Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lGwZb5Xdeb8wrQrHL4xNv6BvxPw.roa
File: lGwZb5Xdeb8wrQrHL4xNv6BvxPw.roa (raw, json)
Hash identifier: bGY9Pm9fWP0qrkglSV72l3vq7+5M2WSJUf29qWNHhJk=
Subject key identifier: 94:6C:19:6F:95:DD:79:BF:30:AD:0A:C7:2F:8C:4D:BF:A0:6F:C4:FC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E8D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lGwZb5Xdeb8wrQrHL4xNv6BvxPw.roa
Signing time: Fri 01 Sep 2023 10:16:11 +0000
ROA not before: Fri 01 Sep 2023 10:16:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 115.165.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7821 (0x1e8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=946C196F95DD79BF30AD0AC72F8C4DBFA06FC4FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:9c:29:bb:dd:cc:65:bf:4f:f4:3a:e8:ff:
ca:e7:de:f4:d3:c1:b2:7b:89:a6:7f:82:68:28:dd:
b6:0f:2a:e4:73:81:c2:be:58:57:f4:8f:cc:97:30:
38:68:f2:3b:8b:79:14:d9:61:34:b0:f8:18:16:dc:
b8:eb:58:17:1a:af:69:ca:38:fb:e5:9c:2c:64:37:
71:d7:ed:0e:7c:fc:9c:a3:92:5d:6d:d9:3a:7e:6a:
27:18:46:81:d7:20:ab:13:4a:e4:60:35:f7:c1:77:
1f:7c:b1:07:13:6f:b7:9b:2a:51:f2:b9:bf:4a:14:
35:ad:48:0b:07:66:bb:1f:0d:7d:6a:ec:60:a5:ee:
52:cc:f3:f7:da:0e:1d:0f:e0:d2:80:4e:ed:c7:41:
14:98:ba:58:be:2f:cd:44:6d:bc:2f:11:5b:db:a8:
d8:76:02:6a:38:30:b3:5b:41:80:bf:d3:f8:be:5d:
a5:1e:23:37:42:49:b4:73:65:98:9e:2d:c7:a1:50:
19:c4:08:dd:8b:25:43:c9:47:83:2e:a3:1c:2f:20:
92:ab:81:e2:82:79:59:01:0d:79:ef:62:3c:18:9b:
f1:3d:c5:8e:ea:4b:08:e7:6c:c4:95:dc:8d:ea:8b:
73:cc:8f:b6:59:78:93:e9:ec:8b:9f:1a:a3:5b:f7:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:19:6F:95:DD:79:BF:30:AD:0A:C7:2F:8C:4D:BF:A0:6F:C4:FC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lGwZb5Xdeb8wrQrHL4xNv6BvxPw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.232.0/22
Signature Algorithm: sha256WithRSAEncryption
44:6b:93:27:ee:1f:17:93:48:e7:a5:93:f7:36:c7:6d:00:b3:
f7:55:e4:57:61:1e:04:3e:7b:c5:1d:7a:82:90:1a:ea:55:2f:
b7:f1:a3:17:17:01:37:f4:62:4a:da:1e:a4:ac:05:a8:f3:51:
d9:c5:60:60:f7:87:1b:fb:64:0a:61:db:ca:83:da:de:a1:03:
fb:4d:22:d0:65:41:d3:3c:74:67:c0:2d:75:2e:c3:c3:10:67:
00:56:85:94:54:bb:c1:19:1a:3d:3e:0d:22:4d:fe:32:ab:a9:
49:b6:33:bc:fc:8b:5f:de:1a:75:51:8a:c0:fd:dd:c2:7c:7c:
b6:6b:e6:e8:84:a4:8f:44:49:7c:5e:25:d3:bf:b4:ae:4c:b4:
2f:aa:70:4b:24:21:5a:58:67:ac:44:4b:ee:c6:87:64:a4:4b:
b6:17:de:e9:fa:38:65:40:ac:19:5c:bf:de:dc:5e:be:f3:a5:
a9:79:48:a5:b1:41:fd:07:eb:60:a4:ce:bf:5e:1d:22:0d:eb:
cf:71:49:d7:cf:4e:ca:bd:2e:06:32:30:19:88:cf:0f:1c:da:
63:8a:d0:4d:f6:53:39:e8:d0:3e:cb:1b:5e:9d:c6:5e:74:58:
7a:e6:b0:71:15:39:8b:96:5b:2b:df:ac:2b:3f:81:c8:64:06:
23:18:22:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org