Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sgdgCShwtTGQdHwGeu5f7wyniKg.roa
File: sgdgCShwtTGQdHwGeu5f7wyniKg.roa (raw, json)
Hash identifier: DCU+cobesjLteZa7UxKek8tiCxbgNnrZtW/U6ak/+2s=
Subject key identifier: B2:07:60:09:28:70:B5:31:90:74:7C:06:7A:EE:5F:EF:0C:A7:88:A8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E8C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sgdgCShwtTGQdHwGeu5f7wyniKg.roa
Signing time: Fri 01 Sep 2023 10:16:11 +0000
ROA not before: Fri 01 Sep 2023 10:16:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.144.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7820 (0x1e8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B20760092870B53190747C067AEE5FEF0CA788A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:de:f2:21:4f:17:a4:49:b3:f5:35:9b:0c:
88:d7:d6:51:85:d2:96:00:95:18:18:79:53:4e:2c:
f7:58:05:4d:3f:1d:08:9b:a8:09:44:ad:ed:bb:bd:
ec:d2:7f:a8:c1:6b:5c:b1:7a:15:11:5f:59:b1:3a:
3b:f0:31:58:65:2b:b1:1b:3f:12:5b:be:0e:a3:e5:
bc:91:8d:25:a1:69:c8:0f:be:2f:89:ba:69:77:10:
68:9f:2f:b4:a2:5a:85:7a:4f:b0:f1:15:eb:8c:b1:
28:f0:87:21:f1:01:76:21:97:b9:35:34:af:46:7e:
93:5d:d0:91:ff:93:d1:7b:e7:52:77:59:4f:a9:3d:
57:58:28:2f:68:e7:93:a1:25:15:8c:35:ce:a0:70:
6a:86:48:ea:af:39:b9:e1:b6:53:55:1e:18:03:f9:
6d:b4:18:5a:e2:5f:ec:82:9a:68:aa:84:57:54:40:
9b:c2:21:94:33:32:77:b8:3f:bd:ad:cf:b7:f7:fe:
8c:36:df:fc:5d:3f:01:08:5d:39:ef:bd:36:8f:00:
f6:03:3d:f7:40:37:44:9a:ca:5e:b4:21:42:d3:50:
bc:f4:8f:34:7e:6e:78:bc:e1:83:a4:19:87:3f:7a:
c8:08:19:ad:a9:c0:3f:17:89:44:ab:e7:2d:bd:1a:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:07:60:09:28:70:B5:31:90:74:7C:06:7A:EE:5F:EF:0C:A7:88:A8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sgdgCShwtTGQdHwGeu5f7wyniKg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.144.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:2a:3c:2a:fb:5f:f4:0e:e3:8b:a3:67:8e:31:d3:75:19:58:
b0:19:a3:71:41:e4:fa:1a:0a:00:0e:c8:a6:35:72:40:5f:0d:
e2:25:9b:36:25:6c:fc:7e:49:9a:12:66:db:97:ef:63:5b:89:
8a:0d:39:3b:a9:31:a1:4c:8c:72:f7:86:fd:50:6f:5c:c8:31:
b2:7b:15:0f:69:ec:1b:d6:71:bb:52:35:02:ce:4b:ab:89:bf:
fb:d7:dd:43:86:4b:70:32:65:e5:e1:12:d8:59:ca:0e:42:e3:
20:89:19:24:c0:ef:8c:ed:30:12:bf:b2:8c:82:e5:34:92:77:
7c:fc:11:d6:ee:db:65:23:ac:1e:fc:06:e7:94:89:81:6f:5c:
f9:7f:89:7a:0a:29:d7:2e:71:a9:80:e9:3a:f5:a3:a1:4a:91:
13:1b:a1:97:82:cc:80:4d:1c:a5:a8:48:89:92:c1:bf:64:9e:
63:4f:f2:7d:fb:f3:05:5c:ef:d4:ca:b7:ca:61:62:fd:61:7b:
38:af:50:b9:e2:4f:52:73:c1:52:a4:5e:a8:4c:69:18:fd:d4:
7b:38:08:6c:24:3f:9a:82:62:4c:d4:0a:01:84:5d:ad:bb:14:
70:c0:47:26:35:ea:5b:9f:70:7d:ef:37:c0:7c:07:ef:90:68:
ef:9b:44:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org