Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UdIgUjJo3ekCXkYnS3vJ1LAGIj0.roa
File: UdIgUjJo3ekCXkYnS3vJ1LAGIj0.roa (raw, json)
Hash identifier: P/iXaYRHJK46zKciKzPUguRAYIMO98fW2AUaa4i3r9o=
Subject key identifier: 51:D2:20:52:32:68:DD:E9:02:5E:46:27:4B:7B:C9:D4:B0:06:22:3D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E7C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UdIgUjJo3ekCXkYnS3vJ1LAGIj0.roa
Signing time: Fri 01 Sep 2023 10:16:07 +0000
ROA not before: Fri 01 Sep 2023 10:16:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 119.77.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7804 (0x1e7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=51D220523268DDE9025E46274B7BC9D4B006223D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f2:39:d5:24:6a:98:64:06:55:d1:85:56:4c:
3c:08:e4:03:88:09:31:25:f8:55:6b:a2:81:d1:c0:
94:e3:c2:1f:e3:ee:9c:e2:55:32:87:3e:51:66:7b:
5f:6c:67:24:ce:51:7f:4d:dd:7a:a5:14:cf:35:45:
39:e5:68:44:0d:06:5b:c0:56:dd:c9:92:12:4b:c1:
e0:18:72:8f:81:63:e3:4e:28:e1:dc:fb:33:44:12:
36:6d:66:b0:11:32:81:cb:52:ec:03:63:2e:26:81:
46:1f:a7:ae:1d:44:94:a8:7b:5e:e3:20:f9:f9:59:
ab:fc:27:aa:6e:aa:1c:fa:bf:21:bd:7c:36:0b:7c:
46:ce:f4:aa:b5:68:b4:ad:bb:51:89:45:39:11:ff:
bc:e7:cb:a4:df:82:d4:e5:5f:dd:ca:19:28:13:b9:
5d:11:00:1d:0c:90:df:aa:af:1f:b9:8a:67:fe:7e:
34:a4:d7:28:d5:ea:7a:29:0d:3b:3a:2c:c9:8f:f7:
30:87:86:29:02:51:4b:bf:ca:9f:f7:f5:58:4e:a8:
1a:ab:18:89:d2:08:6d:1c:6e:be:09:ad:49:f7:34:
63:a4:80:7d:6b:2d:89:7b:90:88:10:d8:19:65:23:
d3:72:66:88:0b:66:19:6e:1f:71:eb:ba:13:b5:8b:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D2:20:52:32:68:DD:E9:02:5E:46:27:4B:7B:C9:D4:B0:06:22:3D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UdIgUjJo3ekCXkYnS3vJ1LAGIj0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.192.0/19
Signature Algorithm: sha256WithRSAEncryption
89:7c:7b:b3:4f:84:10:a1:2b:1c:c6:ff:41:cb:1b:36:a8:25:
15:72:67:87:0b:96:8f:2f:53:09:07:0f:98:a8:c2:c4:84:ca:
03:58:35:61:94:44:64:b8:ce:8e:12:b8:df:ee:da:41:b5:c8:
63:7e:1d:06:78:0f:65:39:b3:83:f7:dd:d1:fb:95:e6:a1:79:
c3:1c:0c:9f:1b:c3:cb:f5:88:58:a0:1f:a9:b5:36:c4:45:20:
30:66:1e:0b:88:17:ce:f5:4d:47:3b:af:ba:55:a1:4e:f5:19:
88:7b:fb:20:3e:38:e6:71:c6:70:b5:e8:82:fc:0f:c4:39:f6:
38:e8:09:05:f3:51:e5:b6:e0:f7:5f:bf:7a:df:27:12:d1:68:
9c:57:e8:a2:47:46:df:4e:d6:8f:6a:cb:9f:53:7f:42:8a:be:
b0:ec:64:89:fe:3b:64:a1:75:26:82:e4:75:55:29:08:4d:a1:
bc:8c:39:8b:ae:e4:20:1e:da:af:81:fc:82:48:e2:84:a0:68:
cf:d5:31:dd:df:2c:90:44:76:c5:fa:42:03:96:2e:e2:02:47:
74:64:94:75:7b:e5:db:c4:ca:01:8a:7f:7f:2b:8f:91:b4:cf:
d1:70:d5:8e:73:23:ad:65:68:09:0f:ac:cf:73:5d:ad:02:31:
f8:cf:cd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org