Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QGdp3RMitlT7lc--YeXv2QFPSMA.roa
File: QGdp3RMitlT7lc--YeXv2QFPSMA.roa (raw, json)
Hash identifier: k+XnYy7rxbeG9b79LG+654UCBYAW6wVhlkycCLFVUUg=
Subject key identifier: 40:67:69:DD:13:22:B6:54:FB:95:CF:BE:61:E5:EF:D9:01:4F:48:C0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E28
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QGdp3RMitlT7lc--YeXv2QFPSMA.roa
Signing time: Fri 01 Sep 2023 10:15:44 +0000
ROA not before: Fri 01 Sep 2023 10:15:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7720 (0x1e28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=406769DD1322B654FB95CFBE61E5EFD9014F48C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:ed:15:04:bd:63:9f:fe:61:9b:9d:ee:7b:
8d:b5:c0:f6:c4:aa:4d:36:4e:78:91:e5:a7:be:bc:
80:8b:81:c7:44:19:6f:88:16:1f:bb:66:c7:a0:cd:
7c:47:7d:10:3c:45:57:bd:cf:39:41:2b:2b:24:9c:
bd:bc:af:63:d7:ae:52:0e:bd:a2:cb:67:fc:41:90:
f9:89:9d:1e:e1:6c:70:84:da:84:ff:d8:ff:c4:bb:
7d:ff:48:79:98:55:e9:14:8e:3b:45:ec:ce:45:06:
ad:de:e3:7a:b2:e5:ca:2f:45:5f:50:59:53:f3:6f:
00:92:3c:2e:1a:76:bf:c3:c6:84:12:f4:ca:4c:5d:
6d:69:dc:00:59:7f:65:70:8f:1c:8b:1d:94:b5:41:
35:87:23:56:c1:75:c4:28:38:18:a1:1a:a9:85:bd:
b8:4b:12:21:f6:65:a2:75:1f:ce:7d:3b:54:d4:fa:
81:ae:ed:77:fa:71:79:5a:72:d5:62:c8:27:bf:af:
12:c8:40:53:4a:a4:87:9c:97:d9:58:9e:cc:90:23:
5a:1c:78:e7:71:25:08:a1:e1:32:1e:1d:78:b6:fe:
11:a3:96:21:30:c9:dd:da:d4:82:75:6e:5c:fb:15:
ab:1f:f0:4d:d4:27:37:ad:38:c8:31:2b:90:82:b5:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:67:69:DD:13:22:B6:54:FB:95:CF:BE:61:E5:EF:D9:01:4F:48:C0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QGdp3RMitlT7lc--YeXv2QFPSMA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.168.0/22
Signature Algorithm: sha256WithRSAEncryption
77:03:43:ae:0a:23:c8:1d:c8:e6:6d:3f:88:2d:cb:8c:b3:55:
aa:ce:68:3a:51:4b:31:c2:93:2c:c7:31:e6:27:b6:97:3c:6a:
e7:57:64:2a:d2:fd:6d:a4:bb:b1:2a:d7:84:82:7c:bd:48:70:
76:59:3d:7b:51:8f:cc:67:6a:a1:67:f4:08:ae:f9:f0:c9:58:
34:70:42:89:88:cb:c6:3e:bb:a2:60:73:5e:13:e5:aa:e7:6b:
25:0b:72:31:06:8b:aa:e1:55:83:34:70:b5:cb:c8:27:65:b1:
cc:25:dd:25:d0:8b:b1:dc:90:66:2d:c0:41:33:16:29:e0:eb:
08:0a:ff:62:94:a7:76:62:e4:74:8b:31:c9:ee:7c:5a:dc:56:
59:63:5a:81:1b:ba:a5:0c:e5:54:ec:42:1a:23:e3:18:09:7a:
cf:88:8c:27:80:e1:d9:2b:72:2b:6e:5b:ac:07:2e:dd:57:d3:
9e:2f:eb:3e:7a:d2:b4:24:f8:e3:5b:d4:3b:79:20:49:4c:6e:
ed:02:b6:1f:d7:4a:b7:0c:61:15:6c:0b:37:c3:64:9f:7c:d3:
28:0e:bf:86:70:87:18:d2:fd:66:df:a9:9d:a9:b4:7f:28:33:
67:25:30:5c:12:af:fb:2b:da:8d:84:05:4b:94:66:1f:be:4e:
93:11:89:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org