Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s4UuEnwT9UqZm4nMdsjDuLhytZQ.roa
File: s4UuEnwT9UqZm4nMdsjDuLhytZQ.roa (raw, json)
Hash identifier: sMcX69igmyzrsK35itRRiBptL+hZftXcfSg/JfMw6yc=
Subject key identifier: B3:85:2E:12:7C:13:F5:4A:99:9B:89:CC:76:C8:C3:B8:B8:72:B5:94
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E5D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s4UuEnwT9UqZm4nMdsjDuLhytZQ.roa
Signing time: Fri 01 Sep 2023 10:15:56 +0000
ROA not before: Fri 01 Sep 2023 10:15:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 61.64.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7773 (0x1e5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:56 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B3852E127C13F54A999B89CC76C8C3B8B872B594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:be:52:2c:4e:20:4f:9f:b9:3e:88:9d:0b:70:
f7:93:8e:74:7b:05:e6:13:9b:4f:96:e1:8f:e6:f4:
7e:49:57:f5:04:e9:95:ea:33:f6:15:40:3a:c5:d7:
5f:21:01:8f:38:74:a3:9b:ad:ee:b0:45:d5:ae:6b:
3e:ed:71:b5:27:bf:15:e1:7b:fb:6c:65:21:17:15:
2d:d6:c4:56:2f:c3:59:29:8e:c3:2e:c0:06:f7:5b:
85:5b:f5:d6:f9:eb:87:eb:8e:53:d3:c4:da:1a:ed:
7e:1b:70:0d:53:7f:8f:94:b6:0a:ba:b4:db:95:ac:
f4:a2:8c:04:ca:2f:08:dd:c8:5d:46:d6:26:7d:7c:
7f:a5:07:bb:2e:00:c0:4b:d4:49:0a:28:62:6a:a3:
72:07:7a:86:4c:ac:22:c4:88:09:9e:14:b9:10:ef:
ca:21:bf:53:98:91:5f:2c:2b:fb:89:d3:e4:69:24:
a8:29:ca:9c:4e:7a:8c:30:92:b1:78:6f:2d:be:d5:
19:e9:9b:6b:24:c2:ef:d0:f5:83:40:d3:94:5d:6f:
55:03:79:f8:f2:85:c3:7e:89:06:6f:02:d0:f4:dd:
ea:89:95:3a:20:cb:3d:70:26:e0:c9:f1:22:c5:ca:
b8:28:73:86:f2:a9:4a:02:8c:4e:30:29:0b:9e:f4:
0a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:85:2E:12:7C:13:F5:4A:99:9B:89:CC:76:C8:C3:B8:B8:72:B5:94
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s4UuEnwT9UqZm4nMdsjDuLhytZQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.12.0/22
Signature Algorithm: sha256WithRSAEncryption
03:76:d3:1f:e7:fc:8c:34:50:9c:d2:b2:c8:c6:93:31:09:a8:
5c:c7:7d:b7:d0:bd:a0:63:fa:34:8f:e4:26:e6:f7:23:47:f2:
93:64:3d:39:68:72:c8:ee:72:dd:0f:0e:08:01:db:70:0b:0a:
0c:98:d5:29:29:c2:c1:c6:a2:9a:53:95:25:87:f4:35:5b:61:
ca:40:55:67:d6:3e:03:a4:1c:98:3e:6b:6a:98:61:b5:b3:ac:
5c:d8:69:4e:21:c3:47:f0:47:fd:f4:f9:f9:aa:51:35:01:23:
c4:5d:38:0e:c4:0e:93:ff:46:06:bf:ed:d8:a4:bd:35:37:5e:
2d:ca:c6:2c:c8:56:26:78:06:1f:a6:63:a4:0a:4f:8e:f2:e5:
b4:77:71:04:60:1f:ec:dd:b9:8a:b2:bb:79:24:0d:cd:92:ef:
1a:61:08:7f:89:25:09:52:db:45:40:03:13:b1:13:cf:94:e7:
ad:eb:8e:11:c9:b0:76:1f:2d:f7:b2:65:36:75:db:12:e6:65:
ff:4a:a7:b1:a4:b9:10:78:0d:98:6d:02:1c:cf:8c:06:09:b4:
8f:f0:fb:f3:15:0a:0c:80:7a:2f:02:28:94:71:17:76:0f:0b:
57:92:98:6c:49:c1:5f:93:d7:e9:92:39:20:c3:50:1d:1f:81:
bc:74:87:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org