Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1n1CiL2--7gNlHhKbSTVRqI0fJ4.roa
File: 1n1CiL2--7gNlHhKbSTVRqI0fJ4.roa (raw, json)
Hash identifier: tOHRTcP5J/7UWPn51cdxOdktdSENFVqA0g/FjX0Ggdc=
Subject key identifier: D6:7D:42:88:BD:BE:FB:B8:0D:94:78:4A:6D:24:D5:46:A2:34:7C:9E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1EA4
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1n1CiL2--7gNlHhKbSTVRqI0fJ4.roa
Signing time: Fri 01 Sep 2023 10:16:18 +0000
ROA not before: Fri 01 Sep 2023 10:16:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7844 (0x1ea4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D67D4288BDBEFBB80D94784A6D24D546A2347C9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:de:71:6e:7f:d0:12:dd:76:3d:18:0c:5c:f0:
e5:56:02:ac:47:6c:fc:a7:62:7f:ac:97:27:14:8d:
7b:04:5c:ad:a8:af:30:ef:8b:d8:2c:5c:ff:84:1b:
f0:db:f8:30:85:06:c7:8a:69:ce:8e:59:c2:cb:2d:
a3:66:56:6f:a0:4d:03:8d:33:fa:d5:0d:49:a7:96:
e1:c4:9d:17:0d:4a:da:6c:16:35:5e:6a:25:6c:d0:
e0:2b:50:fa:09:8f:04:61:73:69:29:8f:43:94:47:
02:55:d7:a8:89:ab:cb:c1:60:c2:0f:56:e8:41:bc:
95:54:09:2c:ca:c7:1d:19:bc:88:21:f8:49:39:d5:
a1:1a:17:e0:54:34:25:24:08:21:1b:4a:72:1a:89:
7f:9f:d5:5a:d0:82:df:e0:dd:af:63:0f:c1:a1:97:
d7:4a:e0:49:a4:92:b4:37:74:5b:66:15:17:b1:7b:
f3:ba:fc:5b:23:37:0f:44:51:6f:69:38:65:2e:e9:
fb:ce:da:f6:c4:00:2e:60:7e:fc:85:17:46:5f:2a:
54:1d:ad:af:5f:d0:e3:a1:11:b5:12:70:e8:31:03:
e2:82:e0:55:0d:21:50:35:fe:49:5f:95:99:71:e3:
b0:03:53:44:50:90:7d:12:f2:70:9d:1b:02:59:c3:
6b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7D:42:88:BD:BE:FB:B8:0D:94:78:4A:6D:24:D5:46:A2:34:7C:9E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1n1CiL2--7gNlHhKbSTVRqI0fJ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.57.0/24
Signature Algorithm: sha256WithRSAEncryption
97:97:d9:a4:43:79:bf:4c:44:55:27:2a:48:b0:d8:3d:cc:1a:
32:5c:cb:96:5c:85:52:4f:62:2d:36:52:b6:41:bd:e3:01:ab:
46:ca:71:40:34:db:24:fd:fd:a0:8b:53:ce:fe:12:09:78:d1:
75:6b:40:28:07:75:65:25:79:0c:ba:05:fc:d1:7b:37:80:37:
d0:7c:32:e3:1d:92:87:c0:62:41:11:1a:be:9c:33:3c:dc:68:
84:25:ca:6d:b3:e3:26:98:35:63:3e:26:39:79:1e:fc:86:2d:
9f:68:a4:67:2e:b6:39:38:66:bb:6d:78:96:b7:f9:26:ed:db:
24:b8:cd:1f:c8:c1:5b:f2:02:6f:ef:2b:d9:77:aa:ab:fa:17:
9e:08:a9:f7:bb:21:3d:3b:10:e4:7d:23:ac:f0:c6:83:a7:85:
b6:b7:a9:83:48:98:7e:6a:54:5b:3a:07:ce:8e:fc:0d:ed:da:
67:81:af:99:f1:70:aa:21:2e:46:19:59:ca:93:58:79:42:80:
52:00:f5:2f:de:ff:a0:58:23:5d:02:02:05:29:e5:c2:d5:44:
11:ac:58:43:32:a7:df:ef:10:18:a6:c9:9f:b0:d8:29:0e:22:
f5:a5:8d:ec:a8:aa:62:d7:3b:6f:1d:ce:d6:ab:ef:44:82:67:
35:18:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org