Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oDYiYGXg0ZW_HKhbEpaDjnNhwoQ.roa
File: oDYiYGXg0ZW_HKhbEpaDjnNhwoQ.roa (raw, json)
Hash identifier: 07nMDBuxz7udZpoHJUy79PAjJzarZmOroWy/9eOIotY=
Subject key identifier: A0:36:22:60:65:E0:D1:95:BF:1C:A8:5B:12:96:83:8E:73:61:C2:84
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E58
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oDYiYGXg0ZW_HKhbEpaDjnNhwoQ.roa
Signing time: Fri 01 Sep 2023 10:15:55 +0000
ROA not before: Fri 01 Sep 2023 10:15:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7768 (0x1e58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A036226065E0D195BF1CA85B1296838E7361C284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:c8:22:86:85:db:6b:6b:c9:8f:16:c1:96:
9f:09:83:8e:49:cc:33:07:08:e1:0c:4b:02:db:b9:
07:89:d1:f2:5b:1b:d1:66:8c:04:25:9d:5c:df:5a:
6c:26:bc:61:69:6f:ac:87:a9:05:85:5c:c7:c8:35:
21:db:80:5d:95:0b:72:ca:2f:68:81:95:00:68:0a:
cf:31:a9:68:58:95:ec:3e:6c:3f:99:74:0b:d5:ae:
81:b7:05:c3:d9:a0:d6:85:db:c5:0b:13:a8:c9:f9:
a9:c3:86:5e:71:f4:81:60:1e:4f:c4:74:2b:0e:af:
59:aa:4d:8f:82:99:81:a4:42:a9:61:bd:24:63:9f:
37:01:9e:5d:f2:ff:01:c9:be:c0:17:19:72:56:7f:
63:8f:ef:19:54:79:3a:5c:6e:fb:1e:b9:a7:1c:91:
70:b8:18:45:b9:69:13:44:14:47:c4:39:b2:5d:e8:
01:c1:46:0a:f9:21:12:e6:c0:fb:f9:b4:2e:98:af:
5a:e1:79:df:97:31:8d:1f:8f:d6:0c:15:d6:77:05:
f6:f5:44:3d:1c:3b:b5:54:88:62:b7:b1:a0:b9:a1:
49:84:ea:b8:f7:c1:4f:76:a0:11:0b:04:b1:a5:4b:
4a:76:2e:b7:36:4d:0b:20:4e:6b:bd:31:1d:79:1e:
3d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:36:22:60:65:E0:D1:95:BF:1C:A8:5B:12:96:83:8E:73:61:C2:84
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oDYiYGXg0ZW_HKhbEpaDjnNhwoQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.142.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:b7:80:4d:76:db:9d:90:df:08:d4:05:41:2d:05:d7:90:ab:
0d:45:57:0f:47:9c:3e:1b:f5:f4:e9:26:df:d9:d8:21:34:ba:
d3:d8:af:23:ee:a8:00:05:2e:d2:7d:17:e8:ea:c3:4b:1b:f5:
28:2c:e7:1f:b9:a9:2c:1a:d1:5b:ac:82:3e:2f:12:6f:9b:0a:
2b:c3:18:fe:65:e3:e5:59:2b:4e:0c:2b:1c:cb:d6:18:a0:93:
bf:a2:1e:cf:cd:7d:ee:1d:c2:93:a4:b8:23:4f:a9:8e:36:7d:
b9:f3:da:fe:42:a1:5b:60:32:04:53:d2:a1:51:07:09:38:b4:
54:e0:64:58:fb:d1:06:ca:07:a5:87:28:62:76:0d:2d:e6:7c:
3d:86:ee:09:b9:91:c0:77:c7:e9:e1:5b:4f:92:33:e4:d7:1f:
2f:eb:71:d6:87:77:c8:18:6b:9f:38:2f:c7:fb:f4:93:36:b6:
06:af:1b:3a:69:5d:47:c9:6a:36:3f:88:08:5d:ac:51:c8:5e:
02:b1:ea:ab:18:f2:ec:b3:ac:4d:3b:20:03:b8:93:52:45:00:
66:ff:22:39:e1:bb:ac:17:3c:b5:d5:c3:1c:1e:ac:24:ce:6c:
43:54:75:4d:ea:de:2a:89:55:94:22:77:a7:27:09:d7:32:29:
88:72:86:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org