Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Nuke4b_nT-C7saPRBd-Jkgpfbko.roa
File: Nuke4b_nT-C7saPRBd-Jkgpfbko.roa (raw, json)
Hash identifier: B+D1uQIICIEVlhuH4NNE2tndDzi9E2GdvBXxUojRbBA=
Subject key identifier: 36:E9:1E:E1:BF:E7:4F:E0:BB:B1:A3:D1:05:DF:89:92:0A:5F:6E:4A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E22
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Nuke4b_nT-C7saPRBd-Jkgpfbko.roa
Signing time: Fri 01 Sep 2023 10:15:43 +0000
ROA not before: Fri 01 Sep 2023 10:15:43 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7714 (0x1e22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:43 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=36E91EE1BFE74FE0BBB1A3D105DF89920A5F6E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:21:5d:1c:1c:46:8f:fa:1f:a9:e1:ed:88:
37:54:25:27:7b:84:b1:5e:4d:1b:e9:26:3b:43:34:
1d:62:27:4f:49:ee:4d:cb:7b:68:4a:fc:a5:5c:9a:
63:0e:5b:07:09:6a:5b:d2:b4:8c:0a:8c:d4:e6:06:
3a:80:c9:00:8f:15:e7:a6:66:5b:45:c6:15:af:ed:
8e:c3:2d:69:c4:4f:b1:97:bd:0a:39:8f:22:2f:01:
e5:71:b5:e8:0e:31:b0:b0:09:d8:74:4e:05:27:f0:
26:c8:c9:44:95:88:19:f7:d5:5e:94:8b:6f:3c:47:
5d:28:54:8e:00:bb:a9:58:e9:31:42:e5:35:72:d0:
8e:45:cb:81:b9:24:b9:84:4f:91:34:31:99:31:76:
7e:63:9e:cb:c6:e2:1c:f4:00:89:9f:21:ec:03:4d:
bc:33:fb:e0:32:e4:6e:d3:61:67:8a:9d:03:a0:1c:
ce:81:55:a5:17:2c:a7:63:0b:f0:a5:36:f0:71:5d:
d3:33:f4:59:c1:b3:72:a5:51:d6:77:87:13:37:0f:
52:41:bf:3f:68:98:8e:17:6b:39:6f:25:fc:be:d7:
b8:4e:f9:c9:20:55:83:90:dc:30:08:e2:9f:d3:cb:
b6:17:95:31:4f:19:c1:02:71:36:07:37:56:b0:86:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E9:1E:E1:BF:E7:4F:E0:BB:B1:A3:D1:05:DF:89:92:0A:5F:6E:4A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Nuke4b_nT-C7saPRBd-Jkgpfbko.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.200.0/21
Signature Algorithm: sha256WithRSAEncryption
50:4c:87:64:09:49:6c:97:f2:ca:c1:f4:a4:dc:d2:e9:55:0e:
27:c3:5e:00:a3:3d:5d:e2:66:40:32:17:62:4c:9c:c2:34:af:
2d:d4:a0:4c:f2:af:b6:a2:14:2f:64:be:0b:23:79:49:e6:9e:
26:83:f7:15:5d:74:bf:75:0f:8b:8f:d4:4f:f8:d7:42:db:39:
99:02:83:e9:6c:d6:14:ee:c5:b7:ed:58:c1:19:3c:f4:41:89:
31:ca:ed:95:05:71:15:bd:bd:52:8e:f6:4d:9e:de:e1:0e:7b:
c2:35:dc:39:33:0f:d7:42:9c:d2:37:a9:f5:f1:4b:0f:e0:1d:
66:56:0b:25:23:27:68:fa:21:60:ce:b3:cd:47:4f:18:4d:25:
1f:7c:8f:be:e4:20:92:b6:24:21:41:45:82:ed:e5:58:79:df:
a6:19:99:6f:1c:8d:7d:3b:de:06:2e:2e:9a:63:14:07:47:60:
48:78:bb:2a:4b:26:f2:17:68:5a:ee:b0:e6:e4:03:72:c2:a3:
9f:f1:b7:7c:98:4a:26:3e:97:6b:31:bc:00:3b:44:30:7c:f1:
0f:ff:95:7e:33:12:1b:34:e1:ed:b0:5c:14:c1:e3:9c:fb:bf:
57:2b:a2:90:67:be:6b:a9:28:d6:71:62:df:74:6c:26:a0:57:
40:e3:c8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org