Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d1pDD3fgtMckC9zoCKBnrDCDjYU.roa
File: d1pDD3fgtMckC9zoCKBnrDCDjYU.roa (raw, json)
Hash identifier: SEkPcnbI4ltuatD5nFR4ib/NV/0lxwKtAi9PNL6G4IY=
Subject key identifier: 77:5A:43:0F:77:E0:B4:C7:24:0B:DC:E8:08:A0:67:AC:30:83:8D:85
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E08
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d1pDD3fgtMckC9zoCKBnrDCDjYU.roa
Signing time: Fri 01 Sep 2023 10:15:35 +0000
ROA not before: Fri 01 Sep 2023 10:15:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 123.0.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7688 (0x1e08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=775A430F77E0B4C7240BDCE808A067AC30838D85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:02:e6:a3:04:b5:8b:7d:cb:7a:42:e1:f2:
cb:bf:b7:4b:82:cb:81:e8:89:4e:6b:44:47:09:d9:
8d:20:af:01:79:7e:aa:e1:5c:8c:38:f6:cf:0f:54:
af:23:a2:c3:9b:0d:44:0b:b3:14:53:57:f9:a3:c9:
b3:b9:7b:c8:5e:be:49:36:57:9a:4d:ea:64:95:fa:
07:29:05:1d:ce:24:f9:68:76:32:3c:75:64:0e:ca:
19:21:17:03:6e:ef:4a:af:e5:cc:b6:52:5b:69:1a:
3e:ad:3a:31:cf:5b:63:87:41:b4:ca:e3:4c:bd:0e:
2b:38:89:fe:c8:f2:b2:a1:d6:7a:c1:ba:d5:6c:5d:
a0:bc:6b:37:cc:ef:b8:d9:18:92:71:91:f6:1b:aa:
29:bd:e7:a6:68:6f:26:35:27:6f:3b:44:2c:84:80:
3f:95:50:a0:1f:62:15:46:de:66:61:04:ee:d0:ca:
db:75:d6:e4:5e:a0:6a:49:68:2f:a8:9f:d9:41:3e:
d1:bd:5e:09:b6:06:23:a9:10:04:fc:5e:0e:b0:29:
1c:ba:95:21:c0:74:30:e9:5c:07:62:14:32:d2:f3:
89:74:4a:1f:14:1b:af:d9:b4:77:d7:79:0b:dc:18:
0d:3f:08:55:a4:85:be:66:d1:fd:96:3e:4d:00:8b:
fd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5A:43:0F:77:E0:B4:C7:24:0B:DC:E8:08:A0:67:AC:30:83:8D:85
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d1pDD3fgtMckC9zoCKBnrDCDjYU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.45.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f8:59:a7:32:8d:90:94:70:82:05:55:bd:d3:d8:84:b0:e1:
ed:dc:03:b8:37:14:1b:53:32:c7:43:ed:be:1a:de:7a:0d:a1:
fa:59:c5:2a:73:13:4c:23:73:a2:00:44:70:9a:14:fd:82:26:
d4:9c:03:7e:da:f2:b2:c6:e6:6e:a3:f4:eb:5d:51:39:17:40:
ed:57:2f:f3:4a:27:ab:5b:3b:5e:26:21:ad:5d:8a:f9:57:f5:
9e:ac:81:a9:b2:4c:fc:80:05:23:34:d0:31:4a:e7:02:6d:80:
51:c2:96:df:97:f6:30:30:3f:b8:3d:87:01:72:a7:fa:6c:12:
10:e5:33:77:92:f8:f3:2e:91:7c:df:2e:fa:9f:21:91:be:64:
de:64:b5:5d:29:bf:2c:1b:20:90:aa:1d:47:25:1f:69:2c:50:
1c:b0:ef:56:f6:24:00:a0:8b:c4:ce:fc:f6:9e:50:10:eb:29:
2f:e2:99:e3:02:50:f2:6d:55:7b:6e:ff:93:15:36:c9:27:ce:
37:e4:93:40:57:8e:65:80:73:83:e0:e3:c0:fd:d6:07:1a:98:
ab:96:24:b8:8d:ca:33:66:ed:32:dc:98:08:6d:19:29:69:6b:
54:31:71:9d:b2:a3:ff:06:0f:57:27:52:46:8a:67:1b:00:b5:
27:37:16:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org