Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x2R7gMRYFAEL5ymXQ6Ld6bXuGhA.roa
File: x2R7gMRYFAEL5ymXQ6Ld6bXuGhA.roa (raw, json)
Hash identifier: ir9hAKH7jvqZVFZgaO0OnwYnt/rG1RswE93OOZjwEiE=
Subject key identifier: C7:64:7B:80:C4:58:14:01:0B:E7:29:97:43:A2:DD:E9:B5:EE:1A:10
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DF3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x2R7gMRYFAEL5ymXQ6Ld6bXuGhA.roa
Signing time: Fri 01 Sep 2023 10:15:29 +0000
ROA not before: Fri 01 Sep 2023 10:15:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 61.64.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7667 (0x1df3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C7647B80C45814010BE7299743A2DDE9B5EE1A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:f8:44:2b:2c:2b:56:e0:8a:cf:9c:72:b1:
26:82:54:a1:44:5b:36:f2:06:41:9a:0c:d0:a9:cf:
a1:5a:0f:90:90:53:84:fd:c0:6a:95:eb:cf:f4:a8:
76:d8:e2:58:c8:f2:cd:2d:b3:c8:08:a3:79:80:16:
aa:55:00:53:d8:8c:52:11:03:8a:9d:28:90:01:9e:
fc:5e:b6:ef:9f:64:db:ee:77:2b:d8:94:72:9d:d4:
f0:7d:05:f2:d1:05:20:4b:bb:0e:9b:bb:74:dd:3a:
1a:4c:01:56:6c:fa:ba:1b:b3:0e:1a:e6:32:8a:45:
22:0f:34:95:47:b0:44:7b:3a:40:4d:f1:bd:62:eb:
54:ed:06:b4:da:74:55:e7:64:67:27:be:48:8a:ea:
46:cc:99:82:ff:e7:77:77:b0:71:85:d4:4d:3c:10:
b0:3c:cc:cd:f9:d3:43:01:c1:ff:a8:e5:65:41:d4:
bd:31:72:4e:71:19:93:a4:36:f8:f1:95:bc:21:67:
0d:7f:5e:2d:77:b5:ee:a1:a1:c2:a1:11:48:62:f4:
8e:f4:c8:82:ee:8a:3c:15:2b:4e:93:94:ca:f3:73:
98:60:fd:d7:6b:ae:c9:50:3e:56:3b:a3:dc:3f:b3:
28:ee:7f:97:eb:47:59:b6:e0:97:2e:f5:14:2c:18:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:64:7B:80:C4:58:14:01:0B:E7:29:97:43:A2:DD:E9:B5:EE:1A:10
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x2R7gMRYFAEL5ymXQ6Ld6bXuGhA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.28.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:fa:3d:be:07:4b:b2:dc:8b:bd:9f:c9:a6:72:d6:96:be:d2:
3f:e2:53:3c:56:26:09:11:2d:64:c9:e1:99:e1:44:62:d4:10:
69:c8:66:f4:ae:62:dc:27:9a:cb:79:f1:a2:db:34:c0:bb:56:
34:23:77:8c:b1:46:3a:8f:e3:da:b4:f1:d4:15:17:fe:2e:3a:
70:e1:f7:e2:58:ca:a3:69:2d:7d:94:cf:7b:43:2d:9b:7a:2f:
7c:5c:8f:00:ff:17:45:4c:6c:e8:cf:da:46:86:cd:67:0c:af:
74:25:cc:20:cc:a6:ef:f1:49:b3:b7:80:2e:e7:5d:ba:f8:15:
ab:b5:44:4a:18:ea:40:20:15:df:9b:a9:2c:e8:e1:60:8d:42:
6e:9e:2d:4d:03:6f:f0:82:fb:bb:0f:e7:45:78:65:08:6b:6c:
05:23:00:a0:bb:2e:36:bb:09:f9:b0:25:c1:4e:40:8b:0b:07:
70:9f:0f:b9:c3:ca:c1:60:44:65:07:d1:ff:15:ca:02:a0:00:
d7:90:d8:b1:92:f3:58:ef:00:6c:40:11:bd:b9:cf:36:8f:be:
cb:56:47:d6:24:ba:b2:c8:f8:a4:3e:f8:20:41:18:59:0b:ec:
79:c2:4a:e3:2c:58:8f:0f:1b:3a:3e:65:a4:b2:c4:96:cd:66:
2c:af:a0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org