Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1Ak9bY6gZH0-wrCG3-m0XryrKJs.roa
File: 1Ak9bY6gZH0-wrCG3-m0XryrKJs.roa (raw, json)
Hash identifier: C7uRMul45eOc8lDe0DloRYaqJUTghXgAHzrO48JmsoY=
Subject key identifier: D4:09:3D:6D:8E:A0:64:7D:3E:C2:B0:86:DF:E9:B4:5E:BC:AB:28:9B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D9C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1Ak9bY6gZH0-wrCG3-m0XryrKJs.roa
Signing time: Fri 01 Sep 2023 10:15:04 +0000
ROA not before: Fri 01 Sep 2023 10:15:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 114.198.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7580 (0x1d9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:04 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D4093D6D8EA0647D3EC2B086DFE9B45EBCAB289B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:16:cf:ab:5c:26:49:63:a2:15:d1:bb:67:4f:
c2:be:23:bc:fa:bb:24:6f:d4:0a:55:9e:b1:4a:3c:
94:73:7e:c0:71:5c:1a:b0:07:12:16:dc:12:6d:a5:
0e:9f:4d:4a:b6:a6:b4:c3:ab:07:7a:ca:14:01:c5:
8b:af:da:2f:c5:76:1a:58:6e:85:d3:e3:09:fe:2b:
ee:72:f1:af:18:26:8e:d0:2c:a4:6e:15:19:5c:3d:
87:ac:0a:c9:0c:86:02:64:ce:78:b9:f3:69:38:14:
56:e2:16:6e:33:67:35:e5:29:84:e8:43:39:d9:e6:
99:20:5a:b0:70:57:71:2c:a1:6b:eb:4d:87:35:0d:
99:89:f6:40:ee:73:77:21:f7:a6:35:74:f9:cb:08:
e3:20:6d:28:15:94:33:4e:ee:30:1b:0d:29:59:94:
38:39:3f:55:e6:e4:f2:6b:a9:f4:65:23:2d:85:20:
a5:89:84:12:9b:cd:44:cd:43:62:7f:d3:e5:64:4d:
3f:b4:75:19:84:1a:c4:46:e2:70:17:c8:ca:e7:b6:
be:3a:f6:2d:28:a8:a6:d2:ae:1a:fc:6c:39:9a:52:
ee:23:d3:9a:8f:d0:28:8b:34:07:68:35:a4:5d:82:
da:8d:59:96:29:a2:96:8a:2f:de:33:87:a2:19:31:
ab:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:09:3D:6D:8E:A0:64:7D:3E:C2:B0:86:DF:E9:B4:5E:BC:AB:28:9B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1Ak9bY6gZH0-wrCG3-m0XryrKJs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.164.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:07:25:e8:c2:4e:09:f4:54:20:c7:bd:86:37:94:72:5a:aa:
42:ce:46:1a:4a:b7:44:41:6d:be:b1:0e:24:8c:9a:2b:c9:91:
70:b4:b7:4d:64:57:00:15:f1:73:a7:25:ad:84:ed:fa:28:4d:
e1:d6:0a:6e:de:42:34:10:21:b9:0b:c7:7e:41:af:7e:51:28:
ef:67:cf:62:48:d1:05:00:6a:3e:0c:cb:cf:62:29:ef:00:b4:
89:3f:6a:37:42:d9:b6:43:d4:fd:3f:a3:2b:1f:fc:ce:a7:d3:
17:cc:76:cd:44:32:b6:08:f1:27:75:6a:97:14:f3:70:0e:e7:
58:79:18:dd:a4:31:e2:f7:5b:9e:d1:6e:78:be:19:c5:4c:24:
de:67:6b:1a:c9:ef:10:28:84:74:ff:65:ed:f3:70:f9:91:1c:
ef:be:da:39:78:af:19:ae:06:e3:5a:f2:70:1b:4b:81:66:08:
36:ef:09:01:5b:7d:8a:f5:4f:1a:4b:a1:d6:57:54:2d:be:5b:
1d:2b:3f:8c:d8:eb:c6:bd:93:84:93:c5:41:17:8d:ec:aa:ae:
ed:4c:68:89:5a:f3:62:62:1a:3c:e2:cf:ad:35:3f:d3:ac:6f:
96:c0:a0:e3:53:e1:56:98:eb:d8:98:e0:b7:ad:fa:ed:8d:a3:
f1:81:a5:91
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHZwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ0MDkzRDZEOEVBMDY0
N0QzRUMyQjA4NkRGRTlCNDVFQkNBQjI4OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDsFs+rXCZJY6IV0btnT8K+I7z6uyRv1ApVnrFKPJRzfsBxXBqw
BxIW3BJtpQ6fTUq2prTDqwd6yhQBxYuv2i/FdhpYboXT4wn+K+5y8a8YJo7QLKRu
FRlcPYesCskMhgJkzni582k4FFbiFm4zZzXlKYToQznZ5pkgWrBwV3EsoWvrTYc1
DZmJ9kDuc3ch96Y1dPnLCOMgbSgVlDNO7jAbDSlZlDg5P1Xm5PJrqfRlIy2FIKWJ
hBKbzUTNQ2J/0+VkTT+0dRmEGsRG4nAXyMrntr469i0oqKbSrhr8bDmaUu4j05qP
0CiLNAdoNaRdgtqNWZYpopaKL94zh6IZMastAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU1Ak9bY6gZH0+wrCG3+m0XryrKJswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzFBazliWTZnWkgwLXdyQ0cz
LW0wWHJ5cktKcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABy
xqQwDQYJKoZIhvcNAQELBQADggEBAA0HJejCTgn0VCDHvYY3lHJaqkLORhpKt0RB
bb6xDiSMmivJkXC0t01kVwAV8XOnJa2E7fooTeHWCm7eQjQQIbkLx35Br35RKO9n
z2JI0QUAaj4My89iKe8AtIk/ajdC2bZD1P0/oysf/M6n0xfMds1EMrYI8Sd1apcU
83AO51h5GN2kMeL3W57Rbni+GcVMJN5naxrJ7xAohHT/Ze3zcPmRHO++2jl4rxmu
BuNa8nAbS4FmCDbvCQFbfYr1TxpLodZXVC2+Wx0rP4zY68a9k4STxUEXjeyqru1M
aIla82JiGjziz601P9Osb5bAoONT4VaY69iY4Let+u2No/GBpZE=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org