Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vf5NJQf-8m_hCY6R6tBK2MdDiX8.roa
File: Vf5NJQf-8m_hCY6R6tBK2MdDiX8.roa (raw, json)
Hash identifier: Z4+92z+05iK/ySvfIbVE0UwANyD3OkHfg/x1/M4KTIM=
Subject key identifier: 55:FE:4D:25:07:FE:F2:6F:E1:09:8E:91:EA:D0:4A:D8:C7:43:89:7F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DB3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vf5NJQf-8m_hCY6R6tBK2MdDiX8.roa
Signing time: Fri 01 Sep 2023 10:15:11 +0000
ROA not before: Fri 01 Sep 2023 10:15:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 122.254.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7603 (0x1db3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=55FE4D2507FEF26FE1098E91EAD04AD8C743897F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b9:af:a9:30:ed:60:52:0f:16:ab:7e:8f:93:
24:6a:4e:42:1c:fc:86:74:87:89:a5:80:f1:79:b3:
ff:be:0f:1e:fb:40:4c:73:b4:c6:3f:c6:a5:cd:8e:
2b:f3:df:af:5d:ad:42:4c:36:3e:b0:b7:b5:bc:2d:
74:aa:dd:d1:f9:ea:ee:9d:54:4b:ad:ed:ac:29:04:
ba:56:71:2f:4a:ea:c3:72:a2:89:e1:b3:11:ea:26:
dc:16:21:b0:01:7f:2a:0d:69:f7:b5:9c:82:de:6f:
91:20:21:da:2a:bb:77:2e:48:6d:ab:21:6f:01:0c:
46:7e:65:bd:a2:30:e6:94:17:fb:d9:b7:d3:4c:c0:
91:9c:07:06:60:87:e5:e9:11:05:9e:2e:28:25:27:
d0:13:52:da:e0:09:17:4e:15:1f:62:99:37:03:74:
d9:e2:03:72:f5:94:7f:6d:2a:cc:b1:cf:e7:92:d4:
20:d0:54:92:c3:69:a0:e2:61:43:50:b3:2f:9b:68:
67:2e:5c:3a:38:35:cb:55:48:4d:0d:0f:87:bb:21:
d1:86:4c:b5:69:be:47:89:af:b1:4c:fc:e1:32:7b:
d6:38:0d:3e:89:03:5a:6b:bc:58:7b:53:a9:10:df:
84:32:3a:b4:4f:39:c0:f2:fc:b6:40:44:68:0b:4c:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FE:4D:25:07:FE:F2:6F:E1:09:8E:91:EA:D0:4A:D8:C7:43:89:7F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vf5NJQf-8m_hCY6R6tBK2MdDiX8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.32.0/22
Signature Algorithm: sha256WithRSAEncryption
90:89:d0:f2:95:20:26:08:1f:a0:33:cb:59:74:0b:2b:0a:42:
9a:a9:f6:38:49:68:33:51:f3:f4:c7:97:7f:f6:34:3b:fc:b7:
e9:3c:92:fe:5f:71:c7:a2:f6:04:31:4d:53:c5:20:21:12:ab:
11:ce:8a:68:2c:5c:ca:38:c7:f7:bd:f2:70:54:74:5c:89:ac:
53:41:1f:8f:1b:c0:98:f6:96:9f:e6:d1:4a:f4:81:00:ca:03:
16:aa:09:08:77:43:a2:06:b1:d5:40:e8:28:92:a6:4a:85:96:
a0:58:ca:37:3c:08:37:09:8a:8b:af:85:d5:66:7c:95:f5:8e:
0e:ab:63:f0:53:90:bf:62:d7:81:60:f2:af:f1:4c:11:de:31:
2e:e7:85:a8:c5:a2:07:b1:ca:bb:78:33:b0:67:18:cc:25:70:
87:80:5a:59:46:e9:35:bf:c8:3e:14:8f:d8:f1:d9:dc:e6:0a:
95:0e:46:df:63:70:f5:d9:d5:20:37:c9:51:35:47:d9:2c:90:
c1:89:f2:25:4a:99:2c:bb:0c:f0:e7:df:5c:5e:97:79:19:8e:
50:cd:2b:0f:00:5e:c9:09:9b:14:02:55:25:e7:4a:0a:ea:c7:
06:94:48:ba:cd:ef:1e:68:57:e0:09:3e:59:c9:0f:8a:32:7f:
c4:54:7c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org