7:65:b7:bb:59:
eb:07:0a:8c:b0:dc:3c:b5:a4:50:d9:c7:5b:b7:0b:5a:1f:8c:
d7:d1:d6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org