Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5mjMr0eypUlJ4H7u1jaEowkdb_w.roa
File: 5mjMr0eypUlJ4H7u1jaEowkdb_w.roa (raw, json)
Hash identifier: AOwryd25IaAqQOE0zsMKNVw8jMseOXOW2nIy5L69vjM=
Subject key identifier: E6:68:CC:AF:47:B2:A5:49:49:E0:7E:EE:D6:36:84:A3:09:1D:6F:FC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DA2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5mjMr0eypUlJ4H7u1jaEowkdb_w.roa
Signing time: Fri 01 Sep 2023 10:15:06 +0000
ROA not before: Fri 01 Sep 2023 10:15:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 61.64.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7586 (0x1da2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E668CCAF47B2A54949E07EEED63684A3091D6FFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:8c:08:a9:9e:e1:0f:6e:7c:de:aa:f9:39:
b5:7e:be:40:e2:7c:8d:1f:3c:20:07:96:87:cb:7a:
c2:5f:81:6f:06:41:39:21:8e:9d:45:d7:02:7b:12:
67:4f:e9:5c:9e:d0:79:51:36:c4:91:4e:5d:7f:6b:
a0:1a:41:28:23:4a:97:cf:9d:e5:c1:0a:5f:9f:7b:
bd:18:3d:44:b1:9f:4a:4d:2e:ee:f0:a5:a9:f8:aa:
ca:75:26:cf:98:16:bc:bb:fc:16:4b:c1:d0:f1:45:
02:3a:3f:9d:43:df:25:f4:57:59:4a:18:a2:7d:c7:
2f:f4:ed:04:69:9d:50:a6:a6:71:2d:7b:e6:b6:ab:
9c:00:bd:e3:6e:63:5e:e1:4a:ff:62:ad:c6:62:d0:
bd:fe:85:46:5c:37:85:1b:3d:9b:ed:f6:a0:cd:13:
9a:73:19:0b:02:41:84:b9:b9:a3:b6:6d:56:53:67:
fc:fb:7f:44:15:1a:63:c1:9a:bd:f4:71:61:60:42:
a5:ea:ec:05:56:a0:c2:d1:24:ba:71:10:62:c4:53:
13:5f:60:57:37:8a:f2:48:9b:d9:e4:5a:04:48:c4:
31:f3:83:a6:f6:ca:00:ae:ea:49:81:8a:de:f1:eb:
47:ed:52:13:66:e8:c5:bd:f8:05:ea:48:dd:bf:92:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:68:CC:AF:47:B2:A5:49:49:E0:7E:EE:D6:36:84:A3:09:1D:6F:FC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5mjMr0eypUlJ4H7u1jaEowkdb_w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.8.0/21
Signature Algorithm: sha256WithRSAEncryption
89:24:9f:8f:dd:38:c1:e2:31:ff:29:e8:d4:34:95:33:dd:0a:
2c:df:01:ce:42:e1:9f:42:97:81:87:60:e4:b9:93:f1:99:02:
a5:c4:9c:f9:10:67:a9:30:70:81:39:a9:e2:2c:f2:d4:8e:ed:
9c:28:6e:39:ca:d1:11:ad:1b:6d:41:1d:9c:3f:cb:7e:68:5d:
df:98:84:c2:08:44:9d:ef:de:bc:70:87:de:15:25:5f:46:56:
e2:f4:03:f8:43:73:f9:3f:dd:86:dd:45:2f:a3:82:ed:d0:57:
a7:72:3d:8e:78:f2:1f:1e:b6:34:91:9e:87:a8:7c:0e:cc:a3:
04:24:eb:6b:02:7e:32:c3:49:1c:de:88:ec:12:a6:76:38:18:
e8:5b:49:25:43:c2:35:e5:b6:e8:8b:84:63:cb:84:c8:bf:78:
39:4c:13:e8:3c:14:84:0e:da:d8:e3:6d:dc:7b:58:32:24:3b:
6f:68:29:98:47:a3:42:de:18:8d:1f:75:34:86:29:bd:c3:df:
8a:a3:17:a3:fe:2f:da:28:ae:d4:1c:36:0d:f5:f8:a0:03:3f:
7f:b3:f4:7d:8d:c8:0b:d3:93:98:c1:38:45:4f:11:37:12:ad:
08:9d:66:24:44:83:99:fa:d3:6d:0a:f2:77:2d:76:ea:63:db:
1e:b7:3e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org