Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-U8nr_qNoQ7IhWceJvmusd2Fm60.roa
File: -U8nr_qNoQ7IhWceJvmusd2Fm60.roa (raw, json)
Hash identifier: Z+Gf0bQgCHcbc3uQtLTT54MUoyq32fgAYY0EqHLIZAc=
Subject key identifier: F9:4F:27:AF:FA:8D:A1:0E:C8:85:67:1E:26:F9:AE:B1:DD:85:9B:AD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D54
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-U8nr_qNoQ7IhWceJvmusd2Fm60.roa
Signing time: Fri 01 Sep 2023 10:14:41 +0000
ROA not before: Fri 01 Sep 2023 10:14:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7508 (0x1d54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F94F27AFFA8DA10EC885671E26F9AEB1DD859BAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:fe:96:88:91:2f:91:b1:9e:f5:b8:4a:6b:
97:a7:51:25:9c:e1:25:17:8b:c6:42:7b:5f:5f:3e:
3a:95:9f:11:ab:93:07:bc:37:de:d5:b0:05:5c:68:
2a:c5:cc:2a:d2:d0:ef:1a:e1:c4:c5:5e:e8:92:65:
e4:e4:bf:f3:95:d8:3b:53:6c:bb:61:fe:2f:db:b8:
9e:c2:7f:02:b7:7d:c7:ba:e3:7b:69:d4:94:94:00:
c6:eb:eb:f4:a0:44:fd:e6:7b:e1:71:9e:64:67:d4:
ea:ad:b0:b0:ca:e8:2a:22:82:fb:28:9e:03:33:c4:
34:0d:25:50:4a:7c:bc:f6:b5:e6:b1:e7:bc:fb:0c:
64:c2:67:91:71:57:20:5c:a4:0c:a8:03:10:e4:f1:
5f:71:50:5b:d6:a7:e8:07:fc:af:db:90:0e:52:3e:
79:22:f8:03:84:6a:91:31:88:3a:49:65:f9:15:63:
73:49:bb:ba:75:2a:23:16:bc:6a:0e:38:65:14:20:
a1:3c:b2:e9:6d:5a:fa:6e:c9:ea:cc:24:4c:0c:34:
39:93:ef:60:d3:38:aa:b6:3e:25:ce:c1:42:d1:90:
c5:54:33:cc:ea:43:9e:2f:c3:d3:da:e4:ce:96:25:
54:0b:ce:a6:47:2f:93:62:bf:c2:45:00:b8:05:17:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4F:27:AF:FA:8D:A1:0E:C8:85:67:1E:26:F9:AE:B1:DD:85:9B:AD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-U8nr_qNoQ7IhWceJvmusd2Fm60.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.32.0/21
Signature Algorithm: sha256WithRSAEncryption
27:3e:fe:00:04:73:35:3b:9b:22:7f:09:79:c4:9c:8e:df:f1:
0c:23:2d:ce:f3:98:c3:e1:f6:52:ac:ce:97:19:71:53:f5:4d:
bb:0c:9c:b5:c1:5a:9e:ed:fe:4e:d0:4d:5d:fa:a4:5e:e7:5d:
30:e1:a5:ca:20:8a:4d:d0:60:90:61:ff:d9:59:44:42:57:dc:
a4:de:6c:8d:49:9b:65:05:a5:b3:89:37:e3:37:48:43:1e:d1:
9b:fb:0c:41:82:24:c9:61:a9:1f:c5:60:65:fe:27:de:6a:04:
eb:8a:b6:5b:58:c2:e0:b5:78:81:a4:13:8d:35:16:34:c5:e3:
fb:72:96:d0:09:c8:96:07:f8:77:e2:71:bb:3d:bb:c1:2f:38:
e6:90:c3:29:be:3c:4e:8a:8b:4c:82:1d:77:1f:da:cf:1c:37:
32:72:36:ee:db:17:a0:b0:73:02:d8:26:d2:d0:2e:8e:71:90:
b6:63:e7:c8:7e:96:bb:90:0e:e8:22:fa:4c:94:c4:97:d7:2d:
b7:12:dc:89:58:ea:dc:c5:53:d2:a6:fc:ac:08:20:b8:a4:3c:
06:a7:51:89:c0:8d:93:79:6c:de:aa:e0:72:de:50:a3:a4:10:
34:e7:01:86:a5:fd:dd:7e:43:45:06:25:02:0c:4e:07:2e:bd:
c6:93:2f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org