Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cNFVPXSsV0VauLB1FtyJOfqVlzo.roa
File: cNFVPXSsV0VauLB1FtyJOfqVlzo.roa (raw, json)
Hash identifier: GqCHI3DeqMpeb6/7kaQPXf3lCOXoFUcoQw/I/hVW3jQ=
Subject key identifier: 70:D1:55:3D:74:AC:57:45:5A:B8:B0:75:16:DC:89:39:FA:95:97:3A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E4C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cNFVPXSsV0VauLB1FtyJOfqVlzo.roa
Signing time: Fri 01 Sep 2023 10:15:52 +0000
ROA not before: Fri 01 Sep 2023 10:15:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 115.165.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7756 (0x1e4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=70D1553D74AC57455AB8B07516DC8939FA95973A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:65:a5:09:34:b5:af:8b:79:00:61:a5:52:
bd:f3:a1:73:2a:8b:52:75:e0:a5:bd:dc:7f:1f:89:
7a:f7:a1:ad:9f:b0:f0:ef:15:0b:01:11:e1:c2:58:
66:bd:c3:28:dd:57:7d:18:08:67:c8:06:44:ab:e1:
b7:c0:d9:20:87:0a:75:2e:02:4f:1c:f0:37:95:f0:
54:d9:92:40:45:ce:6f:e4:b4:be:f3:a9:0e:ee:01:
3d:4d:74:bc:73:c8:8e:6a:3b:9a:fb:e8:11:28:1c:
80:b4:da:0d:90:4a:9e:78:4d:81:7e:72:9b:94:9e:
32:74:72:86:e5:fa:2a:86:ae:fa:5b:9b:74:3c:0d:
06:88:73:37:6e:1d:fd:c6:cb:e3:39:1d:a5:26:1c:
7a:eb:6f:48:e1:19:fa:26:dd:39:99:02:e1:f0:f5:
32:d3:30:90:f7:82:59:56:fb:e8:bb:a8:36:2c:cb:
67:71:ac:5d:58:28:ff:06:68:2f:55:63:d0:89:cf:
c0:53:c4:99:25:d1:c0:4f:55:e7:8c:e6:e7:93:28:
da:2f:88:2f:31:7f:08:94:3b:fd:30:ce:dc:0f:42:
b5:54:e7:2e:a2:ce:98:92:06:ab:2c:2a:d9:15:dc:
da:86:b0:e3:31:b1:58:0f:53:a7:4f:c2:2f:6e:58:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D1:55:3D:74:AC:57:45:5A:B8:B0:75:16:DC:89:39:FA:95:97:3A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cNFVPXSsV0VauLB1FtyJOfqVlzo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.192.0/18
Signature Algorithm: sha256WithRSAEncryption
94:3b:1a:60:0a:af:c3:72:37:1c:8f:84:81:91:51:f3:10:a0:
25:57:e6:e3:9b:3d:56:c4:b9:5f:cc:a9:32:00:b6:29:16:e6:
8d:7e:e3:77:0b:07:f0:95:d2:9d:4e:23:34:a5:6a:8b:60:40:
58:6f:de:08:ff:59:ff:2a:e0:8d:cf:10:e3:8f:ed:d5:7e:17:
ff:e3:7d:00:32:c7:7b:97:9f:b0:7c:6b:94:0e:4a:93:d3:d9:
1b:a4:4d:18:ed:b4:dc:c0:32:b3:69:e7:c7:c1:43:05:a7:84:
91:24:e7:e4:da:3f:e0:c9:2d:a5:78:59:78:eb:07:49:0a:56:
de:1c:9e:57:9f:a1:6f:b0:6f:12:ce:3c:08:dd:59:57:a4:2f:
8e:9f:d3:ce:a1:80:5f:97:2d:4a:04:99:de:b3:71:a9:59:25:
33:8b:42:b2:60:32:11:aa:ed:16:62:34:5c:5d:5a:9d:c2:a4:
d6:13:69:45:d3:fc:d0:d6:a9:b2:d5:d6:0e:fb:6d:88:ad:3a:
75:5e:f2:ef:1d:70:80:99:cf:81:7d:bb:58:59:9d:1e:eb:88:
dc:f6:9e:87:81:77:16:83:df:48:f4:32:c2:1b:5e:dc:e3:23:
e5:b1:63:c2:20:63:fb:77:dc:c5:a1:3b:ad:52:cf:fa:3f:71:
11:86:a4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org