Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_QVzxd8-8kpHjVRr7FvEm0hDOWU.roa
File: _QVzxd8-8kpHjVRr7FvEm0hDOWU.roa (raw, json)
Hash identifier: d9jfiWdoafR1tKQKZ/P9N4DcyD8nGUHljyoorjA/d1U=
Subject key identifier: FD:05:73:C5:DF:3E:F2:4A:47:8D:54:6B:EC:5B:C4:9B:48:43:39:65
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1F43
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_QVzxd8-8kpHjVRr7FvEm0hDOWU.roa
Signing time: Tue 30 Jan 2024 09:01:54 +0000
ROA not before: Tue 30 Jan 2024 09:01:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 61.61.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8003 (0x1f43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 30 09:01:54 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FD0573C5DF3EF24A478D546BEC5BC49B48433965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:bc:6c:a1:83:86:9e:8c:f6:88:38:48:b2:
84:b7:2f:a4:14:05:19:b6:ea:c8:92:40:46:1d:fe:
cc:11:f4:e9:64:e2:be:f4:49:f3:23:37:1a:77:91:
1f:b5:00:37:bc:20:d0:f6:17:2b:a6:bf:85:f7:e6:
06:d7:a8:d3:59:a3:6c:7a:70:ee:22:5e:d2:82:85:
f7:56:1e:fd:64:1f:45:3f:03:ab:2b:2e:ea:5c:da:
de:84:09:98:c8:b7:40:e8:6f:f5:fb:77:0c:33:6b:
ae:6d:9c:70:ad:81:28:11:b6:89:01:43:92:5e:7e:
a2:71:6b:d9:b4:22:b6:69:3e:01:92:e5:1d:29:b6:
63:22:6d:bf:50:9e:de:bf:5a:eb:90:c5:88:e8:4a:
25:3c:ec:7e:86:af:95:e2:28:bd:34:ad:06:55:a0:
11:63:8d:a2:31:f5:b5:63:64:3e:2e:41:47:f8:7c:
d3:56:be:20:95:30:ad:5c:d8:c1:f9:4d:6b:f0:cb:
a9:a8:ff:a4:5f:64:ef:45:13:da:11:b3:51:ca:b7:
7e:1e:e5:4b:11:3a:b6:55:d0:47:46:9b:6c:24:67:
36:5e:bd:ca:f2:10:32:1e:48:ca:a4:6d:87:ac:48:
a6:35:71:bb:84:57:5e:5d:29:e7:ee:8d:69:07:06:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:05:73:C5:DF:3E:F2:4A:47:8D:54:6B:EC:5B:C4:9B:48:43:39:65
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_QVzxd8-8kpHjVRr7FvEm0hDOWU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.208.0/20
Signature Algorithm: sha256WithRSAEncryption
86:5f:36:c9:29:4f:9b:d2:ea:97:9f:f2:db:74:27:0c:c8:88:
c3:03:4c:f3:78:11:ca:69:ae:96:db:31:f6:d0:91:0b:29:ab:
15:9a:cf:c3:d2:06:7f:28:9d:2e:72:98:5e:2e:a9:64:f9:41:
b0:79:f6:a6:af:f5:68:6d:dd:e8:a9:3a:8c:d6:0d:86:38:f8:
44:33:3c:2c:2f:63:84:fb:1c:42:5e:2c:d4:89:93:5d:7f:c2:
a6:77:fc:42:2e:f0:62:f0:69:18:d2:d9:91:5f:78:3c:c1:4e:
1a:84:a3:fb:1f:1f:85:37:5e:57:bf:dd:0b:d8:68:92:5c:33:
2e:96:62:a4:9b:07:80:c8:55:ec:9a:23:5c:4e:8b:78:56:04:
21:a0:bb:95:9e:f6:77:98:df:7b:54:d1:80:9c:d3:d5:11:d4:
d7:84:aa:d9:01:be:26:52:ea:3a:66:f8:18:9f:2f:ec:cf:be:
75:b1:48:12:f9:d5:b5:ec:2b:a2:8d:9b:d7:34:85:ff:dc:d4:
97:3e:47:a8:b4:43:12:d9:ca:53:50:c8:dc:de:9c:b0:20:ce:
6b:b9:37:ac:e1:6a:a0:27:dd:a9:8a:d6:de:7f:1b:6a:71:bb:
4f:0f:19:e0:19:89:9c:f4:a1:5d:2a:1c:f4:06:47:2b:9d:0e:
b3:76:ee:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org