Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QsJQimqGhgvUGEdJr6CWj5uyYN4.roa
File: QsJQimqGhgvUGEdJr6CWj5uyYN4.roa (raw, json)
Hash identifier: /SmNmQNRtWeZ/cc7Hc4O5HjIfKZCzKKHjTIovoUk3kI=
Subject key identifier: 42:C2:50:8A:6A:86:86:0B:D4:18:47:49:AF:A0:96:8F:9B:B2:60:DE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E71
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QsJQimqGhgvUGEdJr6CWj5uyYN4.roa
Signing time: Fri 01 Sep 2023 10:16:03 +0000
ROA not before: Fri 01 Sep 2023 10:16:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7793 (0x1e71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=42C2508A6A86860BD4184749AFA0968F9BB260DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:25:45:12:18:51:9a:69:a5:52:03:41:e0:
39:1d:a8:8d:70:fe:e1:ff:23:0c:12:e3:ad:e0:64:
26:3f:8b:e9:ef:d5:1b:bb:b9:dc:66:3e:4d:3b:6d:
37:e0:48:ae:ed:7b:0a:d7:cd:21:9e:06:a2:d9:43:
ad:f0:c3:72:f8:01:3b:22:a0:13:d9:98:12:8f:41:
23:49:a0:4c:ce:56:d8:3f:31:5b:da:6b:73:6e:9d:
ba:85:f7:cc:54:7c:8a:3b:7b:2c:60:33:d1:92:32:
5e:50:21:81:22:e1:c4:6f:7c:97:53:c7:85:2c:a7:
13:5a:9d:a7:c5:54:45:03:b8:fe:f4:2a:75:4e:e4:
4a:9f:d2:a8:2a:a3:23:71:e5:bc:45:d7:fb:b7:7f:
89:32:31:04:98:49:06:e3:cf:d2:93:25:85:ce:0a:
39:03:e8:6f:5d:19:dc:9f:1f:b5:03:bb:a4:33:6e:
62:05:d9:e6:08:3e:b6:0e:a4:6c:08:6a:7e:d1:41:
3d:aa:08:05:a2:fe:25:ae:d0:30:55:bb:8d:26:65:
75:14:d6:18:06:a0:eb:c1:e9:21:46:17:89:f2:61:
ed:8d:1c:34:0d:51:81:b8:1a:4a:39:9a:b0:43:48:
e2:0f:67:1c:8a:57:37:52:2d:00:76:6f:1c:59:06:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C2:50:8A:6A:86:86:0B:D4:18:47:49:AF:A0:96:8F:9B:B2:60:DE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QsJQimqGhgvUGEdJr6CWj5uyYN4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.190.0/23
Signature Algorithm: sha256WithRSAEncryption
25:69:9d:1c:e3:ac:87:63:ef:cc:a4:de:e4:97:f5:40:ae:93:
3a:d5:16:f3:18:3f:92:86:7b:17:5e:61:0b:8c:ac:5b:5b:d6:
dd:dd:98:f5:e8:a7:df:53:40:4a:9c:dc:61:9b:f5:19:3f:58:
79:af:90:c9:2d:47:f8:d5:b3:cf:9d:b3:1b:0f:06:d2:dd:56:
21:a4:73:98:04:2c:9d:4c:3c:b0:08:1f:29:8a:38:84:f6:9f:
89:e2:74:6f:a6:37:2b:32:6c:39:26:24:74:30:0c:79:13:b7:
32:c5:04:f8:15:34:2f:86:5d:5e:a2:5f:82:61:b2:9d:1d:cf:
44:3f:fe:82:e2:23:67:a3:65:a3:34:d1:6c:d6:78:28:a6:b6:
2d:c1:4d:be:d0:4f:a2:e0:ef:7b:1e:bc:6c:78:cb:21:29:9d:
d4:65:8a:72:cf:17:63:bd:5b:ea:b9:09:89:32:5f:c4:94:0d:
57:8d:88:5f:0d:15:14:d1:de:6e:1c:ac:37:67:86:0b:13:27:
5d:e9:d1:28:cc:ca:3e:3e:96:86:d5:b0:ab:a7:4f:06:14:27:
f0:15:1a:80:cc:15:72:98:08:5b:e7:dd:ed:19:46:9d:e6:7b:
92:ae:1f:ca:7c:17:5c:f3:60:54:56:4d:05:ba:60:7f:b1:02:
d9:24:20:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org