Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4Jla3OeqVm9GRyP7piQfNFfFk6g.roa
File: 4Jla3OeqVm9GRyP7piQfNFfFk6g.roa (raw, json)
Hash identifier: EjLUChFviSK1lU5sp2lYu+aBT5qYDvtnFyPyBK7lXKc=
Subject key identifier: E0:99:5A:DC:E7:AA:56:6F:46:47:23:FB:A6:24:1F:34:57:C5:93:A8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E7F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4Jla3OeqVm9GRyP7piQfNFfFk6g.roa
Signing time: Fri 01 Sep 2023 10:16:08 +0000
ROA not before: Fri 01 Sep 2023 10:16:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 61.64.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7807 (0x1e7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E0995ADCE7AA566F464723FBA6241F3457C593A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:56:cf:53:01:91:e8:71:fa:45:82:5a:80:
28:ae:3b:d1:31:6c:bd:7d:b7:49:06:cd:c3:bd:fe:
23:1f:f2:6b:83:23:74:7b:74:87:96:87:92:f0:c8:
83:20:6f:88:07:8f:58:c7:47:a6:dc:a8:e1:fc:34:
a7:a0:11:ac:9d:de:02:5b:8a:6f:b0:c8:61:09:1c:
4e:17:27:75:5f:73:7c:38:43:32:8d:c5:43:e0:98:
21:a0:0d:a5:ec:73:5c:c9:37:85:2f:0a:e6:ca:08:
06:bc:04:f1:95:28:41:ec:3b:91:4e:03:cb:26:ac:
a9:6d:9c:ff:16:d0:d4:2e:cc:fe:5d:7d:ea:a9:a6:
38:b5:3d:4e:7f:8f:67:58:3a:49:c5:28:d6:15:74:
1b:08:d0:42:77:4e:2e:d6:8b:90:06:04:df:b0:6c:
4f:49:2e:2c:61:43:7a:54:b7:44:76:1b:57:5e:dc:
06:83:2c:39:a5:42:ec:72:09:3d:6e:70:ed:9b:8f:
8c:41:f1:e0:ad:ba:3f:a3:54:21:d4:80:e2:de:56:
9e:9b:e2:ac:1b:78:57:e9:5a:3a:39:17:42:34:ea:
8d:02:7d:c6:20:b8:7d:d9:97:48:89:2c:98:d7:10:
48:c5:59:ce:86:27:d9:26:54:44:dd:52:5b:85:d6:
35:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:99:5A:DC:E7:AA:56:6F:46:47:23:FB:A6:24:1F:34:57:C5:93:A8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4Jla3OeqVm9GRyP7piQfNFfFk6g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.24.0/22
Signature Algorithm: sha256WithRSAEncryption
22:74:eb:0c:19:f3:0a:a5:d3:f2:f9:55:32:e5:bc:0f:ce:a7:
66:9f:1f:c4:04:eb:8e:06:5d:56:96:c4:b6:c1:c6:14:11:28:
8a:d1:95:1f:e6:a3:66:f4:c1:ca:b6:7d:a6:b7:0e:36:b3:b4:
c7:53:e2:2e:5c:54:96:87:29:5a:c5:63:b3:a3:21:0a:e5:c6:
06:e7:27:bd:ca:cb:0d:4c:25:f9:d7:09:87:86:f4:a1:e0:72:
dc:4e:4d:b2:cd:5c:3e:cd:78:84:bd:15:ee:79:d9:6d:62:a8:
0d:da:7e:6d:74:98:5f:03:56:12:b5:f7:27:6f:3a:bf:8c:a1:
da:08:9c:04:bb:60:d8:3d:03:45:e3:f2:7a:d6:6a:a5:f4:30:
20:3c:c3:56:ad:f8:5d:97:64:0a:0c:02:43:f0:0c:ba:c1:78:
89:88:3c:3a:7a:3f:8d:c1:af:6f:de:d0:6c:b9:14:f0:3d:61:
2e:47:47:f5:0f:25:9b:9a:f8:13:be:50:d3:eb:dd:c2:da:79:
26:b4:5f:3d:5f:d8:21:26:6e:f7:0e:97:fe:65:cc:42:c8:b3:
cd:d6:ac:38:51:ef:d6:ec:1b:71:4d:51:40:81:52:9e:b8:e7:
8c:c6:8e:ab:4d:83:56:a1:8a:f9:79:13:1e:f2:2b:58:0d:96:
1a:03:df:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org