Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9h5nLx0d6vCqZC_wwhAiGbdaeTg.roa
File: 9h5nLx0d6vCqZC_wwhAiGbdaeTg.roa (raw, json)
Hash identifier: aEHctAiuZHmQoyOv8+2fG/jbDFX4eBNcHGUGHSXgsHc=
Subject key identifier: F6:1E:67:2F:1D:1D:EA:F0:AA:64:2F:F0:C2:10:22:19:B7:5A:79:38
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D62
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9h5nLx0d6vCqZC_wwhAiGbdaeTg.roa
Signing time: Fri 01 Sep 2023 10:14:44 +0000
ROA not before: Fri 01 Sep 2023 10:14:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7522 (0x1d62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F61E672F1D1DEAF0AA642FF0C2102219B75A7938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:f5:5d:84:a6:1c:93:c2:e3:29:03:03:1b:
0d:86:34:12:6c:e6:c3:71:69:a4:45:54:48:50:c5:
00:1c:a0:a9:40:d9:e2:1a:23:07:d7:95:1d:73:ba:
74:4b:11:42:84:35:a3:5d:04:99:91:44:72:79:b6:
a0:ef:cb:4d:b5:28:ca:2e:38:b8:30:b8:90:9c:41:
da:bb:a5:52:d4:f0:dc:e8:6f:ab:5e:b6:d5:0c:0f:
0b:eb:ea:2d:61:d7:06:02:2e:ac:76:dd:bd:be:17:
30:27:3e:15:07:b6:ce:75:bc:0a:7f:34:45:b1:11:
2b:eb:cc:59:ea:8e:2b:90:62:77:d9:23:61:bb:ca:
c2:4d:aa:6d:3d:d2:46:36:29:4d:58:9b:f5:3d:15:
02:c7:de:f2:10:84:e2:a1:2c:81:2f:d8:84:30:7e:
f6:17:f9:fb:74:c6:ae:8f:6d:33:d5:c3:8b:b7:0a:
e4:8d:46:fc:69:e9:85:97:73:42:63:cc:0f:c1:96:
bf:ac:e9:04:ab:a9:9c:d8:96:63:0a:b2:b0:0c:65:
86:54:4b:b6:3c:31:b8:10:58:a2:18:04:9f:9e:73:
ce:dd:f5:23:b3:53:46:61:10:91:04:a6:99:fa:2f:
e0:4b:90:b6:b0:69:7c:6a:9d:bc:ca:08:cf:65:70:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1E:67:2F:1D:1D:EA:F0:AA:64:2F:F0:C2:10:22:19:B7:5A:79:38
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9h5nLx0d6vCqZC_wwhAiGbdaeTg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.164.0/22
Signature Algorithm: sha256WithRSAEncryption
40:e6:74:24:8e:2d:40:d7:b0:1f:7a:35:28:60:d4:55:6a:6c:
83:08:b8:8e:5a:01:16:96:8d:14:13:be:7a:dd:1d:68:b9:ab:
2b:db:b5:b1:4b:5c:86:ef:e2:ef:57:38:78:44:20:7f:8c:5d:
52:78:ac:bb:92:ec:8e:57:93:8c:59:77:c8:49:95:a2:0d:8d:
be:a5:f0:af:a8:51:2d:6f:59:1d:59:89:db:48:bf:eb:3e:5f:
59:20:b1:fe:7c:17:7a:a1:7d:26:08:c5:f1:dc:0e:19:b0:f5:
d2:5b:f0:9a:63:5e:c3:95:07:4f:a2:de:8e:64:03:6b:cf:55:
e0:f7:3a:5d:d4:eb:0d:bd:64:04:93:60:69:26:c9:26:28:4e:
2d:dd:71:3c:9f:92:26:ef:e7:8b:7d:ca:0e:a8:a6:2f:5d:44:
29:04:34:55:8a:00:a0:4e:e5:8e:57:57:2e:c3:5a:d8:26:8d:
7d:1b:78:b4:cc:43:9b:f0:fb:95:7e:bd:35:81:a3:e9:62:9d:
a0:56:95:06:b6:ad:32:48:d9:59:c6:a5:d1:07:86:e2:0d:ec:
e3:a1:51:f3:b9:3c:79:b3:95:cc:e6:58:e5:bf:87:bf:95:df:
70:98:09:af:ac:38:67:11:44:c2:3f:8c:e3:0d:e7:64:37:1e:
ad:69:b4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org