Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Lu7iO23ZG_y2V6Af6K-DHBijecY.roa
File: Lu7iO23ZG_y2V6Af6K-DHBijecY.roa (raw, json)
Hash identifier: fuGKdzNp6qbi0CW76+6y9mQv4GXRM0lDOQCFUHIG23k=
Subject key identifier: 2E:EE:E2:3B:6D:D9:1B:FC:B6:57:A0:1F:E8:AF:83:1C:18:A3:79:C6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1EC0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Lu7iO23ZG_y2V6Af6K-DHBijecY.roa
Signing time: Fri 01 Sep 2023 10:16:25 +0000
ROA not before: Fri 01 Sep 2023 10:16:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 114.198.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7872 (0x1ec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2EEEE23B6DD91BFCB657A01FE8AF831C18A379C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:92:ff:91:4e:23:ed:b9:be:21:75:a6:9d:93:
2e:ac:71:3d:ad:40:3c:25:e2:10:14:6b:5f:3b:5a:
13:a6:9a:fa:e3:8d:0a:58:08:28:7a:43:e5:a4:46:
0d:d9:92:a4:54:37:5e:97:3a:0b:d0:a8:50:4f:d6:
64:65:ff:97:b4:68:16:e3:3a:69:a4:2b:af:95:b2:
7e:a5:4c:a4:49:60:66:2a:db:5e:2c:95:f6:30:a0:
f8:68:60:3d:1b:1e:00:a2:f0:8a:ec:60:90:78:df:
a6:64:e8:7e:00:5d:a8:2e:5f:10:1d:b1:3f:e7:3c:
ba:3c:96:6b:ff:70:2d:ca:32:8f:64:50:91:75:a2:
2d:eb:ba:15:32:67:43:2d:56:94:50:ce:76:11:4e:
d0:f5:c7:86:f5:91:9d:65:76:6c:8c:32:92:e7:61:
bf:95:7c:31:78:f4:bb:81:bb:c9:0b:69:45:f6:54:
23:68:d1:f3:95:f9:a9:28:3a:bc:74:2a:5e:e0:f9:
af:61:30:12:49:03:1a:eb:70:bb:54:d9:ed:31:b0:
ad:9a:e4:78:d8:9b:7e:87:58:10:1f:d9:95:87:18:
50:6d:2a:62:81:bc:ac:a0:d2:1a:cf:93:4a:40:32:
25:92:68:3b:44:58:76:f9:5f:e7:27:e2:0a:96:30:
f2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EE:E2:3B:6D:D9:1B:FC:B6:57:A0:1F:E8:AF:83:1C:18:A3:79:C6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Lu7iO23ZG_y2V6Af6K-DHBijecY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.176.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:ca:96:ce:f8:eb:4e:8b:50:7d:97:d8:d4:01:85:78:cb:31:
3e:70:dd:31:13:2d:0a:73:ae:a6:91:ab:5c:61:a0:54:b1:9c:
ea:16:cf:d4:8b:a4:3f:27:cc:fc:4e:a1:98:c3:95:fc:63:12:
46:dd:bc:2c:95:6a:92:8c:4d:d2:cc:0d:a7:19:31:f5:0e:f4:
02:57:78:76:a9:25:6f:6a:76:7f:96:b0:37:23:44:98:a6:db:
74:46:0a:76:e3:19:f7:a5:8e:85:98:a5:3c:a1:27:b7:93:ae:
ef:22:f0:cc:b0:2a:81:42:0b:07:da:92:bd:d1:ab:4d:11:40:
d6:4b:03:a9:8b:f1:ae:cd:b4:c9:c5:92:07:1e:db:de:b3:87:
1d:e2:93:8a:c1:e1:f1:fe:cf:de:3f:b7:0d:b4:ee:76:28:a9:
eb:52:2d:2d:f4:26:39:19:99:c6:17:15:ba:35:84:5d:c6:5a:
8c:7f:1b:e1:08:6b:ef:93:73:5e:36:20:4d:4e:2e:69:7d:a0:
f2:ed:cb:c7:80:b2:17:a7:77:24:fd:26:fd:ff:eb:37:0f:0e:
b0:20:f5:fd:63:50:f7:5a:0e:01:cd:db:bc:b5:1b:95:e1:0d:
93:c2:55:af:7d:03:80:c6:9f:89:ca:30:b6:4d:39:8d:8f:24:
f9:b4:e0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org