Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iZ5sFwwn1wEYR1lPxuxSBeImCVQ.roa
File: iZ5sFwwn1wEYR1lPxuxSBeImCVQ.roa (raw, json)
Hash identifier: ERFL3uEQMTeh/V0EIYJ/V6JvfWr1/yWpH+Suq2n2oTQ=
Subject key identifier: 89:9E:6C:17:0C:27:D7:01:18:47:59:4F:C6:EC:52:05:E2:26:09:54
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E2F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iZ5sFwwn1wEYR1lPxuxSBeImCVQ.roa
Signing time: Fri 01 Sep 2023 10:15:45 +0000
ROA not before: Fri 01 Sep 2023 10:15:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7727 (0x1e2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:45 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=899E6C170C27D7011847594FC6EC5205E2260954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:79:e5:c8:44:be:86:77:90:eb:2a:18:f2:82:
b7:df:27:c0:0b:7e:9a:50:ce:4c:9d:c3:59:53:c7:
ed:ea:50:00:28:e7:e3:40:65:2d:9a:24:62:d5:66:
8b:77:9f:93:85:0a:92:3f:62:19:58:39:0c:a4:97:
f3:46:91:16:1b:d2:7e:08:23:65:40:9d:1a:ec:81:
7f:7b:76:fc:88:7e:ba:29:00:4b:8b:4c:48:a0:5e:
0d:ef:b8:08:a5:bf:be:88:5b:3c:3c:cf:83:4e:ec:
b1:b2:eb:16:10:e5:7d:0f:e2:d4:70:5b:c4:60:97:
af:7b:18:a3:06:a6:f2:ee:06:ee:e8:7e:16:15:18:
0a:82:eb:d6:f6:07:19:8f:1b:b4:33:78:50:cf:9a:
5c:d8:55:ec:f2:ce:1a:11:83:a0:2c:f6:34:c5:31:
d6:00:f5:cc:21:db:91:00:70:8f:85:ac:33:e3:22:
65:20:e1:03:8c:81:ec:21:96:09:a1:67:c8:19:2d:
c3:9b:c0:cc:c3:1c:43:b3:6e:84:36:8d:72:8e:e4:
d0:a1:e4:a9:e5:44:46:e7:b8:5f:ad:a2:c4:7c:2f:
cd:ec:2b:27:88:66:fe:6c:ed:b1:31:89:49:14:99:
ac:8c:9e:98:7c:1c:84:ae:9b:c8:60:1e:85:3e:11:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9E:6C:17:0C:27:D7:01:18:47:59:4F:C6:EC:52:05:E2:26:09:54
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iZ5sFwwn1wEYR1lPxuxSBeImCVQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.128.0/18
Signature Algorithm: sha256WithRSAEncryption
04:9c:55:a8:c2:42:90:7b:23:bb:57:49:71:66:b1:e2:c9:79:
74:e6:f1:de:81:98:3d:db:27:49:0b:ac:f1:8d:3b:39:f5:f9:
26:e0:db:cf:ad:ec:5f:9f:0e:22:2d:b5:02:ae:56:a0:90:13:
7a:87:76:a4:ea:82:f0:ee:19:8c:26:4c:cb:a2:e5:28:d0:de:
b2:86:c5:29:42:2e:b7:74:9c:fd:61:7f:a4:13:7d:71:2e:00:
b5:27:f5:28:67:22:45:3b:3f:02:d2:8a:e7:47:dd:f2:f1:d1:
cc:86:7d:d2:31:34:22:ff:c4:6f:aa:25:b5:db:46:11:65:e5:
d3:27:8b:5d:bc:db:55:50:4a:d3:20:ae:1d:82:19:9b:d4:eb:
c5:26:06:2c:23:d8:f8:f4:9a:8e:b2:9b:d4:9a:26:6e:37:ea:
e1:52:32:f5:0f:3c:3c:e8:83:38:92:e6:8d:f8:f6:fa:ce:89:
c9:8c:ff:eb:be:49:31:94:9b:ab:ee:2e:6f:d9:1a:26:a6:ea:
9f:36:9b:00:52:7d:43:72:d7:26:9e:31:e5:0c:fd:8a:d3:39:
c9:44:f5:5f:ac:e7:b3:3d:41:3b:48:4b:f8:57:af:52:75:d1:
c4:0e:28:19:ee:cc:79:e7:61:87:8e:f5:a3:10:14:2b:08:bc:
2a:e9:a1:37
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHi8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1NDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg5OUU2QzE3MEMyN0Q3
MDExODQ3NTk0RkM2RUM1MjA1RTIyNjA5NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD6eeXIRL6Gd5DrKhjygrffJ8ALfppQzkydw1lTx+3qUAAo5+NA
ZS2aJGLVZot3n5OFCpI/YhlYOQykl/NGkRYb0n4II2VAnRrsgX97dvyIfropAEuL
TEigXg3vuAilv76IWzw8z4NO7LGy6xYQ5X0P4tRwW8Rgl697GKMGpvLuBu7ofhYV
GAqC69b2BxmPG7QzeFDPmlzYVezyzhoRg6As9jTFMdYA9cwh25EAcI+FrDPjImUg
4QOMgewhlgmhZ8gZLcObwMzDHEOzboQ2jXKO5NCh5KnlREbnuF+tosR8L83sKyeI
Zv5s7bExiUkUmayMnph8HISum8hgHoU+EWpXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUiZ5sFwwn1wEYR1lPxuxSBeImCVQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2laNXNGd3duMXdFWVIxbFB4
dXhTQmVJbUNWUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa0
2oAwDQYJKoZIhvcNAQELBQADggEBAAScVajCQpB7I7tXSXFmseLJeXTm8d6BmD3b
J0kLrPGNOzn1+Sbg28+t7F+fDiIttQKuVqCQE3qHdqTqgvDuGYwmTMui5SjQ3rKG
xSlCLrd0nP1hf6QTfXEuALUn9ShnIkU7PwLSiudH3fLx0cyGfdIxNCL/xG+qJbXb
RhFl5dMni12821VQStMgrh2CGZvU68UmBiwj2Pj0mo6ym9SaJm436uFSMvUPPDzo
gziS5o349vrOicmM/+u+STGUm6vuLm/ZGiam6p82mwBSfUNy1yaeMeUM/YrTOclE
9V+s57M9QTtIS/hXr1J10cQOKBnuzHnnYYeO9aMQFCsIvCrpoTc=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org