Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AHQHyzn1YEAaX_1_Eoiy6QB7ukw.roa
File: AHQHyzn1YEAaX_1_Eoiy6QB7ukw.roa (raw, json)
Hash identifier: ftaHhWBxGR53QnDfaWdK0zOFj8Km9GQszfplmO4RP34=
Subject key identifier: 00:74:07:CB:39:F5:60:40:1A:5F:FD:7F:12:88:B2:E9:00:7B:BA:4C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E73
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AHQHyzn1YEAaX_1_Eoiy6QB7ukw.roa
Signing time: Fri 01 Sep 2023 10:16:03 +0000
ROA not before: Fri 01 Sep 2023 10:16:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7795 (0x1e73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=007407CB39F560401A5FFD7F1288B2E9007BBA4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:87:08:23:a1:73:03:bf:4d:34:fa:61:5d:
85:d5:3c:d7:68:93:60:a9:c5:a3:14:6a:36:5f:11:
f1:b6:84:02:44:40:33:bc:f7:88:dc:a6:06:53:92:
fa:46:b1:74:50:0b:18:c1:8a:ba:5b:da:2b:f2:d6:
78:b2:23:15:c3:72:77:82:a6:75:d5:2b:66:92:3d:
dc:54:9f:58:59:08:1a:fd:75:2f:ab:6a:6b:86:95:
a7:a6:4f:05:89:f5:18:b9:5d:dd:83:88:d0:d1:f5:
d9:0a:66:1e:d5:b4:c3:a3:3a:96:ea:11:40:cb:ce:
3f:0b:c1:c0:fb:81:ca:30:7f:da:49:d9:6e:90:82:
20:9d:2e:e8:5c:18:7b:0f:21:de:5b:28:32:03:68:
ce:88:6d:1d:5c:3a:34:e7:9c:10:98:7c:f7:6f:9b:
2f:94:ae:7a:f5:39:91:ac:c1:e8:88:3b:de:f0:b9:
33:05:6c:c6:da:4a:92:03:0c:21:01:f5:4b:38:d7:
0e:16:5f:86:f7:ff:44:f8:d9:50:6f:0d:a8:41:92:
00:c7:1f:4e:75:81:4d:cf:3d:ed:bc:89:19:73:80:
b0:80:bc:82:c4:d8:5b:77:8c:62:53:1c:bd:c2:56:
b8:24:ec:f8:52:17:61:84:9d:65:e5:28:ec:73:f7:
f8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:74:07:CB:39:F5:60:40:1A:5F:FD:7F:12:88:B2:E9:00:7B:BA:4C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AHQHyzn1YEAaX_1_Eoiy6QB7ukw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.189.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:89:5e:5d:fa:7c:92:85:21:43:da:8c:b5:e5:2b:a8:33:f2:
97:d2:fd:55:92:d3:b8:08:f5:5e:f4:ea:aa:5d:27:21:fd:01:
7b:6e:7c:ca:90:09:23:11:01:76:d2:e7:8f:8b:d9:60:63:3d:
68:73:99:13:d5:75:c3:15:f7:c2:5a:72:10:a6:8e:10:79:6a:
d6:c8:8f:cc:47:f2:23:04:d5:26:3a:d3:f0:fb:1d:03:77:ba:
7f:b5:f5:d6:17:22:1b:2f:1e:5b:a7:ba:2a:90:e7:7d:23:c3:
c0:87:4e:2d:96:6c:84:ad:40:8f:32:37:92:ba:11:a1:59:b6:
95:c6:57:2c:b0:24:29:41:bf:6f:12:5b:de:da:b0:6b:9c:55:
0d:0e:d8:57:42:72:89:1c:66:ed:24:aa:a0:22:91:49:a6:ac:
8f:6d:df:d6:10:39:3e:1b:56:07:52:b5:60:8a:46:7f:db:eb:
79:14:f8:7f:a6:0e:e8:36:da:d3:0c:91:29:3b:0a:92:06:24:
3c:e7:e3:c8:a1:cc:91:6a:1c:7f:0d:c7:b0:6d:17:37:20:9e:
40:b9:3d:1e:54:ac:f7:c7:06:bb:76:2c:e0:44:3b:0d:e6:fc:
6e:88:95:48:59:fe:25:1b:ac:b5:24:e8:0b:99:b2:15:37:1a:
55:53:dc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org