Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SMFxTvG4lGpODbgkgCg8tbQa6k0.roa
File: SMFxTvG4lGpODbgkgCg8tbQa6k0.roa (raw, json)
Hash identifier: 8nnPrBSXDaIuBxQNCUcIhOrXJRjfnlH15Q90mMqOwb0=
Subject key identifier: 48:C1:71:4E:F1:B8:94:6A:4E:0D:B8:24:80:28:3C:B5:B4:1A:EA:4D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DB0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SMFxTvG4lGpODbgkgCg8tbQa6k0.roa
Signing time: Fri 01 Sep 2023 10:15:10 +0000
ROA not before: Fri 01 Sep 2023 10:15:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 122.100.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7600 (0x1db0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=48C1714EF1B8946A4E0DB82480283CB5B41AEA4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:a5:7f:e0:0b:18:14:95:b3:97:82:f1:95:
0c:ba:8c:41:c0:f5:dd:41:b8:b3:13:cf:9b:38:ae:
b2:4a:6b:45:3d:b8:7f:aa:da:f3:f8:ea:91:e6:07:
11:70:6d:e9:3f:75:86:b9:6c:e0:be:88:0b:2b:21:
3e:57:99:14:12:6b:b5:3c:c6:96:3c:c1:d4:ba:0b:
94:21:71:a3:be:eb:c9:c6:61:74:a2:38:4a:e2:8c:
36:8b:d4:b4:de:12:79:2f:a6:69:68:61:e4:bf:c0:
75:43:3b:21:61:e4:72:a6:53:e9:78:d8:2a:39:d2:
e8:58:de:9c:b4:5e:d0:c7:3c:be:21:6e:6e:97:ab:
96:84:9d:f9:1f:7a:46:28:b9:39:6e:a7:0b:dc:db:
96:38:b4:c5:01:10:37:c2:60:d0:e8:2c:10:46:f2:
72:6f:ac:fc:b9:dc:fe:61:0c:02:67:42:3f:70:16:
16:1a:2a:30:5b:2f:84:72:07:87:b1:1f:c5:6d:4c:
ee:29:2c:56:9b:52:17:5b:4f:ee:cb:62:e8:54:a7:
e4:d5:4d:aa:ae:a2:e5:b3:8b:9a:04:38:1c:b2:c2:
1d:dc:f8:3e:cb:38:62:c5:57:93:ef:ae:b4:51:90:
a2:25:8c:21:8c:30:e3:c9:e4:ee:5b:f7:8e:a7:e5:
f8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C1:71:4E:F1:B8:94:6A:4E:0D:B8:24:80:28:3C:B5:B4:1A:EA:4D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SMFxTvG4lGpODbgkgCg8tbQa6k0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.68.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:49:2b:3b:ff:49:36:bc:6b:23:b7:42:4f:2e:f0:73:12:8a:
b2:1a:25:14:19:ef:57:31:cd:e5:86:ec:fa:ef:6e:e1:47:2d:
21:1b:c7:2a:e5:da:5d:95:8b:7e:0b:5f:93:3f:50:89:2c:ac:
84:47:2f:4a:93:ab:3d:a2:01:3c:96:2b:53:52:75:1f:ab:2e:
f9:ec:58:69:aa:c4:82:3f:8f:1f:ed:6c:81:f9:8b:c4:ee:aa:
f0:55:82:a1:d3:05:e0:e4:49:1d:18:fe:0e:d6:3d:9d:30:8a:
d1:27:98:5a:18:6e:5e:43:00:a3:26:64:c6:a5:4f:f0:00:5e:
c2:d9:8d:0f:3c:83:03:1c:dc:e4:42:05:04:8d:c0:36:64:b8:
c3:ef:88:d6:2f:4e:c3:06:65:1a:b7:62:fa:34:0b:64:a4:ef:
d9:7a:a3:97:05:d7:bd:8e:76:c3:88:a3:a7:84:50:3a:18:97:
70:62:07:4c:57:71:9f:68:54:65:1c:18:84:a6:d3:0a:a6:4f:
7d:53:69:77:27:50:f0:25:43:9b:1f:9b:43:11:c7:a5:e0:d4:
a3:4f:60:5a:f8:2d:3b:f1:a8:7b:e1:16:88:56:9b:cf:d9:b3:
8c:c9:0f:8f:a0:29:41:11:9a:01:d0:67:ca:e0:88:81:5c:d3:
9b:61:60:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org