Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N2J9af9tyLcBgFnA3SRUgYk2nN4.roa
File: N2J9af9tyLcBgFnA3SRUgYk2nN4.roa (raw, json)
Hash identifier: AAAidBhwUupDfJOfd8o3k80481qmhuKsw5Yu3B7G5hI=
Subject key identifier: 37:62:7D:69:FF:6D:C8:B7:01:80:59:C0:DD:24:54:81:89:36:9C:DE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DE2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N2J9af9tyLcBgFnA3SRUgYk2nN4.roa
Signing time: Fri 01 Sep 2023 10:15:25 +0000
ROA not before: Fri 01 Sep 2023 10:15:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.222.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7650 (0x1de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=37627D69FF6DC8B7018059C0DD24548189369CDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:c4:6c:cf:b6:66:04:b6:75:c0:b3:7c:50:
85:0a:6c:de:58:0d:1e:15:2b:01:80:31:45:97:28:
0e:08:d2:3c:12:d0:bb:f7:21:1b:2a:32:c3:2b:c8:
71:a7:9a:c6:7a:8c:dc:33:2f:a4:63:46:f0:ba:79:
ff:27:11:62:fa:3c:8d:3f:5f:9f:3b:3f:81:2e:76:
38:4b:65:48:26:c3:93:4c:79:89:7c:27:ba:9f:b4:
72:c6:8c:27:8c:12:f8:30:32:1e:da:1f:ad:0d:c5:
b8:39:6f:10:a0:bb:67:54:1a:68:4a:5c:78:e2:2b:
c5:c7:d1:30:13:12:f9:b5:37:6a:2e:fe:9c:e7:b0:
08:42:3a:c1:dc:d3:6e:35:f1:89:82:7e:82:91:1c:
dc:78:4e:78:2b:b8:f1:15:04:71:a2:11:27:17:e0:
13:b1:15:bc:24:4d:1e:26:b6:dc:94:1b:24:75:ea:
6d:1d:37:7f:d1:7d:66:68:14:15:2f:ca:bf:c7:4a:
6f:9b:f5:8e:22:f5:d1:31:4f:98:da:66:d2:90:58:
8f:58:f6:61:6a:42:93:14:b0:3a:fe:c1:6d:33:46:
70:75:14:db:8f:9b:c9:49:5c:3f:e4:35:8e:6e:3b:
81:7f:b7:bd:37:76:3b:5b:38:1e:4f:82:f8:fb:56:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:62:7D:69:FF:6D:C8:B7:01:80:59:C0:DD:24:54:81:89:36:9C:DE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N2J9af9tyLcBgFnA3SRUgYk2nN4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.222.0/23
Signature Algorithm: sha256WithRSAEncryption
04:a0:84:ba:6c:c0:b6:8e:34:b0:34:08:fa:0f:b9:d6:d7:1b:
06:3e:cb:e0:65:c5:2e:a1:7c:f1:ea:ac:a6:4c:47:28:91:66:
d0:d5:db:db:98:f3:43:38:38:4d:8f:89:e6:81:f1:4e:7e:94:
69:db:9b:7c:48:af:13:ee:ec:75:25:d7:82:d4:02:40:f9:8e:
69:22:c6:b0:f6:05:a2:9b:d6:10:34:46:66:55:32:ba:b1:da:
06:b1:cc:78:61:eb:ad:ec:4f:0e:c9:11:bf:7d:43:aa:18:d3:
7a:89:66:21:53:e5:e2:99:78:19:8f:c6:97:fa:a8:3a:a1:9b:
84:de:56:3f:b2:2c:48:24:94:82:83:0b:93:c0:01:f2:be:08:
25:44:ce:c4:56:1e:56:f3:c1:32:1c:9c:f6:1b:b1:29:3f:fe:
22:1b:43:4d:d5:08:e3:11:c2:3a:e7:c5:d8:c2:97:a4:90:52:
ec:47:ca:53:53:7b:9f:6d:d1:32:9a:5d:fa:09:df:ba:f4:6a:
d1:97:48:53:52:49:2d:70:77:ce:1e:4a:ee:85:90:c4:e4:64:
fd:dd:66:39:85:b0:97:e0:09:50:a8:06:cc:b8:37:b0:d1:c8:
9e:59:8b:35:4b:58:13:f6:2e:0c:ff:0b:db:cf:ee:5a:aa:26:
d5:da:ea:ea
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHeIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1MjVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM3NjI3RDY5RkY2REM4
QjcwMTgwNTlDMEREMjQ1NDgxODkzNjlDREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxz8Rsz7ZmBLZ1wLN8UIUKbN5YDR4VKwGAMUWXKA4I0jwS0Lv3
IRsqMsMryHGnmsZ6jNwzL6RjRvC6ef8nEWL6PI0/X587P4EudjhLZUgmw5NMeYl8
J7qftHLGjCeMEvgwMh7aH60Nxbg5bxCgu2dUGmhKXHjiK8XH0TATEvm1N2ou/pzn
sAhCOsHc02418YmCfoKRHNx4TngruPEVBHGiEScX4BOxFbwkTR4mttyUGyR16m0d
N3/RfWZoFBUvyr/HSm+b9Y4i9dExT5jaZtKQWI9Y9mFqQpMUsDr+wW0zRnB1FNuP
m8lJXD/kNY5uO4F/t703djtbOB5Pgvj7VijRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUN2J9af9tyLcBgFnA3SRUgYk2nN4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL04ySjlhZjl0eUxjQmdGbkEz
U1JVZ1lrMm5ONC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0
2t4wDQYJKoZIhvcNAQELBQADggEBAASghLpswLaONLA0CPoPudbXGwY+y+BlxS6h
fPHqrKZMRyiRZtDV29uY80M4OE2PieaB8U5+lGnbm3xIrxPu7HUl14LUAkD5jmki
xrD2BaKb1hA0RmZVMrqx2gaxzHhh663sTw7JEb99Q6oY03qJZiFT5eKZeBmPxpf6
qDqhm4TeVj+yLEgklIKDC5PAAfK+CCVEzsRWHlbzwTIcnPYbsSk//iIbQ03VCOMR
wjrnxdjCl6SQUuxHylNTe59t0TKaXfoJ37r0atGXSFNSSS1wd84eSu6FkMTkZP3d
ZjmFsJfgCVCoBsy4N7DRyJ5ZizVLWBP2Lgz/C9vP7lqqJtXa6uo=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org