Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0YmyXE9Afh6ADBa1OQArE9lphoI.roa
File: 0YmyXE9Afh6ADBa1OQArE9lphoI.roa (raw, json)
Hash identifier: 2NB8ek8y5+xEUMR6njJXNlfsOo2SI37ByYOvksBeSzc=
Subject key identifier: D1:89:B2:5C:4F:40:7E:1E:80:0C:16:B5:39:00:2B:13:D9:69:86:82
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E7A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0YmyXE9Afh6ADBa1OQArE9lphoI.roa
Signing time: Fri 01 Sep 2023 10:16:06 +0000
ROA not before: Fri 01 Sep 2023 10:16:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 49.159.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7802 (0x1e7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D189B25C4F407E1E800C16B539002B13D9698682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:b8:f8:45:72:1c:0c:b7:88:16:5f:f9:9e:
f3:19:fd:10:2b:49:fc:57:f0:1e:30:d3:37:83:df:
ea:d4:dd:e1:f2:8b:1f:83:78:ab:cd:35:57:6a:a8:
08:f2:74:7f:92:c9:a9:cc:5b:d5:4a:e6:e9:7a:e8:
03:85:dd:94:4f:ce:bc:8c:41:35:b7:8b:ae:88:0e:
76:02:3e:f8:f5:5d:c4:6e:a6:95:a0:8a:57:64:66:
92:30:7a:c2:ce:da:fe:58:0d:48:07:3e:3f:2b:10:
aa:bb:59:7e:21:07:18:8c:4e:52:7b:41:5f:4a:51:
d1:b7:7c:0c:e5:54:d0:fd:7e:7c:b5:b8:06:35:e4:
64:ea:bd:58:cb:a3:05:8a:da:44:08:ef:2c:e7:07:
24:ac:92:93:40:31:9c:bd:98:fd:d4:09:01:bd:e5:
2b:c1:a0:b5:b8:e1:b5:19:ff:eb:b9:ba:4c:bd:42:
66:64:4c:72:b7:d4:71:a0:3d:47:44:5d:6d:92:98:
c0:78:4b:5b:e7:97:7e:f4:5b:a2:68:50:5b:03:18:
66:15:4d:d2:f2:81:87:8e:18:3a:60:ce:93:ba:fb:
1b:60:00:45:aa:11:d6:53:c8:ae:fb:73:19:85:86:
78:b6:ce:67:1a:40:3c:ad:f3:32:a5:6e:53:47:53:
28:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:89:B2:5C:4F:40:7E:1E:80:0C:16:B5:39:00:2B:13:D9:69:86:82
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0YmyXE9Afh6ADBa1OQArE9lphoI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.220.0/22
Signature Algorithm: sha256WithRSAEncryption
50:b7:94:37:66:4b:44:e4:cc:c6:0e:fc:33:98:3b:30:27:33:
bb:f8:e8:a6:47:17:c3:75:dc:df:c8:46:60:c2:be:1b:80:cc:
0f:e0:d7:3c:14:86:be:74:95:0d:88:c7:24:0f:9a:3d:dd:8a:
d8:e2:ee:3a:f3:d8:28:94:65:a6:e6:75:b4:8d:c0:77:0a:72:
c2:39:9c:33:22:83:1d:aa:6c:e7:07:d5:e9:d0:f7:69:15:46:
de:8f:2e:0e:0e:f6:cd:e6:57:b4:17:a6:82:25:f1:fe:31:1e:
9f:72:0c:1c:2f:f1:11:5d:ae:9c:9c:b3:59:8e:eb:eb:2b:38:
47:62:1a:3c:7f:d2:56:9a:3a:32:34:f2:1a:5e:ac:5d:58:51:
e0:6f:21:13:ff:37:4c:a5:23:2c:03:72:a7:d4:f3:66:dc:26:
89:0e:de:2b:90:91:2a:eb:79:4b:f0:9d:4a:e3:ce:3e:e1:08:
62:87:15:fb:c9:2d:74:f6:16:f1:5e:9c:06:30:37:27:89:c7:
a1:be:b3:db:24:7d:be:84:0b:da:84:87:73:d4:fd:07:26:a9:
50:38:6c:eb:15:80:06:fb:82:f5:cb:66:7f:46:e4:33:ab:d0:
a5:2f:5c:1b:56:82:9c:0d:df:f0:69:7e:2f:13:6d:2a:12:30:
85:c1:9c:24
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHnowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE2MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQxODlCMjVDNEY0MDdF
MUU4MDBDMTZCNTM5MDAyQjEzRDk2OTg2ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmMrj4RXIcDLeIFl/5nvMZ/RArSfxX8B4w0zeD3+rU3eHyix+D
eKvNNVdqqAjydH+SyanMW9VK5ul66AOF3ZRPzryMQTW3i66IDnYCPvj1XcRuppWg
ildkZpIwesLO2v5YDUgHPj8rEKq7WX4hBxiMTlJ7QV9KUdG3fAzlVND9fny1uAY1
5GTqvVjLowWK2kQI7yznBySskpNAMZy9mP3UCQG95SvBoLW44bUZ/+u5uky9QmZk
THK31HGgPUdEXW2SmMB4S1vnl370W6JoUFsDGGYVTdLygYeOGDpgzpO6+xtgAEWq
EdZTyK77cxmFhni2zmcaQDyt8zKlblNHUyh/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU0YmyXE9Afh6ADBa1OQArE9lphoIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzBZbXlYRTlBZmg2QURCYTFP
UUFyRTlscGhvSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
n9wwDQYJKoZIhvcNAQELBQADggEBAFC3lDdmS0TkzMYO/DOYOzAnM7v46KZHF8N1
3N/IRmDCvhuAzA/g1zwUhr50lQ2IxyQPmj3ditji7jrz2CiUZabmdbSNwHcKcsI5
nDMigx2qbOcH1enQ92kVRt6PLg4O9s3mV7QXpoIl8f4xHp9yDBwv8RFdrpycs1mO
6+srOEdiGjx/0laaOjI08hperF1YUeBvIRP/N0ylIywDcqfU82bcJokO3iuQkSrr
eUvwnUrjzj7hCGKHFfvJLXT2FvFenAYwNyeJx6G+s9skfb6EC9qEh3PU/QcmqVA4
bOsVgAb7gvXLZn9G5DOr0KUvXBtWgpwN3/Bpfi8TbSoSMIXBnCQ=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org