Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NLDSvuT9pA1iVB6GVboOsXhn3K0.roa
File: NLDSvuT9pA1iVB6GVboOsXhn3K0.roa (raw, json)
Hash identifier: XBavb/MJNlfv576+qVq07eS4uuXrftkY6AQ6uD37GG0=
Subject key identifier: 34:B0:D2:BE:E4:FD:A4:0D:62:54:1E:86:55:BA:0E:B1:78:67:DC:AD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E80
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NLDSvuT9pA1iVB6GVboOsXhn3K0.roa
Signing time: Fri 01 Sep 2023 10:16:08 +0000
ROA not before: Fri 01 Sep 2023 10:16:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 103.225.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7808 (0x1e80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=34B0D2BEE4FDA40D62541E8655BA0EB17867DCAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:33:12:dc:96:51:90:04:a5:03:83:a2:cc:
36:dd:64:09:98:d3:3e:75:77:8f:93:57:7e:58:52:
64:cf:51:3d:9a:29:95:b1:c7:c7:ff:55:3a:5b:f0:
59:8a:18:2d:e9:57:2e:e9:a1:e2:ce:89:36:48:51:
96:6d:23:0a:07:0f:75:b0:53:13:00:fc:6c:bf:d0:
ae:25:f4:3e:5d:9d:13:74:e6:0b:4b:e2:a0:c1:b9:
5c:e5:b6:1f:4a:17:b0:91:ff:4d:8e:9e:51:bf:4d:
40:8e:3e:cf:81:a1:2b:98:2d:d6:1b:60:a8:41:13:
9b:f4:8d:4a:c9:ba:aa:eb:59:95:b0:fe:cc:28:45:
11:10:60:55:1c:a9:ad:a5:fa:d8:02:60:87:50:fa:
c4:59:f3:ed:01:81:60:85:a4:a8:8e:43:ae:84:b7:
e3:25:19:51:50:4b:25:b6:2c:a7:fe:b7:05:a5:e6:
ef:12:fd:f8:e8:ed:9f:24:d2:39:2a:7e:9a:d5:da:
f4:f3:be:ba:e9:7c:f6:43:10:45:4a:2a:97:36:dd:
b4:e6:ea:f4:55:93:e6:e3:00:66:b1:b6:a7:f5:23:
bb:27:a7:b9:8c:37:ab:46:99:94:aa:93:ca:7b:2e:
e1:00:44:30:64:c6:51:2f:fa:e0:39:d2:18:f0:48:
18:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B0:D2:BE:E4:FD:A4:0D:62:54:1E:86:55:BA:0E:B1:78:67:DC:AD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NLDSvuT9pA1iVB6GVboOsXhn3K0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.0.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:6f:2e:b5:e6:76:1f:aa:b6:5d:b1:16:4f:28:e6:82:ec:9c:
33:0c:6d:ef:68:8e:78:e8:e3:8d:52:ee:42:de:d4:42:1d:94:
b6:a9:8d:2e:73:bc:c4:dc:22:ba:e3:e4:4c:3d:87:86:b5:8b:
08:be:db:ae:92:5f:42:64:7c:d5:e2:a8:73:cd:2f:9b:62:aa:
81:9f:d7:f3:93:7a:a9:8a:5d:fa:7b:36:06:95:a4:12:3e:5d:
1e:47:89:05:2e:8e:0f:e2:a7:4d:35:3b:0e:0a:2c:7d:2d:a8:
91:67:4c:1e:0b:08:f3:f9:3f:58:1c:ac:97:66:c3:5b:54:bb:
be:bf:26:82:8f:bf:59:44:df:e5:aa:90:08:a9:4f:4b:60:7a:
de:1b:7d:24:f7:2f:72:4b:4c:14:84:1a:71:37:55:8c:1a:e8:
b7:77:4d:4f:8b:a8:be:af:a1:07:39:c1:ce:63:7c:20:89:ae:
0e:12:0f:89:05:15:20:02:93:f9:b5:17:87:d1:70:ca:1e:3b:
07:76:81:59:f0:f2:f8:ed:1c:fa:ab:8a:65:48:8f:21:dc:a8:
62:a8:5c:fd:b7:c3:5f:24:6c:3c:1e:6c:d5:33:f3:80:77:6d:
9b:04:9c:fd:9d:58:51:5e:c6:6a:e1:4d:83:f0:07:20:90:f8:
ca:b4:24:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org