Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YWlViZlgpxzoPl3P3sq9yBJ1Nrs.roa
File: YWlViZlgpxzoPl3P3sq9yBJ1Nrs.roa (raw, json)
Hash identifier: Xqr65KwHu60uDyiBdFBc0tfYvhNnHaz9xovKnAPNHF0=
Subject key identifier: 61:69:55:89:99:60:A7:1C:E8:3E:5D:CF:DE:CA:BD:C8:12:75:36:BB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DD9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YWlViZlgpxzoPl3P3sq9yBJ1Nrs.roa
Signing time: Fri 01 Sep 2023 10:15:22 +0000
ROA not before: Fri 01 Sep 2023 10:15:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 61.56.176.0/20 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7641 (0x1dd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=616955899960A71CE83E5DCFDECABDC8127536BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0c:1b:5a:60:ad:cb:69:c8:35:9f:dd:eb:5f:
a7:cb:71:9a:1c:cd:ef:82:e6:54:6d:f7:09:57:3a:
ec:87:f5:d2:a6:92:48:c8:ba:dd:cf:b9:48:59:bb:
1d:56:87:d5:49:ca:54:73:d4:1d:9f:1e:b1:d7:fc:
4f:62:d9:72:9b:c5:86:6f:84:64:8e:c2:2b:6d:e8:
51:bb:d9:96:76:c2:2c:6c:5a:27:26:a4:a4:58:9d:
48:08:35:44:9e:45:77:82:d1:27:f2:72:59:68:3f:
32:99:4b:2a:fb:e1:15:5e:7c:1d:3c:ab:9f:68:9e:
d7:b4:a8:19:dd:42:ce:83:35:dd:75:2f:dd:de:d1:
9c:36:8b:67:d8:ec:88:20:dc:44:44:83:4f:97:fd:
8b:c9:eb:c6:0e:d7:ad:a6:8c:73:c3:38:a2:4c:b9:
de:87:65:56:5d:f1:b6:17:7a:ae:d6:52:83:0a:8f:
62:5d:5b:89:58:24:54:61:d3:e6:e6:5b:79:90:72:
a8:ec:c2:99:d2:82:03:c6:b3:c7:18:d7:4f:b7:f2:
fa:02:af:06:fd:42:2f:bd:b6:84:6d:cb:31:cd:3a:
78:a4:9b:c2:9d:59:fd:37:c8:ea:78:76:a2:f5:e7:
9d:1c:51:98:5b:db:e7:45:6f:87:ba:c5:83:bd:2b:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:69:55:89:99:60:A7:1C:E8:3E:5D:CF:DE:CA:BD:C8:12:75:36:BB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YWlViZlgpxzoPl3P3sq9yBJ1Nrs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.176.0/20
Signature Algorithm: sha256WithRSAEncryption
2c:cb:66:36:25:25:2d:1b:f9:67:7c:9f:d4:0b:7b:74:e9:bc:
3a:65:ed:fd:7f:36:cd:a4:9c:29:ae:79:ad:a5:00:5c:a2:f0:
9b:2b:fc:cc:ce:b7:74:7b:bb:04:ba:ce:e8:93:4b:94:1d:40:
cc:85:1f:72:f5:d7:e1:71:18:44:24:22:be:54:90:62:b0:13:
e5:82:67:0c:91:ac:8a:2d:ca:a3:86:51:89:9d:3c:c1:86:1f:
cb:fb:23:d6:b2:24:76:9f:18:3a:ba:33:2d:58:d1:f4:51:3d:
e5:6d:49:cb:2b:f3:6d:6d:9e:17:0d:f6:71:3b:0d:ba:73:f7:
82:9d:48:7f:9d:b8:88:93:b2:17:93:e3:55:6e:b4:6b:e2:37:
68:95:25:a8:a3:08:c7:c3:e9:35:e7:d7:bc:67:1e:dd:0b:58:
b7:b9:54:1a:d5:df:6a:8c:8b:6b:90:d9:4f:66:e9:c1:58:86:
0a:3f:1a:1c:3b:06:1e:d3:6f:3d:52:e3:cc:ba:c1:0d:1d:cf:
44:52:cc:71:ed:c3:41:28:cd:53:f4:1f:a3:67:f2:bc:d3:39:
2b:9d:82:17:c5:0a:e1:6a:6f:d1:35:75:fc:de:04:46:ce:86:
dc:b5:9a:d3:57:3d:e4:1a:d2:2f:b8:9f:c5:16:68:b5:a8:18:
56:01:1a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org