Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fhtIpn-Mo7GUVZz_V8XQnJ-Aiw8.roa
File: fhtIpn-Mo7GUVZz_V8XQnJ-Aiw8.roa (raw, json)
Hash identifier: 52SGY+NPXH9RbpQk/P4cFJiyWFSTu2S2akMz0+Fnat0=
Subject key identifier: 7E:1B:48:A6:7F:8C:A3:B1:94:55:9C:FF:57:C5:D0:9C:9F:80:8B:0F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E83
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fhtIpn-Mo7GUVZz_V8XQnJ-Aiw8.roa
Signing time: Fri 01 Sep 2023 10:16:09 +0000
ROA not before: Fri 01 Sep 2023 10:16:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4662
IP address blocks: 211.76.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7811 (0x1e83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7E1B48A67F8CA3B194559CFF57C5D09C9F808B0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:c2:0f:73:38:4d:8d:3b:3a:ab:de:94:ff:
62:3d:0e:7c:a2:27:f0:d5:16:9d:3f:0b:f4:ea:2f:
a2:7e:ea:86:f6:ae:1d:d7:61:ab:48:6e:d6:d5:95:
32:30:c8:21:f7:27:06:5f:24:3f:c0:bb:3e:e1:d8:
89:cd:6d:d9:9d:13:82:20:23:09:07:2b:e2:1d:ca:
ed:da:97:56:0b:fc:84:43:76:8f:02:15:ac:34:a8:
f9:30:cc:b3:a0:de:f4:1d:4d:27:e5:92:a1:8f:32:
6b:04:68:c7:bd:d8:31:b7:c5:3a:1a:ab:e4:34:5c:
6e:8b:8f:b4:25:b5:0d:80:ea:37:b4:67:d8:8e:52:
5d:c6:1c:4c:dd:55:0c:ab:95:23:91:08:8f:cc:47:
d4:c0:92:40:d0:0e:0e:49:d9:75:73:0b:b8:69:36:
bf:5c:bd:b6:d3:6c:71:80:d7:f5:ec:43:2e:ec:dc:
b2:87:d3:49:90:f4:37:c7:db:a6:89:32:a5:ac:c0:
09:5c:71:7e:a8:20:62:1c:7f:8f:90:fd:d4:e3:bd:
46:d8:9e:65:d0:90:1f:ee:ea:03:06:81:b1:b0:0a:
3c:d6:d0:47:d1:1a:08:7d:8b:5f:24:d8:0b:64:bb:
43:2c:07:d2:1e:7f:29:ff:43:22:1b:7e:8d:63:b0:
27:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1B:48:A6:7F:8C:A3:B1:94:55:9C:FF:57:C5:D0:9C:9F:80:8B:0F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fhtIpn-Mo7GUVZz_V8XQnJ-Aiw8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.64.0/20
Signature Algorithm: sha256WithRSAEncryption
64:75:4f:f0:0d:94:a5:39:23:fa:a0:8f:d8:b0:db:68:55:96:
5f:d9:ce:3d:11:08:5a:a3:cc:ac:66:43:bd:ad:94:64:55:66:
7a:e2:ff:57:47:63:56:d4:92:b3:27:ec:ec:e9:cc:ea:0d:fa:
38:ac:8f:bf:76:c0:cb:15:7f:52:d6:48:3d:cb:1e:29:ec:36:
0e:a9:86:c5:95:ba:c8:f6:97:2a:55:fd:ed:86:00:11:d8:15:
91:8b:58:49:65:de:70:38:41:50:b9:cd:7f:a4:f6:db:7c:da:
b0:9a:11:8c:e7:69:97:96:10:6a:82:a3:90:e9:65:16:f2:14:
f7:a6:72:96:4e:a6:85:f1:7c:17:82:89:c3:0e:28:ef:06:91:
bb:bd:b3:2b:af:43:33:99:d4:99:a4:83:46:44:51:bb:92:f9:
c3:35:55:96:ee:52:70:b8:0e:0a:3b:8d:5a:74:89:5b:34:eb:
03:64:c4:85:72:63:a3:cb:42:aa:1f:02:68:17:f7:6a:0a:f6:
5b:02:fe:ee:67:9c:fe:a0:1b:bf:80:d2:9a:46:81:09:43:18:
5c:fc:e4:4b:8a:40:97:7c:f2:6f:7d:c4:ee:67:76:84:ba:f0:
b3:30:ca:55:25:c4:10:3d:50:2e:68:0f:63:d6:bf:a8:83:b7:
33:e3:72:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org