Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jnQQNlufKOj5R-m71bHXwc8s2qo.roa
File: jnQQNlufKOj5R-m71bHXwc8s2qo.roa (raw, json)
Hash identifier: AgFc6QSqk3QKKuIdLSL6xq72RITwWdU1gBwjNufp7LE=
Subject key identifier: 8E:74:10:36:5B:9F:28:E8:F9:47:E9:BB:D5:B1:D7:C1:CF:2C:DA:AA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D79
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jnQQNlufKOj5R-m71bHXwc8s2qo.roa
Signing time: Fri 01 Sep 2023 10:14:52 +0000
ROA not before: Fri 01 Sep 2023 10:14:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 61.61.209.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7545 (0x1d79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8E7410365B9F28E8F947E9BBD5B1D7C1CF2CDAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:8f:ed:91:ec:72:a3:ee:c1:5a:59:d4:43:
97:f0:a7:55:00:43:06:06:5d:42:32:48:ce:d9:cb:
f3:61:a5:22:c4:93:6f:2c:a0:4d:46:ab:de:bf:92:
79:46:d8:cb:e6:54:77:d7:77:b1:af:c9:af:b5:0f:
68:8e:91:31:26:a2:53:27:ea:00:c9:82:91:28:68:
c4:c2:fb:72:47:bf:cd:18:37:c5:5c:27:2f:e0:6f:
d4:93:04:66:c4:fc:f4:56:f0:72:81:e2:f5:b4:30:
70:10:84:a8:67:13:5a:76:93:62:33:fa:34:f0:85:
82:a7:b0:79:29:28:9a:13:75:aa:99:04:92:ef:bc:
9f:11:4f:c5:68:63:5a:54:ce:4b:0e:09:88:66:3d:
f9:b7:f6:72:87:b2:87:c0:05:0e:fb:4c:ad:78:33:
39:fc:9a:f3:7c:84:57:27:19:88:00:c7:87:00:c4:
0b:fa:32:c6:af:2e:aa:13:c8:b1:5c:be:72:9f:86:
4d:0c:98:d7:1b:0f:56:4b:e8:68:51:74:f7:bb:0d:
e5:d2:79:a4:99:77:e4:ed:79:30:f8:34:52:27:2d:
de:f8:e4:b9:cb:d8:1f:98:26:ea:c1:b1:8b:ea:3e:
bb:82:f0:e2:21:4d:21:5e:84:b5:43:47:04:3c:8d:
2d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:74:10:36:5B:9F:28:E8:F9:47:E9:BB:D5:B1:D7:C1:CF:2C:DA:AA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jnQQNlufKOj5R-m71bHXwc8s2qo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.209.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:41:27:d4:4d:53:5d:c0:e5:d0:42:65:f7:9b:2a:c3:68:ea:
df:08:04:54:e3:eb:ba:7f:c6:09:34:11:4d:65:e9:e4:1c:66:
55:86:3b:24:21:ec:24:56:a2:17:bb:5f:c9:0f:6a:1f:3d:7b:
45:a7:e8:30:3a:63:e6:57:ac:f7:03:0f:20:c7:d9:c7:87:5b:
d3:e0:2b:a4:ab:b4:51:4a:0c:62:78:eb:3c:18:a3:bf:25:11:
52:50:2c:39:0e:a7:51:2c:3a:e7:6b:41:16:8e:63:20:58:1c:
06:75:7b:72:e2:dc:42:97:2d:2f:bc:5e:04:41:66:b6:e8:92:
9c:79:ae:14:f2:ca:59:78:49:0f:42:75:d0:ee:1f:ff:b0:ad:
cc:76:ab:e9:e8:7e:20:68:04:ed:0d:99:2b:0f:8f:44:40:ab:
f7:50:74:34:5a:ad:52:fa:4f:4d:9a:1f:7a:4b:8a:c3:4a:9d:
67:e5:86:c5:01:4c:9d:6b:4f:08:ad:0d:4f:e2:69:0a:1c:ac:
8d:76:ea:3a:30:e9:a6:b8:6e:b3:b5:2f:3e:0f:7e:4d:07:be:
3f:df:f4:b5:6f:78:6a:b1:39:0f:35:73:f1:af:c4:6e:67:3d:
5c:89:bf:be:a3:78:64:dc:69:34:98:f0:9d:88:a7:65:d5:74:
02:bd:74:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org