Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ixse6BSeB7xMZc64ngbETdXzgHs.roa
File: Ixse6BSeB7xMZc64ngbETdXzgHs.roa (raw, json)
Hash identifier: Y3QRhCSw2gxYlCN84CXWZymZh9sItDb9p4UUHptmneg=
Subject key identifier: 23:1B:1E:E8:14:9E:07:BC:4C:65:CE:B8:9E:06:C4:4D:D5:F3:80:7B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E32
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ixse6BSeB7xMZc64ngbETdXzgHs.roa
Signing time: Fri 01 Sep 2023 10:15:47 +0000
ROA not before: Fri 01 Sep 2023 10:15:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 61.60.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7730 (0x1e32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:47 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=231B1EE8149E07BC4C65CEB89E06C44DD5F3807B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:dc:32:24:e4:19:82:20:8b:cc:5e:27:0b:
fa:28:29:96:16:7f:f0:b0:c6:55:82:88:de:9d:01:
81:c7:f5:14:a6:3e:ee:74:c0:4f:b9:f8:0a:c9:11:
8e:f4:88:93:71:35:bf:6c:16:0b:31:d6:78:e8:c7:
ed:0c:b4:f1:85:bd:4d:81:69:d1:70:68:18:7a:b5:
56:c0:b3:d6:5f:44:78:9c:7f:8c:11:d1:9e:51:dc:
d5:4f:bb:75:62:4e:f0:1f:15:37:98:33:2b:5c:b9:
ca:01:86:fc:63:5a:e8:4e:64:44:82:59:85:e2:d4:
b2:44:97:c6:bc:4f:3b:5e:c6:61:5e:5a:99:3f:ae:
e4:4f:7e:14:10:11:23:94:a4:3b:ad:5b:a4:89:6d:
2b:a5:17:a7:79:41:ae:36:1c:4c:9f:97:01:df:ed:
9b:5e:94:bd:e6:28:01:c1:09:f4:8b:d6:4c:06:fa:
c8:fd:40:1d:14:49:d9:29:5b:a6:41:cd:2e:57:ce:
89:c9:31:a7:10:fc:51:db:c7:b0:b9:ec:0d:1f:a1:
fe:93:76:f6:14:c5:0b:e4:7d:56:be:2d:c4:4a:3b:
fc:77:14:c2:c6:c0:6f:15:40:4c:9c:92:f2:9c:2f:
93:ee:87:f8:2c:f0:ec:e4:8d:c7:87:5b:df:7d:f2:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1B:1E:E8:14:9E:07:BC:4C:65:CE:B8:9E:06:C4:4D:D5:F3:80:7B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ixse6BSeB7xMZc64ngbETdXzgHs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.208.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:e2:2c:27:47:16:2c:97:0b:26:02:6a:d4:45:41:97:97:91:
7d:18:61:b6:6a:7d:7e:18:f0:b5:d5:8a:53:8e:4f:45:5f:2a:
de:87:71:b9:e9:5d:9a:d2:62:a5:65:d7:a0:e1:8c:2f:c1:80:
80:f2:aa:fc:6c:ce:31:23:2e:4b:3a:1f:4a:56:d4:b4:60:72:
eb:d9:1a:33:9a:49:70:3b:4c:91:30:11:c4:87:14:1d:a7:12:
3e:6c:f1:5f:76:9c:27:7c:fe:8a:fc:a1:a5:5f:17:05:0f:4b:
a3:89:f4:9f:03:ca:41:e3:93:c2:67:7b:fa:ff:9e:d9:e9:5f:
0d:81:85:6b:6b:fe:75:db:31:0e:f0:7e:31:2a:3d:c8:0a:ed:
f6:2a:85:79:9e:86:57:06:e6:f1:0f:71:35:86:80:ef:a8:f2:
14:a8:56:be:82:2c:3b:24:23:84:9b:d8:39:30:fb:26:3c:45:
56:cc:67:1b:fe:4c:1e:d0:0f:01:f4:f5:6f:e9:a8:19:44:9d:
f2:f8:8e:0a:03:63:4e:25:e4:33:6b:c4:19:ee:f9:49:79:89:
4c:5d:e6:c8:41:43:3f:85:70:ad:5c:27:27:4d:2a:d2:42:e1:
8f:ee:ec:b5:1e:28:18:d7:0d:0c:c1:9d:1b:02:5f:6d:c6:78:
e7:66:8c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org