Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tqPnDu-eyqz98eKvFKVxzlwkWqU.roa
File: tqPnDu-eyqz98eKvFKVxzlwkWqU.roa (raw, json)
Hash identifier: +Yzuuj70qHD5N7uCM79xvTv64RoRvRovYsWf8Sv18Bw=
Subject key identifier: B6:A3:E7:0E:EF:9E:CA:AC:FD:F1:E2:AF:14:A5:71:CE:5C:24:5A:A5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E59
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tqPnDu-eyqz98eKvFKVxzlwkWqU.roa
Signing time: Fri 01 Sep 2023 10:15:55 +0000
ROA not before: Fri 01 Sep 2023 10:15:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 61.61.208.0/21 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7769 (0x1e59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B6A3E70EEF9ECAACFDF1E2AF14A571CE5C245AA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:2d:ff:fe:4b:5d:b5:ed:0e:c8:e0:62:73:
73:04:02:47:e1:bc:79:29:0c:3e:bb:2d:2e:ce:76:
18:4b:4d:7c:55:91:1a:6b:f5:d2:f1:a9:d1:70:f4:
13:e8:96:81:ad:e1:07:06:53:ff:4a:97:23:cf:11:
41:b5:fa:2d:97:ed:fa:04:ae:01:39:06:c7:ef:39:
0b:83:c3:82:f3:55:2c:d2:e5:70:0c:f8:0f:5a:7d:
6a:d2:83:85:b6:a5:b1:92:ab:ed:fa:c1:92:1c:1c:
46:64:a8:6b:15:4d:3f:5b:bc:31:19:b6:6a:68:11:
e5:75:0b:58:5d:e1:86:0c:fc:05:c0:d1:3d:1e:be:
64:e3:99:d3:28:57:b7:72:b6:bb:44:78:33:cb:b0:
45:83:2c:e4:2d:15:08:04:58:d3:0d:81:c9:82:ce:
57:4b:bf:c6:8c:32:f8:41:5d:39:7a:3a:7b:49:d7:
5b:57:57:07:fb:79:a3:62:df:78:84:f2:1b:d1:f6:
30:2f:7c:b9:d0:fc:89:c1:be:25:ff:c2:0c:7e:10:
c1:ce:7e:c3:83:19:7c:98:67:70:d2:3f:d5:d1:b0:
8f:60:44:23:7d:09:2b:1b:b3:6d:cd:b4:9e:c2:cb:
97:f3:33:d1:c8:be:e9:1e:4c:20:7d:0d:ff:57:16:
40:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A3:E7:0E:EF:9E:CA:AC:FD:F1:E2:AF:14:A5:71:CE:5C:24:5A:A5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tqPnDu-eyqz98eKvFKVxzlwkWqU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.208.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:e7:d7:7a:db:f0:d8:f8:10:bc:c5:3a:51:3f:6c:1c:8c:6a:
f1:46:ca:30:59:b8:6d:c8:34:0a:a9:6d:3b:d1:89:94:ba:69:
0a:ac:65:48:eb:82:dd:b1:96:15:94:a4:f7:ea:24:a4:01:fb:
51:40:00:57:fb:df:df:37:92:45:35:53:45:5f:a5:60:ab:fd:
59:e7:be:e9:ee:02:c2:c6:b8:80:1c:77:03:bd:f8:96:cc:68:
a1:df:c7:4c:0e:4d:dc:2e:45:5a:f4:87:cb:90:9f:24:53:e8:
aa:e0:30:a4:2d:b3:5d:d8:cc:7c:46:ec:36:74:2c:95:20:38:
0d:e6:7f:c2:4f:a2:82:6c:cb:4f:95:56:d1:89:68:03:bd:6e:
5f:09:81:2e:91:06:83:43:cf:22:79:cb:19:05:db:c3:f8:1a:
cd:ae:41:c7:00:ca:7e:c6:d4:f1:9b:9a:a2:66:1b:32:c5:6a:
fc:29:9e:a0:b2:cd:c0:09:9d:f0:9b:2e:e7:3a:14:c8:88:33:
41:7e:5c:f1:61:ba:4d:d4:af:76:6b:b2:28:d9:6a:ed:d6:c0:
ea:18:02:f8:8d:1b:9b:10:8f:3c:be:69:2f:95:64:8c:a1:1d:
6e:4e:5c:5a:f4:5f:e7:ef:2e:1b:ff:bd:8a:f5:59:ed:f0:09:
47:31:bd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org