Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mQd417j2GS7YcITX5vN_9wAcN64.roa
File: mQd417j2GS7YcITX5vN_9wAcN64.roa (raw, json)
Hash identifier: LdKOFmtG81cDihL7hiJHwAostbH2L+7eOlNmAl8yiBM=
Subject key identifier: 99:07:78:D7:B8:F6:19:2E:D8:70:84:D7:E6:F3:7F:F7:00:1C:37:AE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E50
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mQd417j2GS7YcITX5vN_9wAcN64.roa
Signing time: Fri 01 Sep 2023 10:15:52 +0000
ROA not before: Fri 01 Sep 2023 10:15:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4662
IP address blocks: 61.61.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7760 (0x1e50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=990778D7B8F6192ED87084D7E6F37FF7001C37AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:96:fd:50:b1:81:cf:be:ad:bf:8f:60:82:
18:fb:f0:63:49:38:78:aa:11:b3:72:63:5d:93:17:
e9:f1:70:77:5f:4c:65:67:93:b6:8a:3e:fa:33:11:
cb:bd:1c:a4:f8:00:2c:1d:05:a2:6e:e2:40:a3:a1:
6a:74:42:83:78:db:44:c5:0f:ef:c2:1d:77:50:d0:
48:7d:3f:e1:9e:c0:9e:fb:91:46:b7:b6:74:db:29:
98:bb:8c:d1:00:2d:fa:63:b1:6e:4d:12:cb:c9:b7:
73:ca:85:90:0f:88:cc:3e:72:83:bd:53:91:55:46:
11:b2:a6:80:6a:e2:97:f3:cd:73:fc:6c:44:7f:2d:
b3:a0:22:bf:f9:5a:15:b7:ce:82:f6:69:68:99:d6:
fc:f7:e4:14:ef:77:e7:74:95:68:f7:e5:bd:4f:01:
cb:f8:11:03:0f:fd:9a:cb:2f:24:3a:be:35:f9:7b:
e2:aa:1c:a1:94:46:77:6c:c8:da:9d:03:7c:4c:1c:
4a:99:d2:4a:c1:d2:7b:b9:25:d5:6d:95:7a:69:b9:
e8:a9:1a:4c:8e:07:43:5e:2c:d5:8c:32:85:db:64:
d1:ca:a1:9e:6b:34:49:79:5a:1e:c6:38:67:c3:81:
11:15:ea:35:ed:3d:b8:1e:1a:bd:ac:c4:1d:37:5a:
1c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:07:78:D7:B8:F6:19:2E:D8:70:84:D7:E6:F3:7F:F7:00:1C:37:AE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mQd417j2GS7YcITX5vN_9wAcN64.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.208.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:53:35:f0:f5:2d:af:c7:ab:dc:a9:42:f8:ec:f2:48:ff:a5:
ea:71:06:3e:3b:ee:bf:53:07:64:d4:0b:06:8c:0e:6d:45:5b:
9b:7b:91:60:ab:73:02:b8:b3:0c:80:bf:71:47:3b:e4:ce:ef:
62:ae:0e:42:1e:ec:2b:cd:4c:b4:52:b8:fb:c8:6b:4c:23:a7:
06:66:6d:91:07:eb:08:90:06:09:eb:69:06:7d:cc:fd:14:29:
66:e0:46:ac:8c:28:9e:68:4e:0c:07:ed:ca:b5:92:4b:e4:1c:
99:24:69:62:12:c4:4e:2f:36:2e:99:18:be:50:e7:ca:15:9a:
2c:cc:94:06:21:69:f0:f9:c5:f7:10:e2:07:78:17:8a:58:a6:
45:96:af:7a:78:e5:5c:87:8e:60:0a:d9:f7:93:c8:a4:8f:98:
02:ad:f6:b1:cb:bf:40:1d:0f:09:ad:08:ce:87:f1:45:c7:7d:
3d:94:b8:2d:d7:a6:b9:6d:5c:a6:72:5d:74:b6:3c:77:cb:4d:
aa:de:ff:0f:78:41:33:4d:a0:ec:b4:b3:7d:fa:86:1d:b6:bb:
4e:67:31:fd:35:36:1b:46:2f:3a:d3:15:16:a5:bc:4c:85:0c:
1d:93:f1:5a:08:e5:72:82:55:2a:26:6e:39:bc:33:70:3a:32:
ee:b7:e5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org