Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iFb9UPdnb1OhmjsiFx3aZIPrXMw.roa
File: iFb9UPdnb1OhmjsiFx3aZIPrXMw.roa (raw, json)
Hash identifier: fOgzI9HQEf2a10U0XJyDxnpb8DA5TBHC39aU+c2rlQ0=
Subject key identifier: 88:56:FD:50:F7:67:6F:53:A1:9A:3B:22:17:1D:DA:64:83:EB:5C:CC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E89
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iFb9UPdnb1OhmjsiFx3aZIPrXMw.roa
Signing time: Fri 01 Sep 2023 10:16:11 +0000
ROA not before: Fri 01 Sep 2023 10:16:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 45.64.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7817 (0x1e89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8856FD50F7676F53A19A3B22171DDA6483EB5CCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:e7:0f:2e:ce:da:22:d5:57:7c:56:49:41:
57:fe:44:18:9d:67:30:32:78:31:62:1b:44:2c:e3:
d1:b2:de:7d:ab:90:01:59:73:04:05:33:2d:58:9e:
64:7a:8d:eb:96:01:ef:af:df:5f:a7:fb:10:2c:b0:
7b:89:af:83:d7:f6:58:2b:65:0d:d3:22:3a:e5:f1:
14:dd:b6:b6:ff:9d:e2:b7:bb:82:56:8f:81:25:0f:
d5:13:44:1d:3b:b8:c1:80:17:14:bf:80:f4:6f:dc:
b7:07:0c:ea:1b:3c:cf:ac:f8:b3:9e:66:ec:9d:9b:
bd:01:92:a6:b3:47:40:4f:4e:8e:c6:d0:3e:a9:fe:
85:87:5e:09:97:a1:d3:3e:8f:39:49:df:27:b0:cd:
75:50:aa:42:0b:b2:de:11:7b:63:95:f0:84:10:64:
66:d2:33:bd:32:52:5f:47:24:a4:f5:32:ae:89:84:
24:b7:4e:ff:fe:0e:f9:42:ae:d8:80:49:1f:2d:2f:
6e:5b:c4:42:ce:50:9f:9f:bb:21:a3:2b:5a:a7:9a:
a4:3c:89:b7:eb:00:81:3a:07:df:c6:db:bf:cf:81:
13:a3:a6:87:6c:46:eb:cc:d2:7c:b3:00:d6:da:68:
ac:e3:0d:0e:3b:ad:75:92:d4:75:a8:de:c6:73:07:
e4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:56:FD:50:F7:67:6F:53:A1:9A:3B:22:17:1D:DA:64:83:EB:5C:CC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iFb9UPdnb1OhmjsiFx3aZIPrXMw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.34.0/24
Signature Algorithm: sha256WithRSAEncryption
81:63:13:c9:57:34:b8:30:2c:fe:b8:c1:e1:73:74:fd:78:73:
be:62:9e:5c:88:fb:42:c0:d2:25:d2:88:cf:00:ff:3a:b1:da:
81:42:74:6c:3d:f4:36:38:7e:63:9b:bf:d9:9f:43:2e:ac:2e:
15:21:e6:21:f5:0e:eb:ee:e1:dd:dd:a7:37:53:cb:de:c6:b0:
30:e2:49:45:5f:1d:f1:84:ca:96:9f:5a:55:29:68:41:29:81:
5a:fd:2f:f9:ad:f4:53:fe:de:b6:d9:3d:5a:29:a3:a4:b7:d0:
99:a1:1d:f1:fd:b2:15:ab:3b:74:17:74:98:91:a6:c0:2b:b5:
0d:33:61:56:84:82:4e:c5:5c:53:23:a4:3a:b9:b6:f3:58:9e:
97:e0:2b:d5:89:61:47:dc:91:26:35:65:e8:6f:94:ec:76:fe:
9c:aa:f8:17:6a:d6:23:42:96:99:53:54:2d:14:76:75:f7:31:
37:d8:e4:14:cb:6f:8a:59:3d:ac:a9:a2:82:b3:be:52:70:e8:
3c:b2:35:0e:3d:13:db:80:1e:3d:7d:5c:78:3f:57:48:33:8e:
85:16:9a:dc:cf:a4:96:91:9e:3d:d2:9d:6d:e7:99:16:f6:3d:
0a:f0:92:21:fa:24:44:c6:a0:11:f0:06:0f:d6:16:e0:12:a9:
7a:ca:44:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org