Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DdzUNLA_9s79bxtfRF5FHlTp0u8.roa
File: DdzUNLA_9s79bxtfRF5FHlTp0u8.roa (raw, json)
Hash identifier: dKVSaulZHkj4/bAlHdEUU0cQrUIwJmYoMbofNsCcFjo=
Subject key identifier: 0D:DC:D4:34:B0:3F:F6:CE:FD:6F:1B:5F:44:5E:45:1E:54:E9:D2:EF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D8F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DdzUNLA_9s79bxtfRF5FHlTp0u8.roa
Signing time: Fri 01 Sep 2023 10:15:00 +0000
ROA not before: Fri 01 Sep 2023 10:15:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 61.61.208.0/20 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7567 (0x1d8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:00 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0DDCD434B03FF6CEFD6F1B5F445E451E54E9D2EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ca:6e:ea:0b:12:bb:5d:4f:1f:e1:0c:10:8b:
24:b3:38:aa:89:3b:87:8b:22:36:32:a4:15:b9:30:
84:37:93:f2:38:a6:b7:c8:64:3a:42:87:d8:0a:28:
27:18:06:e5:9d:58:36:25:31:c3:cc:16:ba:87:92:
52:56:73:6f:29:26:d0:30:83:7b:b1:5f:9a:8f:db:
27:06:50:e3:23:c1:5c:46:62:80:d2:24:f8:e8:fc:
c9:9a:0f:ad:5d:4c:fd:f6:c1:0b:b5:eb:ad:9a:60:
7a:73:a5:11:0d:f3:aa:b7:ba:3f:af:ee:f9:bc:a6:
bb:1c:4f:70:06:8d:a5:e9:3b:b4:a4:ec:cb:c0:aa:
50:2c:92:89:cc:76:ca:99:03:da:4f:8e:92:5a:03:
9a:2c:25:47:43:e8:e2:6c:5b:8f:bc:8e:f9:cc:75:
d6:1e:47:6b:69:12:31:54:4c:4e:43:9f:ba:fa:6a:
54:78:a2:ca:d6:0b:62:a0:97:ef:7f:ad:90:c0:63:
ce:d0:69:13:68:a1:da:b8:c2:8c:70:5f:08:0f:9d:
92:cf:31:a9:16:96:2a:cb:62:0e:0b:e6:d8:d0:bf:
41:a8:ba:ac:d0:0f:f5:93:26:f9:68:bb:0e:8d:6e:
3f:59:ac:68:b0:f0:fb:09:56:96:58:c1:c5:25:f5:
11:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DC:D4:34:B0:3F:F6:CE:FD:6F:1B:5F:44:5E:45:1E:54:E9:D2:EF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DdzUNLA_9s79bxtfRF5FHlTp0u8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.208.0/20
Signature Algorithm: sha256WithRSAEncryption
37:77:a1:fb:0a:83:5f:04:b8:01:97:b2:86:55:4b:d8:60:dd:
f1:6c:dd:bd:e0:7f:2d:55:10:10:24:ad:fb:47:5c:91:4a:f3:
06:8c:c3:60:a9:1e:7d:2a:20:4b:7d:a0:2e:12:2c:52:54:e8:
7c:b8:ba:97:d1:cd:8c:2b:c2:68:dd:e4:86:d3:1c:3b:bd:8c:
9f:82:ee:39:d7:b7:64:3a:ee:97:1c:83:5e:f7:2b:33:33:22:
c2:69:28:ff:67:90:b8:c7:03:00:9d:6e:15:51:d4:c5:4c:4b:
cd:41:ff:79:d1:bd:e8:00:d5:fe:18:b6:1d:c2:bc:94:ba:4a:
48:3c:23:1b:9b:8d:6d:08:20:8b:f4:5f:cd:47:30:39:32:ae:
fe:08:74:89:78:f7:31:b7:7e:f9:ab:6a:cc:7d:b5:83:ba:ac:
7a:aa:87:f2:1f:dd:a3:de:98:14:07:5b:a4:e6:b1:fa:5e:14:
47:a2:52:a4:db:b5:d4:9f:94:b0:92:fd:90:92:35:d2:49:cd:
4a:ca:5a:36:eb:9d:76:46:26:a2:32:8a:17:4f:cb:c0:a2:85:
51:82:64:fe:5d:a2:45:71:40:84:3f:15:72:f7:b4:40:44:06:
6a:c0:ba:aa:db:73:32:27:80:e0:23:bf:5d:55:f5:f1:66:ce:
24:f1:e4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org