Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bTHckEVAFAWlW3g_Bjg61TvhZ6M.roa
File: bTHckEVAFAWlW3g_Bjg61TvhZ6M.roa (raw, json)
Hash identifier: nmCAGjqd/BXa93rxX42rnSNJdBHAbjZnattmC009oXo=
Subject key identifier: 6D:31:DC:90:45:40:14:05:A5:5B:78:3F:06:38:3A:D5:3B:E1:67:A3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D76
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bTHckEVAFAWlW3g_Bjg61TvhZ6M.roa
Signing time: Fri 01 Sep 2023 10:14:51 +0000
ROA not before: Fri 01 Sep 2023 10:14:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 114.198.160.0/20 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7542 (0x1d76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6D31DC9045401405A55B783F06383AD53BE167A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:b0:21:b4:a3:e1:62:d8:3d:c5:7b:00:84:
6d:9f:d1:16:99:89:84:96:6e:32:9d:15:fe:f7:cd:
47:c7:1c:a5:57:e2:3f:bf:89:11:88:89:2e:0c:96:
60:b4:51:6e:c6:c4:55:3e:63:88:80:a7:5c:ec:dd:
86:6c:65:f4:08:3c:f8:d8:f1:f2:cc:79:3e:94:b4:
6d:34:aa:a0:e9:ba:03:0a:09:d0:b6:b6:eb:c1:59:
e7:42:9a:83:93:7b:d9:a3:f7:ef:7b:84:7a:c5:81:
c1:17:70:7c:9a:52:c4:c5:ba:75:60:15:57:c2:e3:
55:db:99:d8:ac:4f:4b:fa:9c:f3:42:c3:b2:83:c1:
ca:26:2b:ed:2e:a2:75:8c:18:74:a1:64:a8:e8:8e:
70:66:ee:b1:ee:e5:96:9f:a1:23:e3:ef:4c:59:21:
7b:82:35:39:93:50:4d:d5:a3:ef:ca:1d:de:61:c7:
93:ef:28:a6:ec:e5:b6:e7:c0:a8:1a:26:1f:97:dc:
ea:22:bc:6c:0b:b4:aa:6a:7f:db:05:e1:a9:06:20:
5b:54:4b:a8:a2:d4:16:f1:81:bd:ee:70:e9:45:35:
fb:d6:7c:88:d5:35:21:7b:4e:2d:3c:d2:75:7b:49:
2c:20:00:ba:f2:0f:2e:2e:5b:80:af:e5:fe:2e:90:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:31:DC:90:45:40:14:05:A5:5B:78:3F:06:38:3A:D5:3B:E1:67:A3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bTHckEVAFAWlW3g_Bjg61TvhZ6M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.160.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:c1:ab:18:66:13:15:50:91:83:7b:3b:c2:7f:3e:3c:81:e1:
69:35:fd:95:8e:17:f3:7d:d7:26:0d:a3:48:d5:70:7c:26:bb:
e0:72:81:29:d6:8a:ee:3c:f9:40:a1:97:db:dc:d6:8a:fa:69:
cf:c3:b0:c0:f3:d0:6d:c6:d9:cd:f8:e1:99:a2:d1:10:4e:8b:
0c:48:c7:a6:5f:01:0f:88:f9:cd:0e:62:a7:fe:d9:85:d9:51:
46:86:df:10:ed:ec:fc:cf:c0:c6:37:93:59:4b:bb:8c:e8:28:
ea:eb:3a:7f:a4:7e:cc:a6:f3:78:1f:4b:1e:ff:e5:c9:76:dc:
9d:45:bd:ca:66:9e:91:3d:7b:c0:71:cd:12:d2:25:b0:3a:26:
08:ae:fb:54:41:ec:7d:3e:81:6c:a3:27:bf:d5:a0:64:c4:68:
e5:4e:b0:29:7f:f2:fa:5b:ae:a4:f8:f8:59:9f:8d:1d:56:fd:
d9:98:bf:fb:99:65:33:3c:99:51:d1:c8:7a:70:a2:60:b9:2b:
5b:fe:06:8a:06:92:c0:ec:f8:4b:52:3e:77:91:c4:1f:55:fe:
55:18:0c:d5:9b:5d:ff:72:3a:83:a2:23:fb:57:6f:0a:22:2f:
18:54:f7:8d:e8:ae:47:84:ea:49:2d:c3:7e:5d:95:19:41:54:
fd:3c:f9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org