Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F_n73epEJE73qhDdD2h6e8I97so.roa
File: F_n73epEJE73qhDdD2h6e8I97so.roa (raw, json)
Hash identifier: 90cApcZd3AOfbXhpO+YOr+UhN/rT2tw//OdrOZG7k2E=
Subject key identifier: 17:F9:FB:DD:EA:44:24:4E:F7:AA:10:DD:0F:68:7A:7B:C2:3D:EE:CA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DBB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F_n73epEJE73qhDdD2h6e8I97so.roa
Signing time: Fri 01 Sep 2023 10:15:13 +0000
ROA not before: Fri 01 Sep 2023 10:15:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 61.61.224.0/20 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7611 (0x1dbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=17F9FBDDEA44244EF7AA10DD0F687A7BC23DEECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2a:31:e7:34:22:f0:27:0a:49:1d:ae:9a:19:
4e:66:7d:4b:3d:50:de:6e:42:bb:93:a6:35:03:43:
17:69:34:ca:c0:a8:1c:90:2f:7b:ce:79:01:30:4c:
cc:65:7b:39:62:d9:ac:7f:cb:ec:82:8f:52:7b:d0:
79:84:c2:91:72:57:42:f5:32:92:32:33:9d:5a:61:
6a:e1:48:92:28:d1:bd:24:1d:c6:c9:3b:1c:c9:89:
fe:15:73:b5:5e:0f:f9:45:9f:65:db:96:09:dc:86:
52:fe:04:b6:01:14:0f:6e:45:45:e9:37:e5:12:27:
9d:f3:f2:8d:ee:36:c1:e4:26:02:f4:a7:40:fa:98:
a7:f0:ec:cd:db:1d:d2:24:db:fc:44:0f:63:ae:04:
96:ce:13:43:69:6e:02:d2:bd:4e:de:66:9d:bc:ad:
49:26:94:87:c4:c7:66:17:b8:4a:d7:38:6a:f5:5f:
60:24:7d:46:ee:99:67:51:c5:e6:74:f0:68:e6:7f:
75:2c:3e:3e:60:73:43:61:9d:ee:c2:4a:ab:3d:e0:
94:da:4c:5c:21:b8:42:b4:e5:88:7d:82:44:fd:c5:
3a:bb:a7:4e:98:17:8a:05:2e:f9:df:11:fd:d1:87:
34:e6:37:3a:01:30:ed:e8:a4:5b:3a:a4:66:56:f1:
da:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F9:FB:DD:EA:44:24:4E:F7:AA:10:DD:0F:68:7A:7B:C2:3D:EE:CA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F_n73epEJE73qhDdD2h6e8I97so.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.224.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:7a:60:62:df:b2:8a:50:cb:a5:9f:60:ba:f4:3e:12:2b:5a:
83:ee:fc:07:ab:59:a4:53:d1:fe:27:20:19:23:ca:80:f3:8d:
80:b0:b8:b0:7d:ae:83:ba:b4:24:d2:d7:70:a1:7d:ff:fc:71:
86:4c:9c:34:a3:ba:e2:b2:1e:e0:1e:d6:bd:bf:29:37:0f:8f:
b6:b5:fb:95:6c:40:58:73:00:41:e4:09:f9:cf:75:b6:56:63:
9e:db:fe:b9:67:2c:f2:e6:0d:62:9a:77:14:04:c9:74:6c:37:
cd:6c:80:60:8a:6e:aa:27:58:df:41:33:d0:6e:0b:a8:99:0a:
6c:6d:0d:df:50:87:21:33:c3:2d:3b:02:1c:f1:65:06:9e:24:
f2:e8:27:33:8d:19:52:15:4f:9e:a6:7f:62:67:05:f0:4b:5a:
cf:9f:64:9b:18:c9:fe:6b:0d:49:1e:1f:e9:e1:8e:5f:c5:da:
b3:70:e5:9c:f8:41:78:0c:fd:82:9f:4e:f0:bb:c6:87:a7:e5:
4a:a7:26:95:73:4a:8b:43:b4:e7:05:9d:47:30:37:97:4d:28:
6f:03:64:cc:4b:5f:01:c8:84:27:9e:7e:12:90:9e:57:1a:34:
d8:71:53:ba:c9:4a:2f:8a:45:ec:eb:36:93:3f:15:2f:b3:85:
36:b5:a0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org