Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QI_AWt_nGMcO84kw1NpUmrHIEm8.roa
File: QI_AWt_nGMcO84kw1NpUmrHIEm8.roa (raw, json)
Hash identifier: rSa9PDgvkNVw6tXqboCcp8Fv/dLO2z34m/5RDOhCs/E=
Subject key identifier: 40:8F:C0:5A:DF:E7:18:C7:0E:F3:89:30:D4:DA:54:9A:B1:C8:12:6F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E85
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QI_AWt_nGMcO84kw1NpUmrHIEm8.roa
Signing time: Fri 01 Sep 2023 10:16:10 +0000
ROA not before: Fri 01 Sep 2023 10:16:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7813 (0x1e85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=408FC05ADFE718C70EF38930D4DA549AB1C8126F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:1e:56:47:7a:e5:d2:c9:da:ff:7f:6a:ff:
b2:85:8e:d6:89:d2:98:09:4b:96:e9:a6:57:96:a3:
13:9f:22:2f:05:9c:c6:3b:32:23:d6:d2:8f:82:61:
25:d3:9d:a3:62:f7:ae:e5:f4:6e:ba:58:78:ff:81:
64:d3:f7:cc:d5:6b:02:d6:8b:e2:36:95:13:f9:de:
8d:e7:1b:2c:94:24:8f:5c:27:cd:12:f7:65:f3:24:
15:4f:ae:62:07:39:d9:bf:6d:3e:82:c6:2c:89:07:
9c:2b:ed:85:1c:8e:80:37:62:e3:d8:da:8c:27:08:
dc:85:f9:ff:a3:ca:32:60:bd:93:40:a9:48:b6:b0:
86:ff:a4:1b:b6:ba:95:7f:5d:b3:9e:d4:94:7b:ac:
a1:0b:50:19:e2:98:97:7c:de:24:5a:89:0f:aa:aa:
a2:09:30:55:26:29:9b:a7:c6:69:8a:ca:b7:5a:1e:
11:af:ca:48:1e:ba:b0:f7:d1:d4:b1:25:5c:53:49:
44:55:58:9a:a5:73:d7:14:77:3c:ad:5d:94:ff:02:
c3:d9:63:ff:34:67:75:54:cf:19:43:97:5f:8e:0e:
bc:7c:de:1a:38:d4:b9:eb:80:11:27:ff:49:6e:58:
07:2a:75:50:54:d2:70:62:fb:19:78:3a:7b:88:48:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8F:C0:5A:DF:E7:18:C7:0E:F3:89:30:D4:DA:54:9A:B1:C8:12:6F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QI_AWt_nGMcO84kw1NpUmrHIEm8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.128.0/21
Signature Algorithm: sha256WithRSAEncryption
00:6d:cd:28:c9:a3:f5:77:15:ce:b1:73:b8:4e:5e:4b:27:8f:
2a:67:29:de:44:dc:07:96:fe:d7:df:16:40:3e:73:33:8f:eb:
9f:78:e5:61:c4:26:7d:b1:81:30:e2:bd:35:51:d2:90:18:20:
c4:a9:12:62:59:6f:f7:63:d0:ab:1a:c6:e2:6e:6f:78:0d:a2:
20:f2:fc:79:15:66:f4:e6:f3:c2:91:f5:2d:90:8c:f4:ac:49:
6c:c9:12:f9:38:93:43:0b:b2:51:7d:b4:eb:35:10:93:81:a4:
af:60:31:85:19:42:fe:ca:3a:99:34:82:8a:92:a4:50:50:50:
f0:9b:41:10:b0:16:31:6b:24:17:c5:63:3b:85:01:c9:83:29:
22:1a:54:b2:d2:5c:13:d6:01:0e:33:ce:a6:76:c8:2f:5c:d8:
5f:e3:7f:05:e4:d1:26:73:b5:eb:5c:21:16:3d:2d:fb:a6:f0:
4f:27:5f:2f:08:22:b7:03:87:a1:9a:4b:7c:53:56:01:1e:25:
fe:30:fa:d1:9e:71:86:bd:a4:6a:6d:a1:e9:bc:36:c7:db:95:
bb:f2:d2:11:eb:83:50:99:61:5e:e2:18:e0:b1:d6:09:b8:dd:
71:6e:b9:5b:d3:fb:d9:2c:63:41:27:b3:48:d7:24:c5:a2:b0:
62:a8:e1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org