Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2jcTrt7nYKkJZuZPNHd6HwYqpQM.roa
File: 2jcTrt7nYKkJZuZPNHd6HwYqpQM.roa (raw, json)
Hash identifier: GfgsPoY+ivJBJ/AMT7jVMd1PoeoW7fCofX8V+NOW4WY=
Subject key identifier: DA:37:13:AE:DE:E7:60:A9:09:66:E6:4F:34:77:7A:1F:06:2A:A5:03
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D94
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2jcTrt7nYKkJZuZPNHd6HwYqpQM.roa
Signing time: Fri 01 Sep 2023 10:15:01 +0000
ROA not before: Fri 01 Sep 2023 10:15:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.159.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7572 (0x1d94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DA3713AEDEE760A90966E64F34777A1F062AA503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:b8:90:3b:19:ef:92:91:0c:08:07:ed:b0:
3c:6c:6d:2e:5e:fd:f5:aa:34:32:8f:06:02:78:45:
11:b0:8a:82:ac:26:84:4d:1f:5a:96:bb:5b:ce:1f:
fe:80:d0:28:8d:82:c3:c6:f3:c3:3b:4e:ea:32:ae:
76:0c:30:64:99:b3:21:7d:5f:fe:a8:a9:44:78:be:
1c:b8:f4:32:9d:a9:10:96:b7:31:1d:2c:5e:de:11:
35:80:53:72:d8:e2:8e:2f:00:62:3d:f5:75:04:a1:
2f:de:15:05:aa:9d:b8:49:04:8e:eb:60:47:58:38:
2a:1c:61:37:a4:a2:23:b2:75:a2:fe:b4:03:48:8a:
f9:a4:d0:cc:7d:b6:9b:d5:4e:37:44:99:d7:d6:c1:
75:59:a1:27:5a:a4:49:e2:97:9d:99:b4:aa:8d:89:
9d:84:94:ff:38:a7:2a:07:11:98:1f:9e:26:6d:12:
f3:f0:01:88:da:e6:94:38:3c:4c:fe:1d:0d:e2:91:
65:28:07:d2:13:07:38:37:7d:45:9e:a0:36:a3:80:
f1:11:45:b1:69:c0:cc:b4:37:72:cf:0c:eb:39:c6:
e0:20:2b:df:b2:c2:03:df:15:05:5a:fe:80:21:f7:
e5:9d:93:8f:0e:5d:d7:c3:2b:8a:b1:f3:61:6c:46:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:37:13:AE:DE:E7:60:A9:09:66:E6:4F:34:77:7A:1F:06:2A:A5:03
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2jcTrt7nYKkJZuZPNHd6HwYqpQM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.40.0/21
Signature Algorithm: sha256WithRSAEncryption
19:9f:14:1d:84:7b:7a:48:4e:00:f5:a9:d2:d1:16:97:4b:6f:
e9:b9:ae:8a:27:1b:49:76:a1:4d:93:50:09:e8:1e:89:6e:33:
74:41:31:e2:25:5d:b7:ba:f3:c6:87:bb:84:fb:6f:33:b1:9f:
0d:57:15:71:49:1f:34:98:e6:0d:38:2f:bc:b6:7a:28:0c:8e:
7c:5a:e8:3b:94:88:cd:04:f6:54:57:55:31:56:3e:4a:5c:9a:
ac:5b:98:47:18:57:6a:c0:1b:53:0e:15:f5:00:50:aa:42:ee:
24:a7:bd:70:18:5e:2b:4d:37:b1:af:b8:53:cb:bb:cf:09:b2:
e2:22:bd:6b:d6:b1:41:8d:5d:f4:d4:f9:0e:0e:9f:49:90:b5:
1c:02:2c:b3:5a:e8:e5:d4:83:84:d7:c6:15:9f:b2:9e:98:c4:
5e:85:e3:b3:e4:cf:10:e8:0d:3d:e1:05:67:d4:a5:6e:90:4f:
52:98:a3:e6:9c:87:7a:21:3b:42:b7:d1:b0:b6:31:77:b1:6c:
08:14:fa:21:66:1b:02:2b:36:c5:36:63:98:b7:05:27:88:be:
0c:21:65:29:ce:4c:b8:9d:5b:bc:52:ab:a1:2c:52:20:38:ff:
30:f8:94:97:69:79:4b:63:9e:a4:0a:7f:75:1e:5e:56:08:8c:
4d:8c:0a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org