Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Pm3jvDLnW3m5vY7oCy9RQuXxJW0.roa
File: Pm3jvDLnW3m5vY7oCy9RQuXxJW0.roa (raw, json)
Hash identifier: 497FSDltTmGFCz0pfRJhf3igxUSlb6jPMiB+GJ6Xous=
Subject key identifier: 3E:6D:E3:BC:32:E7:5B:79:B9:BD:8E:E8:0B:2F:51:42:E5:F1:25:6D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1EB0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Pm3jvDLnW3m5vY7oCy9RQuXxJW0.roa
Signing time: Fri 01 Sep 2023 10:16:21 +0000
ROA not before: Fri 01 Sep 2023 10:16:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7856 (0x1eb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3E6DE3BC32E75B79B9BD8EE80B2F5142E5F1256D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:03:e7:37:cc:79:25:07:13:29:f2:6d:9e:
23:b7:c5:a1:a3:75:ef:63:99:3f:2e:68:8c:ce:fd:
91:7b:f3:be:a3:b4:8f:64:5d:f8:55:3f:4e:97:a4:
3f:01:81:25:d4:04:73:cd:f3:38:3d:3d:69:77:bf:
2c:f3:18:22:a8:5c:5b:f1:ca:4c:25:78:99:3d:52:
e5:69:f9:34:a0:d8:af:e9:69:80:dd:a8:e1:da:9a:
b9:0f:db:b1:33:78:56:19:87:dd:60:89:19:d2:fb:
64:26:46:48:0e:fc:1b:88:8f:94:53:5d:92:9f:13:
59:1e:e8:61:52:97:7d:62:0a:f4:6e:94:12:3e:2e:
be:46:97:95:18:7b:ff:72:2c:45:98:11:0f:97:1d:
bb:44:9d:f3:f1:d3:50:dd:f8:58:6f:49:85:39:c6:
c0:39:c7:84:2d:bf:1b:f8:8e:cc:e4:90:ab:c6:3e:
2f:3b:7d:c3:92:41:c9:c6:2f:9a:81:00:b0:7f:9d:
de:2b:25:cb:10:e4:ee:74:11:54:16:f2:f5:23:33:
0c:9e:93:ec:6a:d2:a0:14:45:c9:a0:88:25:27:cd:
ff:0f:82:47:f0:3e:f4:e8:72:31:df:b7:7a:06:11:
e1:68:4c:66:86:f6:0c:49:cb:ce:5c:48:55:96:f6:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6D:E3:BC:32:E7:5B:79:B9:BD:8E:E8:0B:2F:51:42:E5:F1:25:6D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Pm3jvDLnW3m5vY7oCy9RQuXxJW0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.168.0/21
Signature Algorithm: sha256WithRSAEncryption
23:59:6c:3c:18:13:a6:d3:09:49:6f:5e:a7:17:80:83:1c:28:
37:46:84:72:6c:d3:b7:34:c4:93:84:43:46:42:85:28:78:37:
a9:93:4b:0a:0f:a1:70:ef:1c:e9:f5:47:3d:14:0e:9f:33:46:
43:00:46:94:c1:63:f7:bf:b4:d1:24:b4:58:c8:12:20:56:09:
05:54:75:41:21:48:72:3f:66:7e:51:f7:aa:ec:cd:87:f3:91:
5b:fb:ec:f2:fc:38:84:c7:42:1d:0b:2d:ff:2d:01:fc:10:45:
62:71:68:4f:7b:b4:77:2c:4d:a1:b1:7f:89:33:88:ac:85:c1:
9e:8d:c1:bc:4d:87:d0:15:0e:d4:9b:d1:16:88:2a:67:a1:43:
fb:e5:cf:f0:20:83:c8:85:2b:ba:97:d2:4e:e8:ee:45:47:6d:
3a:7a:b7:ea:b3:0b:46:62:ab:c4:14:15:d6:f5:9a:57:5e:2a:
25:74:c8:de:10:40:e8:50:cc:27:0c:29:f6:a9:0f:76:1a:f1:
1d:54:d7:d5:65:49:11:2d:6d:b9:2a:c0:1f:57:52:b9:5f:ee:
89:e1:17:9b:a4:25:ff:d8:07:39:d9:02:15:08:27:1d:1e:b9:
88:b0:94:2f:49:82:73:a4:48:9d:80:b3:93:20:19:b9:ab:b0:
61:36:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org