Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3NFLPqePDipgF2rQ1DIvATkAcuo.roa
File: 3NFLPqePDipgF2rQ1DIvATkAcuo.roa (raw, json)
Hash identifier: PSQ+cLSKp8opPd1Gfo5MmNTtcN8jSt6QmGm86pUjIgs=
Subject key identifier: DC:D1:4B:3E:A7:8F:0E:2A:60:17:6A:D0:D4:32:2F:01:39:00:72:EA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1EE3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3NFLPqePDipgF2rQ1DIvATkAcuo.roa
Signing time: Fri 13 Oct 2023 03:11:29 +0000
ROA not before: Fri 13 Oct 2023 03:11:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7907 (0x1ee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 13 03:11:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DCD14B3EA78F0E2A60176AD0D4322F01390072EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:af:0d:b9:fe:e6:5f:ae:7d:68:d7:3c:04:
27:6f:2d:4b:41:0b:5e:4f:68:88:9f:e5:e0:dd:95:
bb:c4:01:24:61:00:7e:70:7d:52:18:71:a0:47:a1:
e5:de:9b:ea:4e:43:3f:a4:36:dc:c5:35:99:67:84:
79:da:70:63:12:f4:86:b0:28:ff:40:e1:1e:24:76:
5d:53:60:00:43:f0:b3:e7:c7:43:b7:13:4b:8b:57:
6d:ae:c5:be:5c:66:a8:20:93:58:2c:50:d7:a7:d0:
d5:9f:f8:eb:77:64:e7:4f:39:1c:44:c5:89:2f:23:
50:d9:db:49:fd:06:27:42:4d:bd:81:52:2a:94:6d:
30:0c:0f:1f:de:50:33:68:22:54:4f:6b:3d:57:c7:
65:d9:b8:b4:63:59:24:45:2e:74:d2:0e:f6:ad:92:
22:06:41:1f:87:3f:6f:07:40:e3:ce:ce:5d:fc:4e:
cf:6f:c2:bf:dd:9c:51:80:9e:37:5b:1b:a1:93:75:
86:2c:98:55:fd:a4:43:ff:a7:c0:67:2a:2b:99:d9:
58:bd:52:f7:a9:bb:ca:cc:c6:d7:8d:a0:a7:fb:bd:
8e:a0:1f:ec:e4:0a:84:7f:12:71:c7:0e:56:bb:14:
ca:d7:a8:80:f0:1b:ee:ac:67:fa:79:c6:ef:fe:69:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D1:4B:3E:A7:8F:0E:2A:60:17:6A:D0:D4:32:2F:01:39:00:72:EA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3NFLPqePDipgF2rQ1DIvATkAcuo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.128.0/17
Signature Algorithm: sha256WithRSAEncryption
49:80:a4:74:aa:dc:3e:ac:b5:b8:6a:47:c7:a1:17:3f:a7:07:
29:e3:54:15:a8:5c:91:0d:da:0c:19:4c:bd:b5:87:e2:4f:7b:
41:3f:5f:48:91:74:71:97:e2:78:c7:22:ed:49:e3:8f:ab:b6:
4e:95:ff:7f:4a:4d:c5:b5:3e:39:e4:9a:c6:5b:58:21:81:07:
bb:7a:2d:c0:b6:5c:c7:6a:f8:47:2c:02:dd:1b:80:32:0c:a1:
6c:5f:03:f6:ce:3f:01:b8:af:68:b7:79:3e:05:e7:bc:95:b2:
44:39:fb:0e:2e:5d:d8:70:07:3c:19:4d:96:19:1b:f3:b5:55:
25:40:cd:f6:4b:50:fa:d9:2d:27:a6:46:97:ab:87:7a:4b:5e:
8a:d1:e0:3b:9f:ec:04:eb:2e:d7:5c:cc:1f:40:9e:46:52:4b:
22:0c:36:9d:28:29:2a:3d:b5:b2:68:7e:90:96:1a:3c:4e:77:
bf:cd:86:b8:cf:72:3e:f6:e9:78:27:95:c1:75:d8:d9:be:ae:
c0:2a:b6:ac:c5:9e:6c:ce:97:f2:8d:5b:9b:76:fb:ac:46:9c:
a1:55:9a:bb:05:a1:af:3f:9e:ae:4a:fb:95:4e:9d:e5:8d:70:
4c:0c:fe:5a:04:a7:ed:74:56:d9:62:cb:be:e5:f6:b3:7c:cf:
f4:75:45:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org