Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uBZkdRy725L2Rbup0oroKvzMuV0.roa
File: uBZkdRy725L2Rbup0oroKvzMuV0.roa (raw, json)
Hash identifier: 9nPk/50onrBZpqRSXMOqJpES0qc7MUGg3yfMkR3BB6s=
Subject key identifier: B8:16:64:75:1C:BB:DB:92:F6:45:BB:A9:D2:8A:E8:2A:FC:CC:B9:5D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DDD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uBZkdRy725L2Rbup0oroKvzMuV0.roa
Signing time: Fri 01 Sep 2023 10:15:24 +0000
ROA not before: Fri 01 Sep 2023 10:15:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24613
IP address blocks: 122.100.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7645 (0x1ddd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B81664751CBBDB92F645BBA9D28AE82AFCCCB95D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:82:42:25:86:e5:e1:9d:2e:e6:67:d2:92:
22:7c:69:63:10:2f:41:e1:39:5f:97:6d:6a:97:f2:
17:86:cd:0b:b6:ec:99:dc:0d:13:3f:58:e4:44:df:
66:df:47:76:70:20:74:af:86:2f:9d:c4:ba:35:dd:
6a:17:5d:35:5e:fc:e6:4a:64:0d:50:e4:8f:f5:3f:
3d:5f:d9:e9:64:a5:a6:d8:5a:fd:19:b4:b4:88:4e:
ac:96:1b:2f:6b:57:66:4d:73:e7:d7:67:ed:98:8f:
7c:92:f7:12:dc:27:58:48:09:dc:9e:44:52:fc:a1:
f2:69:a7:aa:f8:07:69:2a:7e:27:e5:19:eb:4a:2f:
57:6a:ee:29:7a:5f:47:32:2a:ef:76:b0:11:2e:df:
3a:8c:70:b4:6e:6a:d3:3c:39:3b:1a:54:bc:94:69:
fc:0c:fb:83:47:01:9e:60:8f:b0:a7:d0:af:42:f8:
d4:0b:79:d8:5a:42:6b:be:a9:f1:4f:db:7e:a0:0d:
7a:4e:6b:b3:b5:89:e9:90:4e:01:d6:5c:c2:98:d5:
55:f3:8c:b6:c3:7d:9b:4f:9b:1c:78:3c:e6:e6:16:
b3:68:82:08:a2:75:77:19:3e:f6:f7:52:a3:2e:b1:
a3:a2:60:cb:f2:03:f4:2c:b0:05:8e:41:80:96:32:
38:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:16:64:75:1C:BB:DB:92:F6:45:BB:A9:D2:8A:E8:2A:FC:CC:B9:5D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uBZkdRy725L2Rbup0oroKvzMuV0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1a:6e:9a:5d:3a:92:27:e9:d1:2f:ce:71:ef:c8:58:46:c9:cb:
88:eb:86:42:07:3d:19:96:74:33:6d:e8:71:5c:7b:31:55:f9:
f8:a5:52:d5:e7:8f:91:83:84:6f:59:45:da:4b:2f:09:df:97:
98:17:83:22:ad:07:ec:d1:7c:20:35:e6:36:5a:79:d0:6c:39:
1b:33:b5:10:e1:d2:c9:c0:09:35:00:f9:a9:85:bc:52:82:b9:
d2:2e:c7:d5:75:93:7c:fe:1e:1b:5e:ca:42:fe:f6:4c:39:02:
5b:53:72:6a:87:92:4e:67:f6:45:30:db:53:40:dd:2f:df:de:
d6:53:c5:cb:54:7d:ea:c5:57:bf:74:6c:6a:54:c5:6f:15:41:
86:25:fc:3a:36:df:29:df:cb:6c:04:2b:cc:5c:26:2a:67:e3:
d3:25:ab:7e:d2:34:80:ce:32:25:13:3a:09:a1:41:15:47:a4:
97:a2:a4:b3:1d:f7:7a:b1:be:45:93:26:9c:9d:a7:3b:7b:da:
e3:88:64:f9:86:38:46:4c:82:e0:11:d0:04:19:76:bf:73:61:
9b:72:e1:bc:d9:bb:3b:a4:f2:7a:a9:43:77:37:55:16:11:4a:
02:e5:da:74:09:13:b2:21:43:dd:ad:a9:d7:42:07:20:b1:8b:
fe:1f:21:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org