Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WdLNqA0MaTnwRuzchJrVEYH8zvw.roa
File: WdLNqA0MaTnwRuzchJrVEYH8zvw.roa (raw, json)
Hash identifier: YPRMccOGFWfTfXxDGyIQDISjyqTyxXNzTe3F060cMDg=
Subject key identifier: 59:D2:CD:A8:0D:0C:69:39:F0:46:EC:DC:84:9A:D5:11:81:FC:CE:FC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D92
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WdLNqA0MaTnwRuzchJrVEYH8zvw.roa
Signing time: Fri 01 Sep 2023 10:15:01 +0000
ROA not before: Fri 01 Sep 2023 10:15:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4662
IP address blocks: 123.0.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7570 (0x1d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=59D2CDA80D0C6939F046ECDC849AD51181FCCEFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:76:86:10:cf:57:d2:75:ea:75:fe:6f:e1:9b:
f0:48:de:97:ea:67:5c:92:7d:0a:c6:66:30:97:d5:
51:ee:74:af:51:cd:ed:f7:7e:7f:ed:28:18:fd:5f:
39:d9:06:d0:8b:e9:db:4f:ad:32:78:d7:18:31:a6:
a9:2c:ca:89:0b:37:c8:c7:96:ef:aa:c6:9f:6e:3d:
c2:65:05:8f:db:68:fa:5f:33:74:c6:04:e3:e3:28:
32:05:47:d0:d9:56:f4:c6:be:29:ac:0c:24:1e:28:
cd:59:af:14:08:09:5f:b2:d2:01:e7:7a:89:2f:e9:
32:16:89:71:38:60:be:85:f1:15:73:7a:c4:09:77:
5d:3d:39:ca:c1:ec:48:04:72:0c:41:bd:99:0c:bc:
53:d4:8b:f7:8b:1a:ea:24:80:53:f4:15:f7:a3:e7:
9f:eb:e0:e1:30:e6:f0:ad:15:7c:12:52:01:ea:f5:
b7:8c:b9:ef:8a:ab:6c:c5:e0:00:b3:07:ea:e6:65:
4e:f5:4c:10:1c:16:98:35:c2:3b:de:28:97:30:28:
f3:71:c6:8f:bd:e1:6e:0d:a4:43:0a:32:ff:09:6d:
30:e9:4d:a2:0e:a3:8c:03:8b:da:5f:79:9b:f6:46:
91:39:82:ff:65:b3:34:4a:dd:eb:c7:99:bc:31:98:
29:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D2:CD:A8:0D:0C:69:39:F0:46:EC:DC:84:9A:D5:11:81:FC:CE:FC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WdLNqA0MaTnwRuzchJrVEYH8zvw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.32.0/19
Signature Algorithm: sha256WithRSAEncryption
89:f0:f7:76:3c:9a:8c:f4:64:06:ff:40:38:18:6c:02:83:3d:
a6:db:c6:53:86:69:e3:b4:9e:cb:ad:d8:1c:a5:96:4a:22:f6:
5d:46:75:ab:86:0a:15:55:3e:69:82:5f:4c:91:3f:a4:e5:b4:
27:34:11:37:99:3f:9a:1d:d0:c5:7c:b5:ae:6a:12:0a:ed:1c:
63:d5:ff:15:15:07:ec:11:5a:ae:a6:21:7f:d9:60:63:e2:ec:
e9:40:c3:a8:87:53:77:84:9c:5f:29:e7:8f:25:a7:b2:f0:c6:
e4:23:1b:d1:12:8a:2b:b2:b2:9b:7e:56:88:46:2a:d7:ba:3d:
4c:d4:cc:cf:fd:97:62:9d:de:3a:6a:2b:a6:56:01:cc:93:24:
42:b4:c2:fc:5d:81:e8:65:1b:e4:e1:c2:59:73:5f:3f:a7:71:
23:a7:65:f7:e2:42:28:c9:76:cd:2a:42:8b:d8:6d:5f:95:5b:
3f:f3:7a:63:e3:e5:93:68:eb:ae:5a:72:d9:c2:df:e9:a6:ca:
09:f9:9d:df:85:6e:cf:d1:63:bb:40:42:0f:fe:93:4a:3b:9c:
66:b8:bb:ea:8e:75:73:80:fb:1d:69:4e:86:8a:3d:f3:b8:cc:
10:dc:e5:4b:4b:e3:0a:d0:5b:0c:b5:8a:c1:bb:9f:da:e0:41:
61:79:06:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org