Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FYA8kVlmdzjZ9lY9ThPgF0HA9Qc.roa
File: FYA8kVlmdzjZ9lY9ThPgF0HA9Qc.roa (raw, json)
Hash identifier: yvArUOPf5R577XgVpjhENRUFNn/PU3ZlyvNJgPTTsOk=
Subject key identifier: 15:80:3C:91:59:66:77:38:D9:F6:56:3D:4E:13:E0:17:41:C0:F5:07
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E24
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FYA8kVlmdzjZ9lY9ThPgF0HA9Qc.roa
Signing time: Fri 01 Sep 2023 10:15:43 +0000
ROA not before: Fri 01 Sep 2023 10:15:43 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 124.6.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7716 (0x1e24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:43 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=15803C9159667738D9F6563D4E13E01741C0F507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:df:f9:4e:00:22:28:55:5d:33:d8:83:30:
e4:4c:a6:c6:2b:70:68:8a:4e:77:85:06:a0:86:25:
17:b0:34:50:bc:03:d9:75:bb:45:62:ff:75:e1:c0:
45:d3:41:03:4a:71:fb:34:59:9a:12:b9:c7:cd:61:
b5:de:88:1c:c0:aa:ec:a6:23:42:3c:2c:d5:b3:11:
2f:ce:11:86:bc:65:af:52:42:6f:8f:6a:6a:87:d5:
e7:cb:52:2b:74:ae:27:1f:dc:83:6f:c1:93:40:58:
e0:15:09:d2:4c:50:06:ad:13:10:ea:82:df:f0:a2:
f6:39:4e:9c:e5:d3:89:dd:55:96:61:ba:06:9b:60:
c1:a0:4a:65:0e:bf:ed:65:d4:48:7c:75:42:af:46:
b9:63:10:b3:c4:73:e7:f3:e7:c8:24:6d:bb:19:38:
d2:b4:d9:6d:b9:c4:e9:55:6b:d0:6b:9d:15:e4:f7:
d8:1f:d7:50:d7:91:e4:eb:77:e3:d2:33:ba:5e:61:
a9:09:92:b9:db:80:ba:d7:ca:8e:18:2d:b4:fc:94:
29:88:73:16:6e:11:b9:6f:1d:03:79:78:a9:12:86:
51:6e:51:d3:ca:31:ff:99:33:fe:8f:07:f3:78:6a:
03:c2:1f:90:a0:df:29:de:9e:cd:39:fd:f6:3d:6f:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:80:3C:91:59:66:77:38:D9:F6:56:3D:4E:13:E0:17:41:C0:F5:07
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FYA8kVlmdzjZ9lY9ThPgF0HA9Qc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.16.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:a9:69:04:90:ca:9f:08:09:66:83:b8:a4:47:c7:eb:b9:95:
e0:54:97:af:fa:b4:6c:93:36:ab:5e:79:46:f8:49:29:8e:c5:
7b:c3:86:e0:64:a5:6c:cc:79:0a:42:64:51:eb:65:ce:32:f8:
b6:95:2a:29:30:e1:5c:48:f2:23:f5:4f:84:0b:74:af:a0:4e:
05:32:25:a2:1b:84:e7:68:ed:84:b4:13:99:9b:9c:3e:c1:82:
d5:95:fa:4f:c9:d2:7d:8b:bb:0e:7d:2a:45:24:eb:59:e4:3c:
8a:45:1d:66:94:b9:93:e3:11:87:d9:e7:77:c5:6a:b7:dd:7a:
da:2e:c0:94:62:28:a0:12:e5:a4:d7:3b:8d:00:be:56:22:36:
70:2a:6a:25:a8:0d:b5:04:ab:10:10:2f:9a:c8:1d:ca:97:b7:
71:64:cd:76:fe:84:47:55:d2:34:26:cc:a7:24:06:cf:ed:8d:
32:ee:98:e2:78:06:04:7e:8b:10:d7:d4:eb:86:51:a3:3b:70:
29:6e:93:2b:38:08:23:02:12:56:6e:f2:b0:f6:8c:e9:59:a8:
23:0a:f6:bb:b7:ce:a5:ad:39:de:06:7e:de:cd:64:80:88:ed:
77:c9:92:93:3f:68:a6:66:ed:d0:37:9c:a0:31:80:fa:16:14:
7c:80:3c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org