Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mAltbp90XKlFXIfndDJjRpXDfP4.roa
File: mAltbp90XKlFXIfndDJjRpXDfP4.roa (raw, json)
Hash identifier: d9BdtC+VwDzlnGXO/a2urgLu7B98hUAvyeUK46DHJ7s=
Subject key identifier: 98:09:6D:6E:9F:74:5C:A9:45:5C:87:E7:74:32:63:46:95:C3:7C:FE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DF0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mAltbp90XKlFXIfndDJjRpXDfP4.roa
Signing time: Fri 01 Sep 2023 10:15:28 +0000
ROA not before: Fri 01 Sep 2023 10:15:28 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 211.76.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7664 (0x1df0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:28 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=98096D6E9F745CA9455C87E77432634695C37CFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:19:52:5b:df:7b:d5:e5:91:32:71:40:0b:bf:
ce:e5:d4:3b:29:14:76:23:7e:09:1b:0c:06:3e:30:
0c:8c:66:e2:6b:33:d5:c0:0b:2e:de:e4:e9:c6:f9:
90:cb:3f:37:71:35:81:5c:e3:57:59:de:f7:68:e1:
2c:a4:cb:2b:d2:34:90:a3:e7:fb:45:84:b5:58:76:
14:2e:a4:ff:b0:a9:12:6b:3a:ec:19:5d:17:ac:55:
4d:36:66:52:d1:db:48:90:97:e5:65:1a:d4:9b:ae:
72:c3:d2:d7:e5:66:08:78:57:36:89:c5:af:8e:ff:
42:ea:e8:7b:62:fc:2d:3c:e3:f6:3c:d1:01:98:be:
dd:7d:b7:7b:5e:ee:88:dc:f1:49:44:13:d2:f3:c1:
16:02:44:c4:b4:39:2b:52:04:48:01:1f:64:4a:12:
43:85:e8:ac:8b:9a:8e:59:68:a1:c6:b9:9b:6d:1e:
e0:1c:c1:11:c2:25:d4:b4:b5:9e:43:81:7e:4f:61:
1c:f4:e0:d2:9e:ff:c4:62:f9:3f:31:14:16:01:f7:
c9:88:03:d2:91:7a:8b:c0:f6:5b:19:3c:c6:9d:09:
23:db:14:dc:4c:96:36:3f:e5:70:6e:14:11:96:89:
38:1b:cb:b7:87:b4:20:d3:b9:1d:17:85:26:f5:f3:
d6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:09:6D:6E:9F:74:5C:A9:45:5C:87:E7:74:32:63:46:95:C3:7C:FE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mAltbp90XKlFXIfndDJjRpXDfP4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.40.0/22
Signature Algorithm: sha256WithRSAEncryption
15:28:eb:f0:0c:98:50:26:ea:ed:8f:35:8a:7c:47:61:34:92:
fa:56:2e:8e:b9:18:fb:f3:8b:d9:0c:2c:ad:ad:13:01:73:77:
75:e2:23:b4:8f:b4:26:fc:30:4d:52:b8:f0:10:94:ae:62:12:
19:37:a7:a4:46:9c:bc:a1:8a:5f:f3:b5:f2:b8:9f:22:32:5d:
d0:db:6d:2e:47:6b:04:64:a1:62:89:bb:3b:fc:e8:c8:d4:8a:
e3:fc:19:99:3d:1c:54:44:61:05:a0:bf:2b:b1:bb:1a:24:5d:
86:4e:d2:07:cd:e8:d9:13:b7:d0:93:78:84:4a:9a:42:7b:2e:
dd:11:eb:e3:7d:96:81:69:7b:43:e6:c6:3b:46:7e:45:e2:23:
ca:67:e3:33:fd:41:a6:83:a0:69:44:d2:93:be:db:f3:c0:91:
da:8a:46:4e:e3:58:68:32:13:64:99:f8:d1:8d:28:67:bf:2f:
fb:45:8a:0e:5b:eb:f3:2b:3a:89:ee:ee:a3:dc:dd:0a:fb:61:
50:42:74:5c:5d:92:78:0e:2d:b1:26:5d:60:b2:6d:29:3d:72:
70:ef:92:5f:b4:7a:72:36:3b:e4:3e:f5:21:1f:a2:04:65:ea:
bc:26:d4:a7:8c:cc:cf:57:51:ad:f9:c2:9a:6a:02:17:67:49:
0c:34:da:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org