Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pQzFa5yrSu1rI6Oqtf5gKEWDwuU.roa
File: pQzFa5yrSu1rI6Oqtf5gKEWDwuU.roa (raw, json)
Hash identifier: XB5dVPe6g/CZTHr/PQS/+SpiKqsO9psxQkR6gmbij5A=
Subject key identifier: A5:0C:C5:6B:9C:AB:4A:ED:6B:23:A3:AA:B5:FE:60:28:45:83:C2:E5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D6F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pQzFa5yrSu1rI6Oqtf5gKEWDwuU.roa
Signing time: Fri 01 Sep 2023 10:14:48 +0000
ROA not before: Fri 01 Sep 2023 10:14:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 122.254.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7535 (0x1d6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A50CC56B9CAB4AED6B23A3AAB5FE60284583C2E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:91:3b:69:c4:09:04:c9:8a:4d:d8:da:c0:
30:21:7f:0f:f3:fb:ef:c6:e2:f0:9d:fb:9d:fe:6c:
d9:ce:ae:ba:39:f2:29:e3:f8:d6:28:f9:7e:58:a3:
28:ad:51:1e:72:e0:65:24:68:5d:ee:bd:f9:22:59:
f2:33:3e:7d:6a:f0:aa:e2:83:a1:9f:c9:44:fe:79:
3e:ee:09:96:d8:55:1a:8a:41:2d:3d:01:fb:40:01:
9b:a6:c8:ad:03:b1:f0:8a:cc:f9:e3:ad:d0:ea:65:
41:d0:6c:ed:24:ed:a1:49:78:34:18:a7:44:3c:79:
70:2b:0a:11:ed:16:af:87:e7:85:bf:29:89:c4:15:
a9:a5:0c:4a:d1:99:c9:d1:a7:4d:e4:de:fe:54:4b:
f0:b7:fe:87:4f:57:88:7c:7e:96:64:d6:73:b6:74:
83:98:ea:3c:45:e9:b2:42:ba:bf:79:da:07:34:d0:
74:fb:17:35:81:9e:a4:a7:6a:34:be:e5:db:8a:ec:
49:67:1f:0b:75:a1:3d:15:1a:67:56:fd:40:40:db:
35:8a:38:25:4c:81:ef:b4:a0:22:f0:29:14:51:bc:
a5:02:1c:dc:76:66:3e:a7:e9:91:1a:7d:f9:03:9b:
23:d8:0b:5d:44:6e:1a:76:88:42:9e:3f:cc:d4:a5:
43:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0C:C5:6B:9C:AB:4A:ED:6B:23:A3:AA:B5:FE:60:28:45:83:C2:E5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pQzFa5yrSu1rI6Oqtf5gKEWDwuU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.16.0/21
Signature Algorithm: sha256WithRSAEncryption
04:c3:22:43:a8:07:1e:49:10:e0:a9:aa:87:a3:13:d7:fc:e5:
67:75:02:12:21:b8:3e:bd:9a:cd:30:64:d6:5f:d9:43:b8:ab:
0c:bd:92:f2:e9:c7:17:1a:8c:80:80:c5:c3:e1:30:bb:32:62:
db:00:9f:f2:e7:7b:aa:1b:6f:76:22:0a:96:d3:5f:15:03:f2:
dc:8a:e3:b1:cd:37:a9:7d:43:6a:7a:c2:20:5b:53:7a:59:45:
58:43:bf:81:e7:9c:80:50:05:14:44:e1:5d:d0:31:a0:16:81:
a3:b8:b1:e9:6e:54:97:4c:69:22:4f:06:0f:cb:04:73:3f:34:
07:b4:6c:3c:c5:50:08:8a:8c:ec:73:61:8b:fe:46:f1:10:b8:
bb:72:42:d9:98:85:e8:b7:a5:23:13:dc:2a:7f:d4:93:c2:2f:
6a:4c:1b:43:b5:b2:6b:a8:84:40:d8:47:63:0f:0c:30:13:b9:
37:79:c9:c3:86:a3:5a:5a:00:c3:b7:32:a1:f5:3e:7e:18:f9:
ff:d3:df:64:d1:01:77:01:ea:25:8e:27:f1:b9:b3:26:4a:da:
14:c5:31:a5:a2:eb:f8:03:12:73:9c:ea:1e:30:41:df:81:c1:
23:05:ad:34:09:c3:6a:46:0e:99:ec:36:58:35:c8:75:3f:c0:
8b:17:a6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org