Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3YZ-sC6H-loPToHahP6pNc-v1Qg.roa
File: 3YZ-sC6H-loPToHahP6pNc-v1Qg.roa (raw, json)
Hash identifier: vZEfcnkSH70wQIDYTe8KLdrqMcUpUYegT/v8YYoiD5s=
Subject key identifier: DD:86:7E:B0:2E:87:FA:5A:0F:4E:81:DA:84:FE:A9:35:CF:AF:D5:08
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D69
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3YZ-sC6H-loPToHahP6pNc-v1Qg.roa
Signing time: Fri 01 Sep 2023 10:14:47 +0000
ROA not before: Fri 01 Sep 2023 10:14:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7529 (0x1d69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:47 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DD867EB02E87FA5A0F4E81DA84FEA935CFAFD508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:78:5d:5c:c1:c4:4b:6a:38:dd:49:fc:ac:
39:39:60:f1:c8:3e:0c:47:06:0d:3b:f6:84:f8:4c:
a3:e1:d7:88:89:9a:d9:27:c4:d1:c6:91:56:ad:14:
08:59:d5:f8:7f:3d:00:77:eb:47:ec:cf:5a:a8:7d:
6d:08:0d:5f:21:b3:5b:92:e2:45:29:90:79:79:40:
13:79:98:25:f5:14:0e:58:10:c3:e2:de:b3:a7:f2:
09:3a:e5:ea:51:e8:49:6f:fe:d3:24:8b:8e:c1:3d:
b0:06:0d:11:7f:75:a7:6c:a1:6f:63:1f:a6:67:c1:
a4:0f:a3:de:87:f1:10:1d:5c:6d:26:49:4b:27:1d:
27:aa:19:cc:b9:31:4a:6e:c5:61:99:be:6b:8d:90:
41:10:1d:ec:5c:a0:38:4b:57:d9:b0:ad:c5:13:f6:
43:67:e3:71:12:8b:f7:68:05:19:05:c8:11:15:d8:
8f:0c:aa:2f:58:67:d7:a4:43:41:67:01:28:bb:8c:
4b:4f:36:84:0d:c0:57:b6:9c:2c:94:69:9f:7a:4e:
da:e5:12:d6:c9:ea:48:12:a9:a7:ca:06:79:13:f3:
e8:df:ea:2b:8f:bb:1e:c3:cc:98:cf:b8:01:c8:3b:
64:85:4b:5f:4e:f5:0e:5b:16:c6:55:c1:a5:53:15:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:86:7E:B0:2E:87:FA:5A:0F:4E:81:DA:84:FE:A9:35:CF:AF:D5:08
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3YZ-sC6H-loPToHahP6pNc-v1Qg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:30:e7:c6:50:e9:09:90:a6:3f:e7:e4:fe:34:2c:af:a9:5d:
59:69:9a:5c:ad:4f:be:6e:e6:f7:d8:82:a1:a9:c1:43:43:b9:
7c:af:de:53:82:4e:44:ec:97:84:b9:e0:3c:cd:be:dd:d0:1d:
53:8a:3c:c4:58:d2:10:a2:68:3d:dd:ce:be:3e:90:a2:8d:66:
84:b3:da:0a:22:9f:7a:78:1d:10:7a:57:fc:68:d1:0c:3b:13:
53:d6:c4:bd:3a:69:be:db:d8:fd:11:da:17:94:d1:bc:63:67:
30:b6:81:1e:1b:89:f4:2b:b1:98:58:49:ae:54:bd:91:3c:30:
46:42:66:14:0f:6a:80:62:2a:8a:7d:31:71:c1:c8:52:f1:21:
45:c8:c8:ea:fb:a8:84:24:fc:5b:b4:eb:15:1a:c6:95:88:e3:
dd:1d:0c:f1:ed:2e:3d:75:c5:61:74:84:43:0d:ec:16:62:0f:
b7:9b:0f:9c:d0:0a:48:44:5f:24:63:4d:de:91:22:dc:17:ab:
b1:c9:39:7c:63:63:db:a5:2d:ca:16:5f:5e:21:41:d8:25:b4:
84:00:61:18:a7:c1:36:c9:5f:0a:e1:c8:71:1f:37:11:8e:00:
2c:cd:ef:df:11:71:6c:67:01:6d:8b:32:1f:ae:55:bc:3e:df:
b8:71:05:c2
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICHWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE0NDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEREODY3RUIwMkU4N0ZB
NUEwRjRFODFEQTg0RkVBOTM1Q0ZBRkQ1MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPlXhdXMHES2o43Un8rDk5YPHIPgxHBg079oT4TKPh14iJmtkn
xNHGkVatFAhZ1fh/PQB360fsz1qofW0IDV8hs1uS4kUpkHl5QBN5mCX1FA5YEMPi
3rOn8gk65epR6Elv/tMki47BPbAGDRF/dadsoW9jH6ZnwaQPo96H8RAdXG0mSUsn
HSeqGcy5MUpuxWGZvmuNkEEQHexcoDhLV9mwrcUT9kNn43ESi/doBRkFyBEV2I8M
qi9YZ9ekQ0FnASi7jEtPNoQNwFe2nCyUaZ96TtrlEtbJ6kgSqafKBnkT8+jf6iuP
ux7DzJjPuAHIO2SFS19O9Q5bFsZVwaVTFWBPAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQU3YZ+sC6H+loPToHahP6pNc+v1QgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzNZWi1zQzZILWxvUFRvSGFo
UDZwTmMtdjFRZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAx
njANBgkqhkiG9w0BAQsFAAOCAQEAEjDnxlDpCZCmP+fk/jQsr6ldWWmaXK1Pvm7m
99iCoanBQ0O5fK/eU4JOROyXhLngPM2+3dAdU4o8xFjSEKJoPd3Ovj6Qoo1mhLPa
CiKfengdEHpX/GjRDDsTU9bEvTppvtvY/RHaF5TRvGNnMLaBHhuJ9CuxmFhJrlS9
kTwwRkJmFA9qgGIqin0xccHIUvEhRcjI6vuohCT8W7TrFRrGlYjj3R0M8e0uPXXF
YXSEQw3sFmIPt5sPnNAKSERfJGNN3pEi3Bersck5fGNj26UtyhZfXiFB2CW0hABh
GKfBNslfCuHIcR83EY4ALM3v3xFxbGcBbYsyH65VvD7fuHEFwg==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org