Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PMgznuejo1gvSNhXQPFrf63vF5c.roa
File: PMgznuejo1gvSNhXQPFrf63vF5c.roa (raw, json)
Hash identifier: gQmCflCsbndIxVDNpmT3/I3+0irRt5GxbUdmX+iFrNM=
Subject key identifier: 3C:C8:33:9E:E7:A3:A3:58:2F:48:D8:57:40:F1:6B:7F:AD:EF:17:97
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E92
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PMgznuejo1gvSNhXQPFrf63vF5c.roa
Signing time: Fri 01 Sep 2023 10:16:13 +0000
ROA not before: Fri 01 Sep 2023 10:16:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 122.100.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7826 (0x1e92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3CC8339EE7A3A3582F48D85740F16B7FADEF1797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:d8:24:80:af:64:94:87:a7:23:21:1d:78:
e9:29:d9:7d:04:40:e1:d6:d2:55:ae:c0:52:a4:64:
80:8a:8a:ae:a3:a0:00:aa:21:e6:b5:30:88:0d:41:
75:79:e2:48:19:a3:2e:35:5c:9a:5f:83:ef:78:68:
14:81:d7:4b:89:ff:80:e5:38:e7:5e:7c:79:d0:2a:
c7:d2:24:cc:8d:24:b9:79:dd:14:f3:7d:c1:fd:be:
53:5c:85:77:aa:4b:38:d4:f5:4d:48:3f:b4:f7:f0:
b9:cc:87:b4:37:a5:7b:9f:d1:7c:9e:bf:c4:f5:3b:
75:dd:79:63:9c:2c:33:f3:37:c3:9e:89:27:b4:ab:
27:54:93:3f:e9:ac:e6:42:17:6d:8f:26:55:1e:ef:
5d:cb:de:bc:46:99:f7:d0:8f:d9:59:91:f2:83:44:
e9:ae:5e:90:6e:d3:57:bc:92:ef:09:d7:eb:57:a2:
9f:1d:30:02:27:a7:80:4e:4e:30:e7:94:97:77:50:
88:5e:99:8b:84:35:49:5f:95:c5:b7:6f:fa:6d:f0:
c7:08:ec:a3:6c:23:bd:ca:a1:82:00:d2:c9:77:16:
39:79:b9:fa:41:23:ca:17:b0:aa:90:27:19:63:7d:
84:fe:6a:b0:31:d9:59:5e:af:ba:34:e6:25:f3:f9:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C8:33:9E:E7:A3:A3:58:2F:48:D8:57:40:F1:6B:7F:AD:EF:17:97
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PMgznuejo1gvSNhXQPFrf63vF5c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.96.0/21
Signature Algorithm: sha256WithRSAEncryption
70:54:cd:75:14:d2:67:07:16:47:83:4d:86:eb:34:2c:d1:8f:
ca:70:e1:6f:94:58:26:75:a3:86:7c:c3:46:e3:d1:17:13:80:
07:56:b7:15:a5:be:23:00:6a:98:00:40:a7:cc:96:83:f9:4e:
79:ca:1b:46:c5:0c:40:09:d9:4d:bc:17:a6:3c:b4:d5:1c:6c:
15:06:00:9a:f8:06:8b:77:c7:47:60:a8:03:7a:45:86:7d:b9:
6f:f0:32:41:68:c9:2a:b3:3a:45:5f:fb:93:15:78:c2:aa:f9:
1f:d9:91:ba:f3:20:23:02:4d:6a:07:3d:e3:8f:8b:a4:f7:87:
95:f9:ab:34:55:90:de:ac:76:5b:4b:52:eb:87:36:31:5a:31:
37:67:bc:48:fd:44:bd:60:d2:e4:a8:05:3b:1a:da:6b:3f:f7:
09:07:56:29:d6:3d:83:be:6d:76:42:4c:97:92:fc:2c:c9:97:
bb:29:c8:ce:f5:88:3d:94:e7:ce:7e:3c:cc:88:40:f0:ae:b8:
ad:19:45:1f:e7:a6:be:9d:fa:ee:59:93:9e:f1:90:46:3c:ea:
fe:ae:70:d3:fc:be:32:7a:78:98:fc:9a:bd:bb:e2:cb:d1:d8:
ae:ac:8a:cc:77:f8:02:7a:66:89:b9:8a:47:81:ea:9a:3c:03:
8f:8a:56:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org