Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yuNlZ_jqi87vCdYFGWBRD96fOLo.roa
File: yuNlZ_jqi87vCdYFGWBRD96fOLo.roa (raw, json)
Hash identifier: r0ULzBfH9YUJnB/wydNFnCwG7Tqo6SeSEo0vdXxnSfg=
Subject key identifier: CA:E3:65:67:F8:EA:8B:CE:EF:09:D6:05:19:60:51:0F:DE:9F:38:BA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1EA6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yuNlZ_jqi87vCdYFGWBRD96fOLo.roa
Signing time: Fri 01 Sep 2023 10:16:19 +0000
ROA not before: Fri 01 Sep 2023 10:16:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4662
IP address blocks: 211.76.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7846 (0x1ea6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CAE36567F8EA8BCEEF09D6051960510FDE9F38BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ff:14:96:18:15:d3:51:20:01:bb:fc:91:09:
15:06:46:01:eb:10:ae:fd:71:0c:54:9f:c6:70:d2:
30:d6:ec:bc:07:76:bf:62:d6:ee:91:41:ae:8e:bf:
78:c0:00:0a:63:71:7a:0c:33:bf:f7:29:85:ab:a9:
19:eb:4b:39:5f:35:77:c5:46:23:13:af:40:ed:47:
f5:69:1d:7d:ad:40:ee:5d:de:31:b4:56:d4:d8:7a:
af:e9:9f:6a:2c:c8:df:b6:b2:6e:3f:3a:08:db:c8:
6e:81:2b:5f:f2:78:f8:2a:66:44:08:a8:e8:14:5e:
0e:5c:f7:e3:77:80:62:e5:1f:e7:b1:b1:86:82:ac:
ee:38:5a:98:a7:de:07:26:1c:ab:81:6e:c3:5b:ce:
8f:a8:95:66:c3:55:62:6e:bd:fa:5a:59:af:57:ad:
5b:48:98:52:ff:ca:45:2a:31:16:bc:08:f0:e1:67:
0d:91:c0:90:9a:e3:aa:8b:01:ff:4d:f9:8d:16:8d:
af:fb:82:15:e5:42:1d:dc:28:d1:09:1f:f3:05:80:
29:33:7d:b5:aa:54:e5:61:7d:18:39:f0:0c:d9:c5:
d9:57:fb:61:37:5e:ba:89:35:8e:ab:95:9f:f0:70:
83:73:d9:31:0b:ca:0a:24:a4:59:d2:5f:30:31:3d:
7f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E3:65:67:F8:EA:8B:CE:EF:09:D6:05:19:60:51:0F:DE:9F:38:BA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yuNlZ_jqi87vCdYFGWBRD96fOLo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:95:a5:4a:72:5b:b2:70:ce:26:66:13:dd:dc:b3:40:1d:fd:
36:8c:0d:81:bd:be:4c:2f:63:74:8c:21:9c:f9:a2:8d:29:a0:
0c:e0:cd:07:cb:78:b4:84:e6:06:db:ea:81:6e:ee:ae:81:bb:
59:8b:6f:a2:b9:ae:c2:0c:93:09:10:53:c3:ef:de:95:ee:b2:
30:f1:2e:c5:92:bc:58:d0:93:b5:5d:f2:bf:30:62:e9:56:73:
b9:f0:29:ba:63:de:d0:1d:f3:62:c4:9e:72:1f:ff:62:99:c2:
2b:e5:ea:61:2e:29:be:b1:8b:40:32:d6:d6:65:23:73:57:d9:
7a:62:53:60:1b:65:1b:50:db:3c:51:7a:75:65:a4:04:d0:ad:
69:4d:26:d8:f3:d8:cf:d8:a6:24:ce:67:c6:57:c1:1d:1c:b1:
3f:cd:13:fb:5d:44:da:7a:c0:cb:26:c2:63:76:8c:5a:1f:b4:
7f:dd:08:12:fd:d0:fd:26:b7:f4:b4:a0:d8:fb:5c:65:c0:ba:
49:35:5f:ca:3e:2b:83:83:b2:8f:aa:00:52:b7:b1:cd:e1:26:
80:e3:7f:94:9b:27:50:14:d5:c2:6a:8a:c1:b8:2c:52:9c:e9:
c0:3b:bf:be:18:e2:7a:02:37:5b:9c:01:3c:dc:54:fb:d7:3f:
69:a9:d9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:22 2024 by rpki-client on console-ams.rpki-client.org