Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cl1-cu2APPIHmrwCvz3wpM3U3TA.roa
File: cl1-cu2APPIHmrwCvz3wpM3U3TA.roa (raw, json)
Hash identifier: D6pRuNEtO4p4BpYWtGfiR5wl913v0LogZW+a/CpB42I=
Subject key identifier: 72:5D:7E:72:ED:80:3C:F2:07:9A:BC:02:BF:3D:F0:A4:CD:D4:DD:30
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E11
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cl1-cu2APPIHmrwCvz3wpM3U3TA.roa
Signing time: Fri 01 Sep 2023 10:15:38 +0000
ROA not before: Fri 01 Sep 2023 10:15:38 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 123.0.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7697 (0x1e11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:38 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=725D7E72ED803CF2079ABC02BF3DF0A4CDD4DD30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:98:62:f6:f0:7c:7f:01:dc:5b:94:69:fe:
4c:e5:14:34:e8:f2:19:7d:e5:55:27:6b:d2:82:2c:
b3:ff:f9:5e:07:ad:df:cb:aa:96:23:ce:e5:a7:85:
92:1f:64:8e:e2:c1:e5:93:0d:11:38:0d:2a:47:ec:
b1:73:40:c2:8c:0e:b1:58:32:84:53:ec:c3:1d:66:
a1:0d:2a:8d:7a:9c:d9:83:5f:f7:58:fc:d9:01:43:
68:08:59:d1:2c:2b:ee:89:83:8e:0f:6c:52:8a:dc:
d6:6f:be:5f:4f:fa:6d:77:c0:63:4c:40:1e:3e:30:
2e:60:d4:39:8a:0a:be:64:11:da:2d:8c:24:f8:1e:
06:20:2c:ec:71:c0:19:b4:63:b7:bf:ac:18:48:bd:
5d:71:63:16:28:ec:1f:cf:ad:9b:c6:e3:ce:7b:b1:
55:5e:34:f2:32:b8:b6:54:a8:a1:0c:1c:3c:a1:3d:
71:b1:7b:99:ff:7f:9e:4e:c4:23:2d:47:85:f9:37:
c9:e1:3b:db:51:ed:7b:e6:22:c8:1f:c4:08:7f:bb:
1e:88:ee:cf:e5:fe:4d:83:28:a0:1f:0c:0c:3e:3a:
f5:1e:38:8d:4e:c4:15:5d:b4:c3:bb:29:ed:83:7d:
78:e3:41:bf:86:0c:32:7f:f0:9c:a6:e7:ac:8d:a4:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5D:7E:72:ED:80:3C:F2:07:9A:BC:02:BF:3D:F0:A4:CD:D4:DD:30
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cl1-cu2APPIHmrwCvz3wpM3U3TA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.32.0/21
Signature Algorithm: sha256WithRSAEncryption
68:2c:d2:16:0e:86:fe:15:6e:58:07:c5:5a:43:79:f4:cb:42:
ed:6c:e3:56:53:26:b6:67:38:94:b5:bf:e2:48:61:bf:31:b0:
67:7d:17:31:c2:81:bb:cf:e5:40:4e:29:4d:4f:53:ed:a8:3d:
32:7e:3b:46:bc:cb:c5:a2:56:26:00:b1:59:eb:5a:d9:27:af:
4c:10:80:f5:3e:39:c2:93:7a:60:c7:1d:cb:0f:92:bc:59:94:
63:49:db:71:35:14:a2:df:7f:3e:f1:cf:4a:68:54:23:a6:b9:
99:74:26:ba:75:e3:77:03:03:05:d3:9c:35:19:04:c4:1e:8b:
d7:2e:2d:75:e3:45:ee:c2:e0:75:a7:47:e1:92:8e:0b:37:a0:
78:32:b7:e7:94:72:77:bc:5e:b7:e0:96:a4:4c:8e:2a:d5:0c:
2f:b7:78:6f:99:3f:40:bf:8a:ef:6b:84:29:7b:fa:2d:41:5c:
93:2b:af:67:b0:a1:10:b7:f7:44:35:82:67:47:0f:8f:74:0a:
d5:80:2a:2f:95:94:d0:e1:a2:09:82:ae:95:08:75:18:41:c8:
38:94:dc:9d:97:d7:d5:a8:9d:e3:8a:68:20:5f:78:24:39:cb:
0f:9c:5d:09:fc:c8:33:c3:a1:23:94:cc:9c:43:d1:e1:40:70:
ea:2e:8e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org