Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KL7S4GoUH2Adcmw06MwQTNN0NL8.roa
File: KL7S4GoUH2Adcmw06MwQTNN0NL8.roa (raw, json)
Hash identifier: faxFGqq7V8xqAut186jrLbWQJ2syzYzLeiMldRqytbc=
Subject key identifier: 28:BE:D2:E0:6A:14:1F:60:1D:72:6C:34:E8:CC:10:4C:D3:74:34:BF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1EA0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KL7S4GoUH2Adcmw06MwQTNN0NL8.roa
Signing time: Fri 01 Sep 2023 10:16:17 +0000
ROA not before: Fri 01 Sep 2023 10:16:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7840 (0x1ea0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=28BED2E06A141F601D726C34E8CC104CD37434BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b7:b3:92:78:54:22:77:06:3f:1e:97:48:66:
8d:6f:4e:4d:07:60:22:1b:50:85:14:b3:66:4a:15:
64:d5:46:7e:76:12:55:f5:c1:3b:84:17:fe:c6:14:
75:14:d3:0d:fe:50:c4:ff:c7:ae:bc:f4:61:ea:1d:
7d:5d:4e:bd:3a:75:13:69:af:ff:c8:6d:10:d2:36:
35:31:d3:ad:d7:cd:3b:f9:ab:0e:07:94:d4:e3:e8:
06:2b:4f:56:b0:b8:fb:a1:a7:12:50:b0:66:10:2e:
89:23:bf:33:1c:9e:67:a9:41:98:89:70:63:1a:d7:
8a:cd:a8:1c:5e:61:b4:d0:8c:51:33:6c:bc:8c:52:
4f:41:28:93:fd:12:cd:b2:04:88:0f:41:51:b9:4b:
97:6d:7d:24:29:3f:9c:5f:f6:4d:d0:9d:eb:8c:23:
e6:25:23:78:cb:25:12:58:8a:75:bf:37:6c:55:ac:
67:48:18:11:23:8c:e6:93:6e:e3:71:0a:39:00:1d:
89:fe:8d:59:0d:ea:0b:5a:ae:d8:ce:4b:da:c6:35:
7e:02:78:dc:b6:f2:73:d7:fc:82:c4:96:26:42:d8:
cf:cd:27:b0:34:98:62:19:c4:c4:50:cc:ec:43:f4:
78:46:ea:4c:94:71:d5:ba:f1:3d:16:6c:d7:d1:b4:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BE:D2:E0:6A:14:1F:60:1D:72:6C:34:E8:CC:10:4C:D3:74:34:BF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KL7S4GoUH2Adcmw06MwQTNN0NL8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.148.0/22
Signature Algorithm: sha256WithRSAEncryption
08:35:4d:a3:cd:db:54:b2:b2:e2:55:7b:77:f3:dd:e8:54:de:
69:99:83:01:81:e7:15:c0:fb:9a:4d:db:14:bd:5d:4e:ed:cc:
ae:59:a4:34:ce:83:19:fa:19:f3:57:5e:5b:6d:77:ff:9b:4e:
b6:14:01:ae:14:19:23:c5:29:0a:a7:a2:5e:59:86:5c:c5:2f:
1e:8d:00:09:85:a0:7a:8a:f4:d2:66:50:ff:81:ba:30:d1:2e:
f5:93:3b:51:fe:ed:a6:2e:71:23:95:63:f0:0b:00:e5:9b:c5:
ec:ea:4e:c4:7a:3e:5a:f0:90:6e:3a:a6:e6:52:d8:67:9d:30:
24:3d:32:06:c9:5c:1c:40:12:33:42:c8:04:79:6e:86:b9:11:
15:75:ba:db:cd:e6:43:78:50:6c:fc:7f:13:2a:d1:f7:34:e7:
d6:65:ee:2f:7e:01:35:7f:3e:44:13:01:6b:cf:33:f6:f7:14:
56:56:d2:0d:03:83:2c:a1:74:67:49:16:f6:df:90:19:95:b0:
c3:84:5b:92:ef:7a:58:75:37:1e:61:83:73:8b:26:cf:37:48:
39:a0:31:a3:8e:ad:4f:0f:1b:79:20:08:f6:a8:37:95:37:07:
5d:5c:42:f7:b7:5d:bb:bb:b4:28:9e:9c:3c:b0:4f:a0:48:0b:
12:33:22:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org