Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1irx6NPQCs8naxHfKVbbZwS2Tt4.roa
File: 1irx6NPQCs8naxHfKVbbZwS2Tt4.roa (raw, json)
Hash identifier: yfLFyG15G4UvYzyRThm4Ka3J0YElQUuLcvd7i2qnnBU=
Subject key identifier: D6:2A:F1:E8:D3:D0:0A:CF:27:6B:11:DF:29:56:DB:67:04:B6:4E:DE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E6A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1irx6NPQCs8naxHfKVbbZwS2Tt4.roa
Signing time: Fri 01 Sep 2023 10:16:01 +0000
ROA not before: Fri 01 Sep 2023 10:16:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7786 (0x1e6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D62AF1E8D3D00ACF276B11DF2956DB6704B64EDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d8:07:5c:ff:ec:14:2a:d6:44:3e:b1:b2:e4:
e4:9b:5f:f8:a3:e7:2a:10:d6:36:61:05:93:b2:1a:
d7:bf:59:76:51:b5:73:d9:c4:ef:07:35:82:10:47:
2e:02:66:ec:62:d9:6c:1a:7e:a7:1f:35:5d:7a:2d:
91:26:92:06:9b:46:90:d1:01:bd:74:74:84:95:fd:
a8:1a:3f:3a:bf:11:65:11:a2:f0:d6:50:c1:bd:5b:
e2:23:13:20:b4:31:09:9c:f9:03:2a:72:3b:ca:18:
75:cd:08:52:03:84:df:f8:5e:f3:54:90:c1:04:64:
1a:90:ea:db:5d:13:b2:79:8a:80:c5:d4:bd:1e:aa:
64:1b:68:22:79:e6:f0:59:b4:1f:cb:0c:3a:19:11:
33:40:3f:1d:1b:46:d4:82:11:f0:a4:9b:fb:69:70:
d5:d5:6f:5b:66:db:26:9c:b7:41:d2:5b:2b:ac:33:
50:9c:af:67:45:65:1b:e7:63:71:bb:d6:97:7c:03:
3b:a4:34:99:db:48:6e:3b:bd:af:cb:63:cd:cc:12:
4b:10:08:11:5a:69:0f:4b:2b:0d:0c:ed:83:77:81:
f7:e8:49:02:47:f9:3b:f4:98:25:a0:67:61:92:32:
52:cf:4b:25:1f:be:7d:a0:32:ec:b8:64:2e:b2:52:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2A:F1:E8:D3:D0:0A:CF:27:6B:11:DF:29:56:DB:67:04:B6:4E:DE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1irx6NPQCs8naxHfKVbbZwS2Tt4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.206.0/23
Signature Algorithm: sha256WithRSAEncryption
84:8e:87:e3:d4:e0:3d:08:41:63:6c:5d:8f:01:92:7d:a9:c3:
58:44:ff:b7:4a:c1:57:5a:4e:f8:86:f6:f8:3a:f0:2d:4d:aa:
9d:8c:db:ae:77:e3:9b:e5:76:4c:b9:75:e6:3e:6c:78:62:fe:
d0:3c:b7:e6:a6:e6:c5:a5:c7:0d:c5:6f:55:be:37:32:e2:a7:
79:ad:bf:da:e8:a1:56:79:1a:12:a6:5a:ff:72:e6:3f:37:ec:
43:2b:02:d8:3f:1a:06:44:fd:f4:78:89:74:23:e7:04:1d:b8:
79:27:d3:00:f5:04:9c:9e:80:32:19:9a:1c:2b:f6:f6:6d:a7:
23:9d:f3:be:91:e4:04:7a:38:ff:a8:86:25:bb:5c:fd:87:f9:
16:e4:ed:d2:22:43:33:49:f5:17:bf:3f:dd:38:17:2c:47:09:
34:b0:26:6e:44:25:4b:1b:fe:b2:32:92:f6:2d:fd:69:4b:17:
b5:8b:e0:af:48:e9:55:c9:c8:f4:ee:13:8b:d8:66:75:9e:49:
eb:a6:ca:53:1e:6d:1a:9d:89:17:bc:df:c4:f9:d7:65:aa:ee:
3b:2d:11:ce:e3:38:08:4b:16:fb:79:fa:12:08:30:af:9d:8c:
78:6b:6a:b7:8d:61:5b:2a:fc:e4:66:62:44:26:0a:70:98:1f:
42:67:74:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org