Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lXJXQUe7m_93O_Sx2aYNXsrIax4.roa
File: lXJXQUe7m_93O_Sx2aYNXsrIax4.roa (raw, json)
Hash identifier: WFqtmPOrJDkEJWoveW2i3ZHu41xluowOnVRIDdYdhWs=
Subject key identifier: 95:72:57:41:47:BB:9B:FF:77:3B:F4:B1:D9:A6:0D:5E:CA:C8:6B:1E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DF2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lXJXQUe7m_93O_Sx2aYNXsrIax4.roa
Signing time: Fri 01 Sep 2023 10:15:29 +0000
ROA not before: Fri 01 Sep 2023 10:15:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 103.225.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7666 (0x1df2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9572574147BB9BFF773BF4B1D9A60D5ECAC86B1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:77:d2:e5:c7:f6:df:41:99:1c:86:8f:16:4d:
ee:0d:6b:3e:7e:f9:8f:33:1b:80:88:d4:f4:18:90:
2c:f1:43:da:87:20:fd:ca:d0:16:bb:bc:25:b8:64:
fb:66:6e:5c:a8:e9:95:54:c7:40:5b:e6:0a:1a:23:
1c:0b:c4:cc:08:ce:63:27:22:db:d2:89:21:0a:5c:
3f:30:2e:52:98:1a:72:8b:72:4e:43:b9:e8:09:bf:
51:bf:54:8a:df:8a:3f:39:ac:03:eb:28:98:d7:3a:
6f:f5:c9:42:9f:71:d2:68:ff:0f:c1:79:9a:06:3a:
9c:5e:fe:3b:52:6c:ce:dc:ea:cc:54:d2:89:e1:34:
34:35:2f:fa:78:57:11:36:43:48:26:75:92:4f:ac:
50:28:1d:31:90:7d:16:6e:89:5d:f8:68:fa:29:e8:
95:58:ae:35:c2:1a:e8:b9:9c:46:32:1c:a9:ab:2e:
d0:74:c8:7d:a7:5f:00:aa:23:e1:3a:36:e2:6f:89:
a1:e9:80:e8:5c:66:24:ec:32:d0:0a:85:a5:19:4e:
65:fa:ab:c4:df:57:09:26:14:f4:43:a5:ee:26:12:
20:d2:69:a2:d1:c4:97:45:a7:99:86:2a:7b:de:e4:
7d:21:dd:52:38:b9:1c:6f:a7:d2:1e:52:83:31:0a:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:72:57:41:47:BB:9B:FF:77:3B:F4:B1:D9:A6:0D:5E:CA:C8:6B:1E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lXJXQUe7m_93O_Sx2aYNXsrIax4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.0.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:67:71:46:b1:b5:d6:68:ec:06:99:f6:01:dd:e8:37:63:e7:
2f:d9:b6:16:7c:71:6b:da:07:a7:b7:f7:74:a7:27:83:20:44:
4f:b2:e0:2e:c5:fb:2c:81:e5:60:3a:03:4a:25:1c:fc:43:59:
46:32:a8:94:41:bf:15:b0:23:99:2b:93:0b:f2:29:71:52:0f:
62:9c:90:13:4d:d9:74:14:e2:a8:af:13:2b:d4:ee:d3:4f:f0:
17:e8:5f:1a:7d:82:78:23:7b:07:0f:af:a1:76:6c:80:9b:23:
a2:81:22:7d:b8:60:74:74:d0:ba:81:3f:a4:64:c8:aa:0e:39:
c7:1c:41:08:30:d4:ed:05:8f:1d:e6:78:32:32:7e:90:24:fa:
47:30:1b:95:56:a6:30:b3:a8:36:b3:48:02:af:e1:54:da:90:
15:c4:c3:87:a5:84:0d:8b:05:cf:5a:d6:78:ba:c8:d8:eb:75:
54:ae:1c:33:15:d7:8a:c8:7e:e2:fc:9d:be:7e:82:89:f7:91:
a2:23:e4:10:55:a8:0f:c4:ff:d2:b5:3d:91:25:de:c0:b4:34:
16:b6:47:46:da:05:51:b3:75:d1:49:64:b3:93:59:58:13:86:
f3:37:6e:d6:0f:68:89:d9:ff:a9:d7:80:b8:a4:2e:d5:c2:3d:
94:7e:8c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org