Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2CnytNR4tH8e9fAz8aDYfIHm64I.roa
File: 2CnytNR4tH8e9fAz8aDYfIHm64I.roa (raw, json)
Hash identifier: SRgup+NVjzgQDnyKVNLFL/iSydS8aWpPvpik9xnSLiM=
Subject key identifier: D8:29:F2:B4:D4:78:B4:7F:1E:F5:F0:33:F1:A0:D8:7C:81:E6:EB:82
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DB5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2CnytNR4tH8e9fAz8aDYfIHm64I.roa
Signing time: Fri 01 Sep 2023 10:15:11 +0000
ROA not before: Fri 01 Sep 2023 10:15:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 49.159.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7605 (0x1db5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D829F2B4D478B47F1EF5F033F1A0D87C81E6EB82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:de:c0:40:48:20:13:c6:ce:ee:ae:a6:3b:a6:
b2:97:c5:c0:b7:8e:49:ad:2c:96:fa:e7:c1:3a:3c:
0a:37:80:6b:34:0b:49:ae:a1:b8:73:61:22:15:4f:
63:7a:51:95:47:17:b1:42:26:88:01:f0:d7:e1:87:
b2:22:14:6e:08:9d:e7:89:3a:62:ef:d5:71:75:20:
04:a1:d4:62:2a:2e:05:77:e5:b9:7e:18:28:2d:1d:
f0:2e:aa:dc:9d:c6:16:7b:5c:e2:b8:0b:63:cd:c7:
2d:44:75:9a:e3:59:75:5a:6a:68:b7:ee:c2:da:21:
da:d4:5f:ed:2d:24:58:c1:d0:b7:88:d2:a5:ca:d7:
bb:f6:05:e3:13:93:f8:be:14:94:e1:e7:4a:b3:4b:
fe:0d:5f:9f:12:01:f2:f3:41:da:fc:7b:c6:a2:b4:
8b:e7:b9:3f:bd:32:d9:8c:95:57:d2:58:4e:57:78:
95:89:ad:39:59:17:62:f9:e1:d5:b9:27:8a:77:2d:
63:f9:4e:fe:2d:47:93:2d:c9:a1:5e:1f:7f:b1:d1:
80:9a:28:8c:2e:37:5e:ae:67:28:56:68:6e:f4:37:
16:c7:e4:3c:68:2e:62:c8:9b:b1:ff:63:d1:d4:62:
9c:65:3c:d7:65:72:df:2f:82:41:ff:a7:c8:ea:60:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:29:F2:B4:D4:78:B4:7F:1E:F5:F0:33:F1:A0:D8:7C:81:E6:EB:82
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2CnytNR4tH8e9fAz8aDYfIHm64I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.212.0/22
Signature Algorithm: sha256WithRSAEncryption
09:00:5d:84:01:c7:b5:52:8b:8d:2f:b3:76:61:05:60:5b:15:
31:56:9d:59:2a:64:e5:6e:a8:fc:36:7b:12:3a:16:f0:35:6f:
d7:59:c5:82:31:58:0e:9f:38:ad:6b:6e:8b:50:f8:a4:66:89:
3c:67:3c:f2:52:bb:9a:5f:b9:f9:04:bf:b8:9d:ea:69:57:01:
99:91:12:1b:56:75:28:18:b5:9d:de:ad:86:9d:2b:fc:2a:24:
53:7d:17:5a:39:22:f9:ac:ac:99:77:cb:1b:a1:ea:b4:0e:01:
c8:c3:d6:1e:be:f2:63:cb:65:3b:fd:53:58:d2:84:48:9c:0a:
d2:f1:c2:1a:db:5b:3a:5c:63:e4:92:0d:b2:7f:37:7f:0c:88:
a4:26:f8:3b:de:cc:b9:df:38:90:1a:60:39:9b:56:c4:85:63:
d4:20:22:46:5b:57:60:73:37:11:c6:b6:9b:34:31:ff:22:22:
d1:57:01:ea:52:29:28:6a:62:6d:66:7d:b6:ef:40:b0:9f:4f:
63:69:dd:87:fd:23:72:6b:98:a2:b9:c7:c5:54:17:8e:93:3d:
8c:09:61:97:1c:f1:4d:ea:ea:cb:84:5d:c6:8c:79:43:ce:bf:
f6:95:cd:2d:48:99:dd:58:92:ef:f2:89:6a:c3:8e:f3:0d:50:
c5:51:57:54
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHbUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ4MjlGMkI0RDQ3OEI0
N0YxRUY1RjAzM0YxQTBEODdDODFFNkVCODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDb3sBASCATxs7urqY7prKXxcC3jkmtLJb658E6PAo3gGs0C0mu
obhzYSIVT2N6UZVHF7FCJogB8Nfhh7IiFG4IneeJOmLv1XF1IASh1GIqLgV35bl+
GCgtHfAuqtydxhZ7XOK4C2PNxy1EdZrjWXVaami37sLaIdrUX+0tJFjB0LeI0qXK
17v2BeMTk/i+FJTh50qzS/4NX58SAfLzQdr8e8aitIvnuT+9MtmMlVfSWE5XeJWJ
rTlZF2L54dW5J4p3LWP5Tv4tR5MtyaFeH3+x0YCaKIwuN16uZyhWaG70NxbH5Dxo
LmLIm7H/Y9HUYpxlPNdlct8vgkH/p8jqYNqjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU2CnytNR4tH8e9fAz8aDYfIHm64IwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzJDbnl0TlI0dEg4ZTlmQXo4
YURZZklIbTY0SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
n9QwDQYJKoZIhvcNAQELBQADggEBAAkAXYQBx7VSi40vs3ZhBWBbFTFWnVkqZOVu
qPw2exI6FvA1b9dZxYIxWA6fOK1rbotQ+KRmiTxnPPJSu5pfufkEv7id6mlXAZmR
EhtWdSgYtZ3erYadK/wqJFN9F1o5IvmsrJl3yxuh6rQOAcjD1h6+8mPLZTv9U1jS
hEicCtLxwhrbWzpcY+SSDbJ/N38MiKQm+DvezLnfOJAaYDmbVsSFY9QgIkZbV2Bz
NxHGtps0Mf8iItFXAepSKShqYm1mfbbvQLCfT2Np3Yf9I3JrmKK5x8VUF46TPYwJ
YZcc8U3q6suEXcaMeUPOv/aVzS1Imd1Yku/yiWrDjvMNUMVRV1Q=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org