Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5ferTHZCeST_vUGwFu0U360ANOE.roa
File: 5ferTHZCeST_vUGwFu0U360ANOE.roa (raw, json)
Hash identifier: k9LcKVaLyJSd7T8/2OzmydX01uohJJmMMxmU+zrMLFs=
Subject key identifier: E5:F7:AB:4C:76:42:79:24:FF:BD:41:B0:16:ED:14:DF:AD:00:34:E1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D6D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5ferTHZCeST_vUGwFu0U360ANOE.roa
Signing time: Fri 01 Sep 2023 10:14:48 +0000
ROA not before: Fri 01 Sep 2023 10:14:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7533 (0x1d6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E5F7AB4C76427924FFBD41B016ED14DFAD0034E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:82:94:2d:63:69:8c:1b:e3:7c:ec:86:7a:f4:
55:77:84:de:8d:dd:f6:be:14:8b:e3:c8:ff:ab:7f:
cc:2a:1f:1e:38:e8:55:e2:e4:62:44:1a:30:13:fc:
65:4b:56:c5:a4:43:10:ac:33:92:fc:5b:b5:63:34:
e1:aa:ae:c9:f0:6a:ed:65:5e:fe:3b:28:f4:b2:4f:
21:07:d4:27:ea:12:0e:00:d7:b6:a4:9e:f3:e8:37:
02:ec:49:7c:8c:cc:6d:06:8c:c7:fc:90:24:b1:28:
8c:f2:52:77:7d:21:8d:dc:8e:9d:e6:5c:61:a0:bc:
44:bd:fb:50:5e:cc:fb:db:71:b9:b6:52:f3:3e:7a:
ed:ba:eb:4d:05:3a:2d:7a:76:ba:ed:25:1d:af:57:
14:2c:85:e2:b6:9a:eb:60:aa:8d:3e:2f:75:0d:08:
62:df:31:ae:05:a4:02:30:99:38:c8:16:2f:4d:f1:
0b:83:db:62:17:7a:37:5a:a6:6e:e0:61:97:f8:c1:
34:51:47:81:47:d4:cb:d6:a8:2a:a0:63:8d:2d:cf:
79:b2:d5:35:e0:33:e3:d1:95:6d:a4:90:21:5a:5f:
6f:80:b9:d9:62:28:93:9c:b6:6c:91:1a:5d:06:4b:
78:e2:01:96:e4:e5:57:c8:27:8f:e6:87:b5:84:63:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F7:AB:4C:76:42:79:24:FF:BD:41:B0:16:ED:14:DF:AD:00:34:E1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5ferTHZCeST_vUGwFu0U360ANOE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.48.0/20
Signature Algorithm: sha256WithRSAEncryption
35:7a:43:20:cf:8b:e6:eb:75:6c:29:ab:dd:54:17:9d:75:3f:
a5:df:7a:6c:de:0d:6a:d0:d8:b9:c6:d4:39:40:ff:8e:08:45:
5e:ec:40:3c:50:6f:d1:22:00:5d:15:6c:df:51:84:cc:2d:4e:
0d:bd:7d:82:81:bf:43:92:db:d2:53:b7:08:32:13:92:60:f0:
ee:44:b9:35:c0:4f:fb:4c:0a:53:1c:9f:2f:46:df:ef:9d:60:
5b:30:0a:f3:c6:7a:48:ca:ab:c6:fa:f2:64:19:de:97:63:32:
5f:ea:b2:07:b2:30:56:d9:39:d2:67:7c:e2:98:af:1c:79:24:
2a:d2:79:f3:ea:48:54:2a:98:e7:71:d4:8b:5b:de:b5:39:f5:
00:c7:8b:6d:06:58:d9:1b:13:0d:52:b3:96:fd:91:dd:1f:f5:
8a:ac:ae:24:40:49:66:65:6e:b4:5d:28:2e:a3:b0:8b:31:48:
24:82:68:ee:cc:fc:74:c5:34:27:36:ea:b4:d6:ce:a5:28:ad:
bb:b2:9c:7b:68:8b:35:7e:94:22:fe:d8:0b:c3:ce:16:f3:b7:
b5:4f:f4:8b:bf:71:65:52:d1:a1:bf:18:79:b5:a5:e5:75:cf:
26:b8:12:ca:2d:01:d9:13:e0:30:e3:1a:d4:ec:2f:d4:44:77:
dc:a1:b2:51
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE0NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU1RjdBQjRDNzY0Mjc5
MjRGRkJENDFCMDE2RUQxNERGQUQwMDM0RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTgpQtY2mMG+N87IZ69FV3hN6N3fa+FIvjyP+rf8wqHx446FXi
5GJEGjAT/GVLVsWkQxCsM5L8W7VjNOGqrsnwau1lXv47KPSyTyEH1CfqEg4A17ak
nvPoNwLsSXyMzG0GjMf8kCSxKIzyUnd9IY3cjp3mXGGgvES9+1BezPvbcbm2UvM+
eu26600FOi16drrtJR2vVxQsheK2mutgqo0+L3UNCGLfMa4FpAIwmTjIFi9N8QuD
22IXejdapm7gYZf4wTRRR4FH1MvWqCqgY40tz3my1TXgM+PRlW2kkCFaX2+Audli
KJOctmyRGl0GS3jiAZbk5VfIJ4/mh7WEY5qNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU5ferTHZCeST/vUGwFu0U360ANOEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzVmZXJUSFpDZVNUX3ZVR3dG
dTBVMzYwQU5PRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQx
njAwDQYJKoZIhvcNAQELBQADggEBADV6QyDPi+brdWwpq91UF511P6XfemzeDWrQ
2LnG1DlA/44IRV7sQDxQb9EiAF0VbN9RhMwtTg29fYKBv0OS29JTtwgyE5Jg8O5E
uTXAT/tMClMcny9G3++dYFswCvPGekjKq8b68mQZ3pdjMl/qsgeyMFbZOdJnfOKY
rxx5JCrSefPqSFQqmOdx1Itb3rU59QDHi20GWNkbEw1Ss5b9kd0f9YqsriRASWZl
brRdKC6jsIsxSCSCaO7M/HTFNCc26rTWzqUorbuynHtoizV+lCL+2AvDzhbzt7VP
9Iu/cWVS0aG/GHm1peV1zya4EsotAdkT4DDjGtTsL9REd9yhslE=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org