Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yXwwLE60YPwZT8r4sMrbqiSX8Qg.roa
File: yXwwLE60YPwZT8r4sMrbqiSX8Qg.roa (raw, json)
Hash identifier: 5wsp/r78025V3eWVzBxZwC1ABugwY3NqS48pwFhTr1U=
Subject key identifier: C9:7C:30:2C:4E:B4:60:FC:19:4F:CA:F8:B0:CA:DB:AA:24:97:F1:08
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DAB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yXwwLE60YPwZT8r4sMrbqiSX8Qg.roa
Signing time: Fri 01 Sep 2023 10:15:08 +0000
ROA not before: Fri 01 Sep 2023 10:15:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 122.100.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7595 (0x1dab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C97C302C4EB460FC194FCAF8B0CADBAA2497F108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f0:3c:90:5f:e9:27:52:e9:1f:d8:a2:59:44:
89:ba:e2:70:f7:36:1f:13:e9:cd:2f:00:8b:fc:f8:
4d:56:f7:0a:e6:0c:fe:83:f9:eb:d0:3b:5f:39:bf:
5c:66:0a:e0:10:19:a5:0d:05:d6:eb:c1:d9:57:49:
5f:69:b2:5b:89:f5:3a:a2:75:c5:2b:9c:03:a3:3c:
e2:b7:e5:b7:f5:9d:9a:14:0b:02:e8:09:78:92:15:
ea:17:b8:b5:c2:72:d3:b5:29:db:40:26:49:ce:37:
72:75:33:30:a1:cf:12:40:90:c3:82:00:9e:c1:4a:
2f:b9:61:b6:79:66:44:e9:c9:b8:27:2c:c8:e7:20:
53:81:3c:c1:79:ba:be:23:9a:4c:8e:b8:e1:f1:32:
5c:fd:11:98:12:cb:35:58:c8:f0:b3:6f:c4:2a:d5:
5d:81:21:45:b1:59:9f:0d:0e:08:73:1a:df:2c:ec:
55:f1:fb:64:49:a9:13:08:e7:d7:cc:bd:d5:17:c0:
b0:c6:0d:d2:72:7a:16:b7:91:43:ed:00:39:70:2e:
22:e4:8d:ff:19:66:94:6a:b7:0b:ad:0b:b7:43:f2:
bf:6f:bb:95:e8:ce:15:63:36:cd:dc:a2:10:62:80:
2c:fd:85:de:2d:06:a8:99:e3:b5:13:0b:91:b4:19:
d8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7C:30:2C:4E:B4:60:FC:19:4F:CA:F8:B0:CA:DB:AA:24:97:F1:08
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yXwwLE60YPwZT8r4sMrbqiSX8Qg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.96.0/19
Signature Algorithm: sha256WithRSAEncryption
83:67:6d:2e:4e:c0:71:6f:61:21:bb:b8:11:84:c2:d4:58:5d:
f4:f6:69:f3:f4:ab:de:95:55:dd:0f:9f:69:d1:d6:a9:97:23:
e4:ad:d3:ce:ea:c8:12:24:48:21:7b:71:d3:2c:4b:80:f1:7f:
4c:98:f7:2b:c4:f6:ba:76:58:d6:4e:18:d6:57:0b:a5:71:c6:
5d:5c:5c:11:33:f5:31:af:2e:e5:c7:d9:51:42:32:11:88:e3:
88:b3:a6:89:7c:0b:fc:ed:b7:57:5a:5e:c3:3b:e5:6c:07:ca:
46:ff:04:d1:b1:7b:f1:86:3e:92:df:0f:b8:21:ed:dd:5e:a0:
9b:87:7f:74:3b:31:7a:a0:36:fc:6e:53:ae:95:f5:05:c0:a2:
2f:53:9d:e0:52:d4:7c:71:64:7c:f1:49:e1:8b:a0:6a:3f:70:
2e:bd:5c:e9:8b:84:8a:a1:17:b8:60:0e:15:df:94:84:05:35:
80:f0:69:9e:cd:c4:a8:0a:72:d4:d1:8f:39:5c:4b:1a:91:af:
c9:a1:fe:e3:f9:a7:b5:75:c0:ec:2e:a0:37:04:02:15:f0:4a:
c1:4a:9a:2f:a8:39:57:0d:a6:74:e4:18:c1:73:ae:70:4e:36:
f2:98:06:30:30:98:ba:ff:aa:e8:8c:33:d2:bb:8a:dd:d5:ab:
d0:af:c1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org