Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uz3Jac18vcsiXcvit-jxzDjMSts.roa
File: uz3Jac18vcsiXcvit-jxzDjMSts.roa (raw, json)
Hash identifier: 0fNJbbn+bmSfkm3d8Qoz8qKEiQA22FCwEyFOHcxnewE=
Subject key identifier: BB:3D:C9:69:CD:7C:BD:CB:22:5D:CB:E2:B7:E8:F1:CC:38:CC:4A:DB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DC5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uz3Jac18vcsiXcvit-jxzDjMSts.roa
Signing time: Fri 01 Sep 2023 10:15:16 +0000
ROA not before: Fri 01 Sep 2023 10:15:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 123.0.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7621 (0x1dc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:16 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BB3DC969CD7CBDCB225DCBE2B7E8F1CC38CC4ADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:6e:4b:27:61:3d:e0:55:e5:96:e6:ac:4c:
1d:aa:c8:5c:39:61:45:7d:97:f0:95:21:47:87:0d:
9a:ee:9a:4b:99:ce:e6:b6:3a:54:7a:43:97:77:42:
7c:b8:75:81:29:f1:f4:c1:58:24:e1:b6:82:c7:2b:
6e:75:90:31:8b:e6:e0:d4:40:41:58:e8:96:39:d8:
8e:6c:5b:a4:40:dd:ff:d4:a0:8d:55:08:f6:1f:35:
9f:c9:f0:93:36:46:61:fb:df:03:9f:aa:ec:cb:f2:
02:19:fe:df:36:92:c1:ea:43:3f:b4:58:09:41:2d:
c7:bb:e6:6a:73:61:ee:eb:e8:2d:f1:54:fa:d1:12:
5e:6c:1b:88:b9:d2:2a:93:73:2d:90:12:5a:2d:ad:
77:1a:35:72:84:4f:4f:68:59:96:ad:f4:2d:8a:c9:
50:da:d3:24:1d:53:f7:ce:95:3a:67:85:77:4b:25:
f4:89:10:d7:96:17:37:21:03:cc:d4:1e:79:a1:c0:
5b:22:0c:52:23:65:20:3b:7a:14:ba:4c:01:f5:0b:
61:f8:b7:0d:ec:29:58:e2:83:92:0f:2c:ff:1a:91:
1c:ef:14:45:ab:24:88:64:8f:82:d9:06:e4:9c:2b:
0c:41:9e:b0:46:c4:d9:26:84:d9:d9:b1:bf:8f:c1:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3D:C9:69:CD:7C:BD:CB:22:5D:CB:E2:B7:E8:F1:CC:38:CC:4A:DB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uz3Jac18vcsiXcvit-jxzDjMSts.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.42.0/24
Signature Algorithm: sha256WithRSAEncryption
65:1b:67:ee:fe:f6:9a:da:2a:30:44:05:e3:d0:d1:88:32:12:
14:35:cf:aa:23:4f:18:94:9a:f8:0e:6b:e3:7d:f3:46:ca:fb:
bf:57:c6:0e:aa:b2:f1:65:a8:02:5f:98:9a:a7:b3:bc:a2:3d:
d2:6a:06:b6:03:d0:d6:55:22:c1:f4:a2:83:a0:11:56:e5:13:
cf:a5:7e:55:99:b7:e2:a9:63:dd:07:3b:8d:a1:dd:c7:80:e6:
c7:8b:c0:43:9a:23:27:cf:16:30:38:6b:70:52:d8:11:1c:b8:
12:f6:c3:07:bc:2e:04:19:00:38:dc:ce:1b:94:8c:6e:af:d7:
77:e3:39:69:f3:2f:59:01:3a:19:33:4f:1a:06:12:4c:bc:2f:
6a:52:c0:a5:f6:87:1c:17:6c:72:01:a1:76:1c:c4:8d:54:93:
35:6b:ea:ee:91:9b:fc:32:2b:f2:14:f0:2c:af:ba:0f:9f:9b:
08:66:77:6b:b5:eb:0e:2e:9f:ad:04:9d:51:27:c7:0f:a4:7b:
68:ca:9f:8f:b5:d3:41:51:d9:b7:85:0a:1d:94:81:7e:dd:8c:
23:1d:d6:5f:cc:6e:de:10:52:f2:df:05:10:53:b8:d5:f0:f3:
e9:7b:03:a0:3b:5f:ff:b5:c1:17:25:16:0c:a4:19:51:1e:58:
d0:ce:a1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org