Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WPShtQgZbqSXwnvRemlSFdr_BQQ.roa
File: WPShtQgZbqSXwnvRemlSFdr_BQQ.roa (raw, json)
Hash identifier: U43yocyf2EAHjzlDsKHvsmIVnPOej2N+n/ecU49P6rE=
Subject key identifier: 58:F4:A1:B5:08:19:6E:A4:97:C2:7B:D1:7A:69:52:15:DA:FF:05:04
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E98
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WPShtQgZbqSXwnvRemlSFdr_BQQ.roa
Signing time: Fri 01 Sep 2023 10:16:14 +0000
ROA not before: Fri 01 Sep 2023 10:16:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4662
IP address blocks: 61.58.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7832 (0x1e98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:14 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=58F4A1B508196EA497C27BD17A695215DAFF0504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:1d:a5:11:e6:9e:1f:df:e2:f4:10:24:18:
5a:85:78:23:0e:bb:e1:fa:14:4d:08:c6:a0:f4:45:
45:61:2b:f2:d0:be:3b:a6:14:55:1f:05:e3:aa:ed:
3a:4f:4b:79:19:6b:c1:1e:04:6e:ad:8f:61:9d:00:
e6:68:2f:d6:56:55:6d:7e:06:38:57:3d:b1:d8:ed:
5c:63:51:51:b2:34:40:df:c8:43:c4:43:92:69:99:
8c:c4:d1:46:16:ac:58:8f:12:8a:cc:36:b1:00:7a:
99:fe:b7:6a:1a:a2:b0:e6:d7:de:b5:1d:f5:12:d3:
70:de:bb:c4:0a:ba:1f:4f:86:e8:e4:50:d2:e5:2b:
4b:c6:57:45:46:b3:6c:2c:06:b0:d8:63:3f:9b:21:
09:53:e5:d5:10:a5:e4:cd:b2:54:08:8f:c9:65:95:
4d:63:96:94:98:48:5f:56:74:48:4f:57:46:ae:22:
58:88:85:db:da:1f:3a:e0:7f:7f:f7:0d:a7:26:38:
ad:e7:8d:8f:50:68:35:a0:b1:b6:19:2f:e4:b9:e4:
fd:88:b6:c9:d7:ac:2c:ab:11:ce:79:7b:ba:3c:e8:
92:99:62:25:e5:be:a9:c9:72:ec:f3:dc:fe:4e:fa:
5c:54:05:5e:35:fc:89:3c:56:f9:43:e9:be:dd:9c:
50:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F4:A1:B5:08:19:6E:A4:97:C2:7B:D1:7A:69:52:15:DA:FF:05:04
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WPShtQgZbqSXwnvRemlSFdr_BQQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.112.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:71:78:d8:9f:36:33:8f:a4:9e:98:2e:d0:cd:5c:f5:c3:9b:
20:4f:b2:83:92:9e:01:ae:da:6c:77:42:a0:34:03:ea:40:76:
32:58:45:f3:99:9b:46:1d:66:5f:8b:bd:bc:ac:3c:48:93:fa:
a3:61:81:74:29:0a:d8:5e:08:de:80:6d:6f:c8:20:83:ea:dc:
e0:17:b4:39:bb:d2:45:8a:95:66:3e:7d:9b:f7:b6:c2:04:2b:
2d:6a:bf:1c:08:e5:d3:bb:5e:0f:73:03:a4:86:4a:7c:83:03:
c0:dc:f2:18:11:a9:71:77:71:2a:1d:7e:96:85:83:bb:2d:f2:
6a:75:18:9d:01:36:6b:15:49:ee:b9:76:f9:64:e3:cf:74:3d:
5d:96:71:70:1c:af:ba:55:8e:09:5b:47:ff:69:45:27:2d:d6:
6d:42:35:55:76:1c:e4:cc:6b:e2:5f:82:0d:27:ff:aa:fd:ad:
54:9d:e2:31:fb:ed:37:a9:ce:4b:a1:61:42:b2:eb:cb:c4:68:
c3:a7:a2:89:01:7e:f9:49:a4:fb:58:6e:3e:35:e5:9d:28:c6:
df:75:42:f5:59:34:00:3b:3c:90:34:29:5f:44:22:47:3d:87:
87:d6:8b:51:b5:37:cc:99:52:1a:d0:c6:ea:32:8c:90:5d:a5:
ed:bf:9d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org