Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cfwAbuDZw_Zxa_rZdGB_-jESlfs.roa
File: cfwAbuDZw_Zxa_rZdGB_-jESlfs.roa (raw, json)
Hash identifier: PPxOtbM+72Nc/CvwmAVsFAH1vY0CmAJnBEedvCX50co=
Subject key identifier: 71:FC:00:6E:E0:D9:C3:F6:71:6B:FA:D9:74:60:7F:FA:31:12:95:FB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DBA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cfwAbuDZw_Zxa_rZdGB_-jESlfs.roa
Signing time: Fri 01 Sep 2023 10:15:13 +0000
ROA not before: Fri 01 Sep 2023 10:15:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 114.198.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7610 (0x1dba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=71FC006EE0D9C3F6716BFAD974607FFA311295FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:81:f7:72:80:dd:e1:25:7f:5d:84:1f:e2:
0c:04:02:49:22:49:25:65:44:1a:1f:31:89:e0:dd:
e4:e7:66:d1:a7:af:18:3b:88:26:c1:ec:fb:ac:d8:
d0:7d:c0:d6:df:56:d7:05:77:49:05:7c:24:c3:de:
a7:2f:40:75:b8:69:ed:cd:dd:3b:27:22:e5:2d:45:
dd:72:67:00:17:36:d4:89:b7:ac:ed:10:5b:c8:85:
53:d7:18:74:58:1b:50:95:9c:29:77:d8:8b:4c:fa:
31:f3:8d:3e:68:9f:fa:23:ff:d0:d0:2a:95:fa:51:
41:fa:b4:9a:dd:c3:58:f0:a4:2e:c4:e3:81:0e:04:
ed:11:f4:21:49:b8:a2:f5:b4:e2:d9:1e:71:6e:67:
a0:1e:6c:de:2f:b4:58:c0:2e:d4:73:fd:bd:2f:93:
c9:5d:bd:39:0f:fa:a6:90:ad:cc:24:df:25:28:06:
07:4a:29:d9:50:15:9c:3e:37:43:e2:83:85:d4:2e:
82:c9:aa:30:b1:0a:dd:de:02:a3:2b:97:f1:9c:3b:
2d:d1:2d:ce:58:39:d0:fe:be:2d:07:0b:11:98:6a:
82:49:cb:79:eb:b7:aa:d7:e4:8c:37:82:2d:9e:d2:
fe:5e:b2:49:32:d1:2d:38:87:17:89:ac:7d:66:c0:
cb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FC:00:6E:E0:D9:C3:F6:71:6B:FA:D9:74:60:7F:FA:31:12:95:FB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cfwAbuDZw_Zxa_rZdGB_-jESlfs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.160.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:51:d4:da:ec:40:0f:e5:a6:ec:8c:f1:ef:64:81:0b:5d:b4:
e7:5a:1a:4e:c7:b5:64:5a:e3:2f:27:24:fb:83:79:f1:9c:86:
51:7a:0c:e8:42:06:5f:15:75:55:d8:6f:e5:9f:59:ad:e9:4a:
70:64:c9:84:09:0b:f5:5a:17:a6:48:30:19:b6:d8:d2:c2:02:
37:03:36:da:d5:70:17:19:b9:9a:1b:f2:f8:5a:69:3a:80:f6:
a5:ee:7b:66:a0:c9:d4:a1:ad:36:52:bf:f9:45:40:e9:13:c7:
23:86:71:c4:d2:38:e1:74:8e:8e:47:80:68:94:a5:f6:0e:4c:
d6:c9:c8:cb:f4:11:cf:0c:a3:20:a6:02:b2:27:81:eb:f9:52:
70:e2:33:c6:40:1c:d0:85:db:91:8b:da:92:20:f6:71:03:39:
54:04:5a:90:7f:57:5b:e6:c4:03:a0:af:6f:5f:98:e0:66:d2:
b4:fe:eb:a4:6c:47:fa:c4:62:80:0c:7a:f1:14:fb:18:c4:4f:
e6:79:37:78:3c:bb:07:87:77:d7:c3:a6:1f:00:f2:63:e0:34:
8b:b8:89:86:70:29:41:90:fe:76:ce:6a:1a:05:8e:68:1d:27:
ac:aa:f3:5c:37:0f:80:9e:91:02:73:d4:3d:6e:2e:ce:e6:aa:
7c:6a:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org