Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HSQwb2ObJ459EblyplBmSKP11qQ.roa
File: HSQwb2ObJ459EblyplBmSKP11qQ.roa (raw, json)
Hash identifier: QQ15G7UGOSjGEhA76lwAvcx8YvKyc5WJvl7ICLiO0ag=
Subject key identifier: 1D:24:30:6F:63:9B:27:8E:7D:11:B9:72:A6:50:66:48:A3:F5:D6:A4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DE0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HSQwb2ObJ459EblyplBmSKP11qQ.roa
Signing time: Fri 01 Sep 2023 10:15:24 +0000
ROA not before: Fri 01 Sep 2023 10:15:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 211.76.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7648 (0x1de0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1D24306F639B278E7D11B972A6506648A3F5D6A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:15:b2:a8:ec:65:8a:81:28:3b:6b:38:cf:
65:b6:05:42:c5:af:59:52:ce:c3:84:c5:4a:0f:98:
96:49:9c:fc:93:0a:2f:1e:d1:4f:c3:25:ef:d7:55:
09:48:b2:a7:33:da:34:cc:e7:ab:54:5d:6a:3d:8e:
3d:d5:32:45:72:a4:0a:6f:c5:38:c9:b2:5a:54:84:
03:f0:12:22:6f:17:5c:ac:f2:96:98:2a:ae:60:61:
f7:9e:5e:ab:84:ce:de:59:c9:f9:8e:53:90:83:ce:
47:b7:c5:9b:2a:87:b0:ae:63:35:ab:27:fd:36:2c:
c0:8e:11:4f:36:69:c2:02:b1:ff:de:0a:a7:91:3a:
ca:4c:b5:8e:12:29:8e:41:de:22:48:07:3e:63:1b:
91:c6:38:77:92:b6:92:88:5e:e2:cb:b9:74:de:dd:
b8:5e:19:2b:7a:aa:f4:aa:83:83:63:eb:3c:ac:7b:
d1:6e:15:43:82:7c:1a:ac:65:90:ae:88:db:59:58:
49:3e:1a:51:2c:14:29:9e:93:01:f4:27:e6:76:97:
e5:2b:b7:47:8c:81:19:f2:7d:a1:43:d3:1b:3a:02:
75:7f:9a:16:47:8e:74:6b:09:0f:2d:ee:80:ee:da:
00:d8:9d:b3:1c:ac:ee:84:1d:29:3e:ca:b2:06:76:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:24:30:6F:63:9B:27:8E:7D:11:B9:72:A6:50:66:48:A3:F5:D6:A4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HSQwb2ObJ459EblyplBmSKP11qQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:3c:11:a0:2f:5e:f4:9b:83:de:2e:99:96:40:8b:b5:a7:db:
64:e8:e1:e6:15:0e:1d:1e:40:34:db:f1:7b:7a:ed:69:80:28:
fa:81:c2:87:c1:b4:4c:b8:64:15:f3:6c:ea:b5:f1:54:78:2a:
5a:80:75:7e:2a:17:47:08:83:f3:73:ea:6a:06:8f:7a:82:3c:
f4:69:f9:a4:8b:fa:77:ac:d1:37:26:27:e6:5e:7b:78:40:68:
60:ae:bf:41:cd:d1:36:7a:ec:6d:95:f0:ae:d1:73:b0:a8:7c:
61:37:0d:65:f7:3a:ea:28:f0:1b:ee:6f:73:ab:c8:d0:d6:e9:
89:0c:d3:49:d3:b1:7f:93:4b:b7:07:20:83:f6:0f:0a:e2:4e:
d9:c4:83:c0:e0:ce:7d:ab:46:45:81:87:20:c6:8f:85:ad:1d:
65:8e:73:f4:9f:7c:8a:72:b2:56:0d:0a:be:43:5c:f3:8b:03:
f4:26:21:86:3d:17:42:01:3f:5d:9e:05:cd:20:3d:c7:28:e6:
33:8b:3b:df:cb:0b:ec:b9:7d:ab:fa:17:f0:3a:07:70:b7:ed:
38:70:5e:c5:83:a6:c1:e3:c7:4d:3a:a1:6a:58:09:3f:49:94:
f5:aa:5f:34:6d:f6:99:0b:00:b3:af:ac:7b:27:b2:66:0d:bd:
41:dc:a6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org