Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iaTJbFaDdC2l_fSw0RiRnPLQznI.roa
File: iaTJbFaDdC2l_fSw0RiRnPLQznI.roa (raw, json)
Hash identifier: 8cdlY0Q3dc5U+AKCLc/eC1fG74FHRFbsdq61bDmqLMc=
Subject key identifier: 89:A4:C9:6C:56:83:74:2D:A5:FD:F4:B0:D1:18:91:9C:F2:D0:CE:72
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1F2F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iaTJbFaDdC2l_fSw0RiRnPLQznI.roa
Signing time: Tue 30 Jan 2024 08:41:37 +0000
ROA not before: Tue 30 Jan 2024 08:41:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 123.0.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7983 (0x1f2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 30 08:41:37 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=89A4C96C5683742DA5FDF4B0D118919CF2D0CE72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:07:1d:9e:6f:06:95:8a:92:55:25:26:4f:
46:a0:f7:1c:65:31:2b:5f:68:e3:b2:35:fd:22:a5:
4d:f7:8d:06:e7:ac:5b:fa:61:bd:1e:77:d4:e3:bb:
c6:2b:84:02:03:70:c9:bd:98:f2:c2:38:68:1f:99:
fe:41:9d:b2:53:92:5f:0a:aa:83:63:16:6a:46:bf:
28:81:77:c5:6c:fc:ac:9d:93:30:a6:8f:92:20:57:
4b:86:b7:2e:aa:ff:1a:52:71:2e:86:86:19:98:2e:
1e:c9:44:0a:12:6b:6f:4c:d1:19:8f:1f:6b:16:94:
2f:3e:22:d7:45:da:91:9e:22:2d:69:44:6d:99:b0:
44:6f:ec:7e:0d:af:a7:5c:bb:77:3c:34:dd:4f:81:
4b:4e:5d:ae:c2:0b:44:94:df:ce:e8:df:ad:3e:95:
ac:b4:e6:e4:25:cf:39:40:ab:58:3a:93:03:da:c7:
b7:6a:a7:3b:83:71:ee:38:b7:60:a2:4f:ad:70:cb:
1c:84:6f:dc:6d:0f:94:20:31:63:92:4e:e4:fd:51:
99:d7:94:9c:20:1e:ee:9c:ad:a4:a3:7c:e5:0b:4f:
8c:14:91:65:e3:8d:32:35:05:39:26:51:b1:28:05:
e0:54:6a:8d:0c:2a:38:a3:34:af:0f:ad:5a:22:e1:
08:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A4:C9:6C:56:83:74:2D:A5:FD:F4:B0:D1:18:91:9C:F2:D0:CE:72
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iaTJbFaDdC2l_fSw0RiRnPLQznI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:d9:9f:76:0c:a6:51:fb:76:6d:d8:59:28:a1:f0:ea:c7:5b:
b3:23:a2:65:8c:85:61:c2:c1:1e:62:75:26:89:5d:2b:43:c4:
fd:86:27:53:47:18:53:ad:9a:5b:c4:ba:be:bd:26:42:b3:e1:
3c:ca:0d:e4:dc:ee:cd:8f:94:ac:66:61:7b:61:1e:b7:b8:3a:
07:b2:dc:75:2c:ce:81:31:52:79:c3:b4:32:19:a5:e6:9e:e3:
ef:3c:83:95:7c:a3:4a:c6:18:68:68:dd:a6:9e:1b:2e:b5:c4:
2f:52:6a:f6:4e:5c:63:06:95:46:56:69:5e:d7:3b:bf:c3:7b:
c6:e2:ba:7f:ab:ef:84:70:18:78:e8:5f:c0:21:9f:f0:43:e5:
14:61:5f:e3:61:45:64:ee:ea:90:9b:b2:2c:5c:42:ad:e6:56:
db:ce:63:e4:97:53:4a:4a:75:69:b8:f6:d0:ec:45:a9:fd:7c:
fc:8c:a9:5d:9d:56:ee:12:7f:09:b5:1a:a1:d3:18:fc:f1:b1:
65:50:20:c7:95:53:5f:37:16:d6:45:9b:5a:c3:21:3e:7d:ea:
1a:e8:ea:b3:07:48:b9:50:68:7f:ef:37:72:7e:00:a7:b0:c8:
7a:4c:12:28:2d:74:b1:99:45:ce:5b:68:4b:33:ce:f3:cf:79:
a8:94:41:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org