Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0PFyuh9udVBq-7zduCDbjl-gJyI.roa
File: 0PFyuh9udVBq-7zduCDbjl-gJyI.roa (raw, json)
Hash identifier: BQcl6kkq7OgIwR/su9+qDUuJmyAU31GpP1fc3tB17xs=
Subject key identifier: D0:F1:72:BA:1F:6E:75:50:6A:FB:BC:DD:B8:20:DB:8E:5F:A0:27:22
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DE9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0PFyuh9udVBq-7zduCDbjl-gJyI.roa
Signing time: Fri 01 Sep 2023 10:15:27 +0000
ROA not before: Fri 01 Sep 2023 10:15:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7657 (0x1de9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D0F172BA1F6E75506AFBBCDDB820DB8E5FA02722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:84:79:42:a9:1e:20:a8:40:bd:ff:db:24:c8:
ce:28:f6:3f:8c:ed:40:62:5c:aa:ab:cc:6b:d0:bf:
7c:13:37:32:eb:d8:f2:c0:44:0e:bc:63:90:61:b7:
f6:4a:5c:d9:37:45:ce:4f:41:43:c6:6e:57:41:4c:
a3:9f:9e:c7:64:c7:25:ad:f8:9a:85:2f:3d:fa:9f:
23:ab:52:56:7b:a2:e5:5f:8c:6b:06:9e:be:89:fd:
cc:c8:f8:a3:9f:27:bb:63:f1:ed:50:83:dd:f6:30:
e4:66:5b:91:a5:2b:db:a0:d5:7d:55:7c:45:c6:7e:
51:95:91:8a:49:50:fb:39:a6:b3:84:7a:d4:2b:30:
b7:10:a2:91:c3:0a:a2:e6:f2:c6:a2:42:0b:b2:c1:
79:16:62:47:ed:40:d8:12:c0:b0:8c:55:e4:d0:a6:
43:57:bb:15:d9:93:6d:7e:45:26:29:2e:35:1d:6d:
43:ab:36:fc:1f:fd:29:04:b0:e3:74:f2:d0:73:61:
c8:48:9d:f9:94:3d:36:fe:ba:a2:d2:9c:a6:f1:55:
c4:0b:a6:76:ac:ec:43:2d:3f:a0:3d:3c:c4:72:3f:
34:f7:15:3f:a9:f5:50:9e:d1:84:ea:94:36:6d:b6:
6f:fe:90:ce:3a:2f:42:6b:d1:43:26:01:be:ab:ce:
92:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F1:72:BA:1F:6E:75:50:6A:FB:BC:DD:B8:20:DB:8E:5F:A0:27:22
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0PFyuh9udVBq-7zduCDbjl-gJyI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.24.0/21
Signature Algorithm: sha256WithRSAEncryption
40:83:80:1d:90:a4:db:b8:6e:9a:30:80:65:15:18:86:33:0b:
bd:aa:88:b4:07:09:96:3d:6b:d5:b1:08:c4:f6:d8:3a:74:03:
70:fc:10:fe:b4:b2:9e:5e:59:3d:29:b9:85:b6:20:eb:73:5e:
e2:7c:06:48:e9:22:c2:df:d8:8e:c4:b6:99:c2:ad:d1:79:86:
a9:d0:3c:f7:64:91:2f:e5:59:47:14:4c:d8:0e:aa:2d:0a:62:
2e:f4:22:5f:41:4c:67:18:6a:a7:ee:92:c7:ef:e8:c7:af:08:
23:05:4f:dd:af:c4:33:33:81:18:fb:d4:19:6b:0b:6e:c3:73:
ea:31:e4:c6:1a:0b:dc:0e:ce:aa:b0:ca:7d:83:a6:2a:2e:2a:
5f:51:3d:75:6c:8a:e7:8c:c0:b9:c5:b1:00:ea:cd:79:b4:09:
99:7b:86:77:f6:66:e4:79:f7:a0:3d:87:1e:f5:52:69:45:61:
f7:35:d5:ea:c8:7b:14:85:72:10:2d:a0:8a:26:9b:1d:37:e0:
6c:0e:9f:9e:67:bc:f7:25:f9:0c:52:af:03:1c:e4:93:3b:28:
10:2a:70:52:a8:b1:e2:03:d7:41:44:27:8e:ff:1a:87:84:2d:
84:1d:7b:75:5f:aa:c0:86:09:c9:fd:2a:f8:bd:34:32:74:93:
47:5f:2b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org