Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/21NEP8JOQMkwREihh3uKHmtsnws.roa
File: 21NEP8JOQMkwREihh3uKHmtsnws.roa (raw, json)
Hash identifier: 0f5uUdVTosDWhi5hi5oGvHIx1w2yLG403irC8UlAtxI=
Subject key identifier: DB:53:44:3F:C2:4E:40:C9:30:44:48:A1:87:7B:8A:1E:6B:6C:9F:0B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D7E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/21NEP8JOQMkwREihh3uKHmtsnws.roa
Signing time: Fri 01 Sep 2023 10:14:53 +0000
ROA not before: Fri 01 Sep 2023 10:14:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 61.61.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7550 (0x1d7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DB53443FC24E40C9304448A1877B8A1E6B6C9F0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:94:c6:36:be:28:76:a8:cf:fd:9b:65:7a:
5a:0b:64:13:a9:57:bd:44:ab:45:62:09:61:4c:60:
a2:f1:bc:d8:5d:25:46:dc:27:05:2b:c5:a7:65:13:
f1:60:68:c3:01:be:d7:07:48:00:e0:13:f5:bd:74:
c0:ca:bd:56:42:46:a9:58:78:cd:9e:c8:6d:c9:0e:
62:38:b0:d1:b0:9c:13:3e:e1:d8:46:b3:a0:82:d6:
b5:61:a4:58:af:73:3f:72:22:ce:16:49:39:d6:6a:
fa:d9:9b:8e:10:25:d8:bf:3b:76:a6:d9:b3:c3:06:
2b:11:24:9d:20:ff:73:3c:95:03:34:c7:a6:52:37:
a8:48:a9:b9:b8:c6:86:72:b2:9a:86:96:dc:4a:ac:
df:8a:0a:f4:73:de:a1:8f:1e:ad:fe:d6:f4:4a:0d:
63:c7:5d:51:f2:56:1b:96:c0:82:b0:78:8b:05:ab:
77:ce:1d:ec:26:c8:1a:c7:d8:c2:ee:08:48:1e:ee:
1f:8d:de:84:f1:a9:bf:92:1e:f3:6c:b6:d1:54:ae:
e0:db:07:0f:9d:58:a9:bb:c7:07:45:05:da:a8:2f:
35:27:d7:2d:24:0c:b9:50:80:52:68:3b:e3:06:2b:
2a:53:e3:f7:eb:dd:c1:8d:1f:cd:df:e7:b2:30:6d:
62:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:53:44:3F:C2:4E:40:C9:30:44:48:A1:87:7B:8A:1E:6B:6C:9F:0B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/21NEP8JOQMkwREihh3uKHmtsnws.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.220.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:74:6a:e7:16:86:c5:c5:ef:0b:93:80:f8:34:1a:d6:12:24:
68:eb:e4:1e:69:d7:3b:9f:a8:53:40:70:26:83:32:52:bd:d0:
d0:ed:4e:e5:77:c0:f3:b0:fc:21:f4:ff:ad:14:97:0d:c6:cc:
88:5f:eb:9c:c5:44:d9:4a:f0:55:70:21:50:dc:86:b7:42:5a:
97:08:e9:fb:92:24:0b:bb:d1:60:41:c5:20:0b:c2:87:e0:1c:
ff:8f:c9:04:4c:76:be:0e:a3:98:fc:e6:58:76:0d:b2:99:bb:
6d:2f:4b:61:bc:da:26:f0:63:ef:93:86:ba:c1:9b:46:17:63:
66:2c:af:9f:6d:43:5f:27:a3:14:18:cd:8b:db:4a:4d:10:59:
63:d5:22:ef:0e:a6:3a:ff:68:11:ac:ca:5f:0f:f5:42:22:cb:
10:63:fd:18:42:3c:f4:58:3d:3e:f2:b6:79:6b:af:ee:f0:10:
db:46:e0:04:25:86:19:87:97:13:58:cf:4d:3b:51:3e:de:f4:
fb:b9:f5:41:86:d6:b8:ab:f1:63:9c:eb:2a:43:30:6e:0d:bc:
57:45:c6:bd:58:de:cd:e6:8e:d9:aa:06:2e:f9:b3:1e:ca:86:
2b:05:9b:20:f7:86:37:8d:f7:7e:ba:3a:f6:7a:c6:97:38:ec:
97:f5:ff:3e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHX4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE0NTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERCNTM0NDNGQzI0RTQw
QzkzMDQ0NDhBMTg3N0I4QTFFNkI2QzlGMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5pZTGNr4odqjP/ZtleloLZBOpV71Eq0ViCWFMYKLxvNhdJUbc
JwUrxadlE/FgaMMBvtcHSADgE/W9dMDKvVZCRqlYeM2eyG3JDmI4sNGwnBM+4dhG
s6CC1rVhpFivcz9yIs4WSTnWavrZm44QJdi/O3am2bPDBisRJJ0g/3M8lQM0x6ZS
N6hIqbm4xoZyspqGltxKrN+KCvRz3qGPHq3+1vRKDWPHXVHyVhuWwIKweIsFq3fO
HewmyBrH2MLuCEge7h+N3oTxqb+SHvNsttFUruDbBw+dWKm7xwdFBdqoLzUn1y0k
DLlQgFJoO+MGKypT4/fr3cGNH83f57IwbWL9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU21NEP8JOQMkwREihh3uKHmtsnwswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzIxTkVQOEpPUU1rd1JFaWho
M3VLSG10c253cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
PdwwDQYJKoZIhvcNAQELBQADggEBACx0aucWhsXF7wuTgPg0GtYSJGjr5B5p1zuf
qFNAcCaDMlK90NDtTuV3wPOw/CH0/60Ulw3GzIhf65zFRNlK8FVwIVDchrdCWpcI
6fuSJAu70WBBxSALwofgHP+PyQRMdr4Oo5j85lh2DbKZu20vS2G82ibwY++ThrrB
m0YXY2Ysr59tQ18noxQYzYvbSk0QWWPVIu8Opjr/aBGsyl8P9UIiyxBj/RhCPPRY
PT7ytnlrr+7wENtG4AQlhhmHlxNYz007UT7e9Pu59UGG1rir8WOc6ypDMG4NvFdF
xr1Y3s3mjtmqBi75sx7KhisFmyD3hjeN9366OvZ6xpc47Jf1/z4=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org