Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tWQmJt3EqKJnNALMWop04AbaUlM.roa
File: tWQmJt3EqKJnNALMWop04AbaUlM.roa (raw, json)
Hash identifier: c9LQrKv30PX5JVNmgLj8mZ2HoRzPjtx5uVgN/FY9/4o=
Subject key identifier: B5:64:26:26:DD:C4:A8:A2:67:34:02:CC:5A:8A:74:E0:06:DA:52:53
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E42
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tWQmJt3EqKJnNALMWop04AbaUlM.roa
Signing time: Fri 01 Sep 2023 10:15:50 +0000
ROA not before: Fri 01 Sep 2023 10:15:50 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 61.61.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7746 (0x1e42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:50 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B5642626DDC4A8A2673402CC5A8A74E006DA5253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:61:4c:39:f1:27:3d:18:f6:c8:9f:62:4b:
d9:9d:e2:37:a8:5c:76:8b:4e:71:de:64:36:63:92:
65:ef:62:95:2c:e6:a3:48:8c:fc:88:8c:0e:ce:00:
95:93:46:56:9a:b2:2d:11:a7:10:dc:eb:64:67:f3:
55:a1:d0:39:e9:78:4c:a5:73:bf:29:00:1d:1d:8f:
dd:22:b8:de:ed:66:b5:67:44:ec:95:13:ea:4c:dd:
81:ca:80:b0:46:7b:94:30:c9:bc:00:9e:55:eb:64:
0f:77:63:5e:1c:39:2f:9b:4a:aa:a7:b1:70:04:ba:
f4:e3:72:5e:eb:25:1f:d9:d8:cd:e4:44:9b:1d:b7:
5b:d2:97:ea:96:e1:f7:a6:ab:24:a2:3b:27:25:88:
7f:45:a1:f3:12:16:d4:dd:a1:9a:bd:1d:c7:22:2a:
9c:58:a9:70:74:7f:74:50:b6:4d:06:db:68:56:3d:
80:9b:e4:9b:b2:f4:84:02:0e:84:4e:80:d2:27:f9:
29:7e:16:47:0a:95:13:6b:a2:9f:16:35:9f:39:d6:
dc:8d:b0:17:19:0a:e4:f2:92:a0:d6:da:b1:76:8b:
8f:e3:2f:21:95:8d:49:b2:6d:27:44:5b:87:f0:37:
3a:7c:da:bf:e8:30:76:35:f0:95:db:4c:aa:48:cd:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:64:26:26:DD:C4:A8:A2:67:34:02:CC:5A:8A:74:E0:06:DA:52:53
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tWQmJt3EqKJnNALMWop04AbaUlM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.212.0/22
Signature Algorithm: sha256WithRSAEncryption
39:e2:9c:b5:b4:61:d8:54:73:6e:58:a7:38:4a:6b:19:a9:7f:
22:60:7d:3c:d5:9c:31:83:23:3a:f6:13:e0:37:1e:e4:ca:47:
c7:ba:39:6b:09:92:91:9d:a3:ef:a8:79:53:77:01:2e:6b:fc:
15:ea:59:4f:cb:87:2a:14:18:40:6a:18:b5:98:74:4e:f4:ad:
aa:f6:7a:52:1f:63:30:5d:33:34:66:bd:1c:25:d7:18:0f:80:
8f:81:95:6a:9a:3e:bb:ae:ad:bf:c9:6a:db:f7:b1:48:44:d6:
75:be:35:a5:3d:ee:89:2d:81:42:46:76:1b:12:51:22:10:24:
64:9f:46:1a:e4:1d:80:03:c3:91:c8:1c:52:89:14:bd:54:06:
36:f8:99:a9:a0:a2:f2:ae:f5:61:a9:af:51:b2:b2:a3:b1:1e:
a1:dc:0e:3a:13:8c:d9:af:e7:49:62:3c:3a:b8:ea:8f:c9:2c:
dc:2d:64:be:04:07:52:1c:50:0c:a6:d1:9a:e5:44:5c:fd:8e:
fd:fd:f2:4e:09:52:98:33:41:9d:cb:34:7b:84:d5:19:c7:4a:
d8:13:b9:0a:62:f8:90:f7:8f:6b:9e:dd:68:21:79:cd:34:57:
c8:e3:9e:16:6c:bf:1e:f8:a3:e8:ae:fa:f3:a3:23:bf:ee:9d:
be:fa:0b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org