Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XY1ju39j-qP27Kybck3lCmqafZw.roa
File: XY1ju39j-qP27Kybck3lCmqafZw.roa (raw, json)
Hash identifier: CyTd4fvl1mviCHB2ZleeC3mYqBLRcKfEgOSr5gSG7Zs=
Subject key identifier: 5D:8D:63:BB:7F:63:FA:A3:F6:EC:AC:9B:72:4D:E5:0A:6A:9A:7D:9C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E19
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XY1ju39j-qP27Kybck3lCmqafZw.roa
Signing time: Fri 01 Sep 2023 10:15:40 +0000
ROA not before: Fri 01 Sep 2023 10:15:40 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 180.218.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7705 (0x1e19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:40 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5D8D63BB7F63FAA3F6ECAC9B724DE50A6A9A7D9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:3d:5f:34:fa:66:24:97:d2:0e:c0:6b:2b:
03:f1:63:f9:9e:68:69:33:29:75:d8:44:1c:53:4a:
d9:1f:02:62:76:9c:fd:9e:8a:d4:0b:3b:9c:f1:00:
f1:6b:34:8f:80:e0:cb:14:2b:55:6c:03:af:2c:d5:
ab:81:9f:74:90:85:07:47:c1:66:92:8f:7e:12:08:
73:22:13:64:cd:04:24:c4:70:8e:4d:3e:62:af:1e:
c0:ac:05:6a:5b:3d:35:af:79:6e:f7:0b:01:d8:27:
3a:8e:eb:01:c7:01:72:62:8f:f3:37:4b:2e:b1:91:
f5:d0:d1:de:7e:d9:13:7d:79:42:83:8f:f1:74:58:
ec:2a:fa:fb:9a:1d:bd:0a:77:ca:1d:d0:dd:0a:6f:
80:57:42:45:78:2d:9a:d1:70:9c:0e:04:ee:39:60:
43:1f:88:fc:18:e8:7f:b8:d4:ad:7f:53:2d:2e:cc:
95:3b:16:a2:a1:f4:35:33:d3:b1:fa:c0:6b:7c:ca:
dd:52:23:ed:77:60:dc:81:6f:76:ed:fe:9e:be:04:
0a:6e:f5:57:ef:fa:4a:be:c0:cf:51:a1:66:e4:c9:
c5:af:c4:b9:d1:d8:75:d8:c9:5b:fb:c5:42:94:e5:
6e:4f:cc:cd:1d:c8:b2:a7:1d:87:09:a1:28:df:c9:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8D:63:BB:7F:63:FA:A3:F6:EC:AC:9B:72:4D:E5:0A:6A:9A:7D:9C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XY1ju39j-qP27Kybck3lCmqafZw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.248.0/21
Signature Algorithm: sha256WithRSAEncryption
99:2d:90:6f:fe:5d:79:2a:e6:06:1a:f2:94:cb:9f:e3:f3:44:
33:3b:55:4e:68:9c:f8:b7:99:69:7e:4f:58:88:63:87:db:39:
45:21:0c:bf:80:f9:52:d1:49:c8:1d:8a:a0:9d:b0:13:43:da:
0f:21:8a:e3:49:75:6e:f0:53:8e:7c:c6:59:5a:de:74:a0:f4:
fb:89:b5:d4:e2:e5:84:69:00:a6:15:d0:d4:a2:ac:56:c2:30:
a3:62:bf:d7:d2:7a:87:6b:63:b8:d9:d4:09:b2:b5:3e:05:2e:
47:22:bd:36:59:02:a3:74:a5:93:01:38:40:89:19:66:10:c1:
62:82:f9:66:aa:04:bd:da:09:f5:d8:f9:99:42:d8:5a:21:68:
be:27:22:91:86:0c:e8:bb:c6:8d:3d:61:21:ed:09:61:56:04:
75:ee:67:a5:7c:d3:2f:92:fb:51:67:a4:b9:62:9a:ee:e7:63:
58:2a:d2:12:b3:47:8d:34:f3:fd:47:3c:0c:a8:17:fb:dc:9e:
03:d3:d6:fd:8a:d0:84:67:25:35:68:b8:d8:ad:da:32:47:06:
b1:3c:0e:69:ea:42:f2:85:eb:35:49:f8:5d:b5:47:27:2d:5c:
30:43:3b:a0:4b:c8:60:63:e7:32:50:14:36:5a:cc:66:2a:31:
fd:3e:e8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org