Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LeW7LYns-BE51-6pTXn7nMGf4dg.roa
File: LeW7LYns-BE51-6pTXn7nMGf4dg.roa (raw, json)
Hash identifier: lYB7M19aRPy5y9YCWYTeuKShTPi5AcPVXODeROWCelA=
Subject key identifier: 2D:E5:BB:2D:89:EC:F8:11:39:D7:EE:A9:4D:79:FB:9C:C1:9F:E1:D8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D63
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LeW7LYns-BE51-6pTXn7nMGf4dg.roa
Signing time: Fri 01 Sep 2023 10:14:45 +0000
ROA not before: Fri 01 Sep 2023 10:14:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 180.218.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7523 (0x1d63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:45 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2DE5BB2D89ECF81139D7EEA94D79FB9CC19FE1D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:44:2e:b8:b8:d5:22:df:e2:18:4b:a1:a4:75:
32:e5:9b:ce:da:b5:69:6d:24:3a:1f:7d:7d:90:20:
69:93:27:f0:47:d8:26:f0:67:8b:68:92:de:8b:15:
3e:4a:f5:fe:ba:f0:a3:c3:e4:bc:d0:57:bb:be:47:
e3:a0:0c:7d:90:0d:86:49:79:fe:0d:7f:6f:18:eb:
c6:d1:0b:49:7e:c4:54:be:dd:94:48:20:b1:31:45:
b9:66:2c:13:81:ff:1b:3a:0f:98:b1:22:d1:d5:a1:
e1:95:49:45:db:71:63:8f:91:66:31:c4:f2:a8:88:
8b:16:ba:d2:73:b6:c6:ae:07:68:9e:3c:19:ac:e7:
11:85:e1:c6:1e:0b:6f:1b:68:df:44:c1:01:86:a4:
52:c4:59:ae:70:85:8c:e4:18:d7:97:44:b9:02:40:
e9:40:77:58:a6:a6:c4:7b:cb:2c:85:06:f5:a9:cf:
3d:d5:63:0b:f6:b8:9f:47:11:f1:c4:eb:6b:13:21:
7f:64:8d:3a:0e:6c:a8:56:02:85:18:f1:fc:d7:e2:
17:a7:93:d9:82:04:bc:32:a4:ad:fd:ef:7a:92:35:
0b:cc:a0:04:b0:50:ec:8f:92:05:fc:2b:b1:28:04:
9c:78:d2:01:88:3f:97:a4:9f:37:3c:f6:bd:28:7c:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E5:BB:2D:89:EC:F8:11:39:D7:EE:A9:4D:79:FB:9C:C1:9F:E1:D8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LeW7LYns-BE51-6pTXn7nMGf4dg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.240.0/21
Signature Algorithm: sha256WithRSAEncryption
91:bf:a9:15:32:0a:ee:1a:1f:e5:4a:12:cd:20:68:a0:b3:cf:
4c:ea:10:d1:65:66:ee:72:f2:75:18:00:8a:e2:9d:2f:cc:5d:
a4:b4:78:f1:40:90:91:9e:9e:53:2c:4a:80:a2:35:78:65:2d:
4a:83:83:d2:da:e4:7c:b4:36:18:9f:17:aa:af:41:06:0f:74:
d6:c4:08:a1:11:ce:45:a7:ff:1d:39:80:a0:cb:7a:7d:4e:16:
34:67:9e:8c:c5:1b:de:9a:6e:92:fc:f9:22:17:be:1c:23:32:
b8:25:27:29:b1:6d:e4:63:cb:ac:74:c6:27:9d:7b:2a:38:be:
fa:11:91:c1:54:4b:c7:e7:c7:44:89:7d:73:44:d8:64:99:3c:
1c:c5:72:15:35:28:d7:55:ac:20:3c:6a:df:1c:5c:54:35:73:
8d:0e:05:ff:59:e7:70:05:30:11:eb:37:55:8b:7a:eb:8f:1f:
2e:85:ed:89:b3:6a:c0:d1:a9:22:c9:68:9c:e7:d6:88:93:0e:
25:6c:e4:2a:25:39:8f:ed:9b:0d:4f:2d:5f:68:1a:79:c9:bf:
c9:ef:a3:1a:6d:3f:20:4c:c2:77:5f:d0:ed:56:5b:48:f7:d4:
0f:d1:59:08:85:32:e6:74:8b:e0:d7:1a:9b:8b:fe:fe:e9:15:
02:65:07:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org