Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x0gcfy2Bhzmdw2R_vwXDWzV75wI.roa
File: x0gcfy2Bhzmdw2R_vwXDWzV75wI.roa (raw, json)
Hash identifier: BAkJcmSEZmAN7V4L9pqhI6zKnyuH8iqguVghEtj1MCk=
Subject key identifier: C7:48:1C:7F:2D:81:87:39:9D:C3:64:7F:BF:05:C3:5B:35:7B:E7:02
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DE4
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x0gcfy2Bhzmdw2R_vwXDWzV75wI.roa
Signing time: Fri 01 Sep 2023 10:15:25 +0000
ROA not before: Fri 01 Sep 2023 10:15:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 61.64.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7652 (0x1de4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C7481C7F2D8187399DC3647FBF05C35B357BE702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:43:44:4e:91:48:4f:03:4f:d5:dc:5b:32:f0:
d0:1c:da:ab:4a:fd:53:4f:10:7f:56:60:84:d3:28:
75:d2:dd:b2:c5:43:9d:79:77:9f:55:6f:55:d5:6a:
99:fa:9d:c1:b5:6d:ca:8b:4a:7c:36:94:a4:4f:0f:
0c:ea:64:a2:ef:79:ec:7b:43:09:00:44:6c:28:03:
91:66:4e:7b:dc:48:3e:5c:18:d1:3a:9d:91:6c:58:
43:84:db:68:1a:d5:94:87:e9:56:0e:53:8c:d6:8f:
23:dd:83:f7:f7:53:98:10:a3:b7:a0:11:f1:53:db:
b0:73:1f:1d:5f:94:45:a8:b9:0b:9e:64:9b:4b:f4:
15:0e:62:ec:34:a9:fb:d0:b6:12:cc:08:2f:1c:b9:
04:ce:9d:51:e5:f4:5a:42:02:01:f6:10:a7:f1:56:
ef:e6:37:d5:dc:de:18:4c:25:16:b4:3a:d5:c7:09:
28:e0:7d:f8:5c:f5:ab:93:5d:bc:2c:fb:31:1d:26:
ea:c6:93:7e:22:d2:d2:fb:d9:d2:ab:13:69:79:bd:
6e:15:a6:49:b9:a8:8b:d9:02:64:5f:1c:63:bd:fb:
20:33:a6:cc:2a:02:99:d9:bd:64:30:3d:f6:33:e3:
3a:f3:3f:63:4a:8b:a3:d7:e7:35:b7:ac:19:b0:e6:
90:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:48:1C:7F:2D:81:87:39:9D:C3:64:7F:BF:05:C3:5B:35:7B:E7:02
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x0gcfy2Bhzmdw2R_vwXDWzV75wI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.24.0/21
Signature Algorithm: sha256WithRSAEncryption
66:8b:c9:2d:01:66:78:f0:24:60:80:ce:c4:ba:43:f3:fe:0e:
ac:1a:1e:6e:90:39:04:ed:7b:6b:93:a3:26:e5:6b:15:32:b2:
20:f8:34:fb:00:7a:30:62:fa:00:5a:d8:55:17:49:a5:24:fe:
52:36:f7:b5:7e:07:f7:cb:53:de:34:41:63:0d:0d:a7:a5:79:
a3:fe:b7:c8:a2:07:11:8d:6a:7b:cb:ca:b8:7d:56:35:15:b2:
37:a1:34:cd:f2:fe:0a:6f:d5:7f:64:aa:a7:7c:35:fa:39:52:
3a:0b:e2:35:e5:7c:95:4c:1f:e8:05:dd:e7:cf:41:fe:87:83:
47:07:57:1f:6d:0a:01:11:61:b3:fe:84:33:89:11:64:6c:72:
55:1e:07:a7:92:0b:b1:ec:7f:60:c9:b3:4c:83:b6:e0:8c:d0:
0b:04:99:ad:01:09:44:c3:e5:53:c6:47:5f:46:55:a7:44:83:
a9:d6:5d:25:ed:bc:ec:f7:b5:61:ac:ec:7c:2a:2d:95:2f:28:
d4:4e:0c:64:0d:13:39:00:36:bf:67:53:e5:90:52:ac:09:b8:
32:75:1a:9f:7b:40:b9:60:7a:da:77:62:bf:34:7a:c9:ef:e4:
cd:1f:d0:3c:bc:66:c6:d4:c0:52:80:1b:82:4a:d6:4e:4b:36:
6a:c9:73:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org