Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zFOaKxvHXZ-nD2tPXgXXTNHhbdc.roa
File: zFOaKxvHXZ-nD2tPXgXXTNHhbdc.roa (raw, json)
Hash identifier: EOy0WsM/RuX5YfSk2mmiMfbqtVKNpTv0lwbnFmP7yC0=
Subject key identifier: CC:53:9A:2B:1B:C7:5D:9F:A7:0F:6B:4F:5E:05:D7:4C:D1:E1:6D:D7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2223
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zFOaKxvHXZ-nD2tPXgXXTNHhbdc.roa
Signing time: Mon 26 Aug 2024 05:33:43 +0000
ROA not before: Mon 26 Aug 2024 05:33:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 49.158.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8739 (0x2223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:43 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CC539A2B1BC75D9FA70F6B4F5E05D74CD1E16DD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:48:18:cb:81:2a:79:a2:6a:0f:71:a6:71:
64:b2:1b:eb:a9:9c:59:8a:c7:78:3a:2b:9c:63:48:
8b:d9:50:e4:cf:c3:71:e0:02:f3:62:95:12:00:ea:
88:07:59:bc:df:08:6f:6c:33:b4:03:d8:56:d8:0d:
b4:11:1f:ea:a7:a1:d1:c8:12:ff:e1:b8:94:02:7a:
45:f4:d9:30:3b:1d:e3:24:31:72:aa:ab:f4:41:42:
9d:3b:4e:3c:5c:b1:92:a2:35:85:24:7b:df:76:49:
af:fc:66:38:4c:ef:34:75:53:bc:c7:d8:73:30:13:
8b:60:ff:7c:78:f9:d5:50:de:44:f3:a5:0e:24:6f:
02:15:6c:d4:d7:8c:70:b7:d5:67:ac:32:d6:0f:79:
2a:4c:1c:c1:4d:d1:72:22:72:57:4b:7c:fa:21:05:
d3:c8:f0:3c:fb:fb:d7:21:7a:98:a7:e8:d7:cb:a0:
e4:69:0f:41:d5:ed:16:7b:11:3e:73:c1:e3:77:7b:
35:ce:b9:73:78:cb:9c:39:ca:2d:da:e3:eb:d1:9d:
c3:98:50:62:6e:8d:ea:05:65:6f:a7:e6:ec:36:4a:
2e:61:0f:16:85:f1:07:d6:38:45:d9:28:8c:72:ce:
34:01:ad:77:33:b5:3f:1d:66:b3:11:3e:27:25:a5:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:53:9A:2B:1B:C7:5D:9F:A7:0F:6B:4F:5E:05:D7:4C:D1:E1:6D:D7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zFOaKxvHXZ-nD2tPXgXXTNHhbdc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.0.0/15
Signature Algorithm: sha256WithRSAEncryption
10:27:d3:ea:41:d5:d7:48:e9:87:3f:f5:9a:5d:1f:f4:d5:01:
94:2c:b1:a8:82:ed:72:62:5d:cc:d5:db:aa:5c:f7:69:5f:7e:
6a:aa:a7:f8:0a:d1:8a:ff:b2:0e:b0:6b:98:1e:79:1e:83:9b:
23:69:19:31:6c:7a:81:96:ea:c7:67:4e:6c:7c:22:ba:ec:19:
d4:22:47:ba:65:95:c5:9a:6c:5e:09:80:4b:63:ca:dc:9b:ad:
87:0b:4d:7d:dd:dc:61:72:fc:0e:99:e5:a0:94:d0:c8:f1:fc:
7d:f0:69:91:c2:d4:bc:a3:c6:6a:57:5b:63:5d:0c:eb:21:b3:
6c:d6:9d:66:82:66:1a:52:83:2f:35:cb:12:a7:4a:12:1a:36:
b8:53:21:46:9c:c2:44:11:09:44:5e:c0:5f:8d:1c:80:0f:21:
8d:10:44:48:74:97:6d:0e:15:93:85:5b:7d:bd:46:b8:21:7a:
a8:5c:54:0c:35:87:33:39:25:3a:3f:55:8b:ee:ec:ce:5f:c1:
93:cc:0b:5f:0a:9f:b3:5b:0d:d9:97:9d:3f:54:8e:45:3f:2d:
eb:b4:aa:27:1b:1d:61:f0:a4:2b:28:7f:9a:7b:74:63:fe:26:
ad:76:67:fc:be:71:27:4f:0d:90:8a:35:54:86:b5:f9:85:f7:
d0:a6:a8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:56:40 2025 by rpki-client