Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8kXXfnfmWAZ0YJP7ZicSsGtgoZ8.roa
File: 8kXXfnfmWAZ0YJP7ZicSsGtgoZ8.roa (raw, json)
Hash identifier: gD3LJ1YuFPVa81jEMQSwy+LgcLxNGyaD3m462kHjw+c=
Subject key identifier: F2:45:D7:7E:77:E6:58:06:74:60:93:FB:66:27:12:B0:6B:60:A1:9F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E5A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8kXXfnfmWAZ0YJP7ZicSsGtgoZ8.roa
Signing time: Fri 01 Sep 2023 10:15:55 +0000
ROA not before: Fri 01 Sep 2023 10:15:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7770 (0x1e5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F245D77E77E65806746093FB662712B06B60A19F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d6:1e:d3:ad:06:09:5f:4e:e8:aa:03:ec:bd:
06:19:45:06:f0:12:98:15:4e:fe:8a:29:7d:ed:52:
5d:20:ce:65:67:83:d4:90:f6:06:db:83:db:b7:b6:
72:d9:f2:71:29:d2:17:5d:43:58:b8:ed:f4:81:15:
41:11:46:be:50:c9:95:c5:c9:89:b3:be:ad:64:12:
44:71:9a:b0:88:89:23:5e:13:a8:bd:76:ac:9f:5f:
b3:4d:d3:42:ee:38:be:0f:77:94:b9:07:8a:61:dc:
ab:3d:07:9a:c4:9e:53:0b:45:46:0e:13:3b:54:b0:
23:61:91:d0:13:e6:f6:f4:e1:43:d3:3c:d3:49:1d:
85:8a:07:b4:43:7e:e2:ab:dc:88:c7:e1:30:cd:c3:
88:0d:1e:c3:9b:12:c7:67:e4:b5:99:e5:fd:df:29:
f0:cd:55:95:dc:0b:d7:30:db:de:02:e8:13:74:44:
64:d8:ed:3b:3b:0c:ac:32:31:95:63:6e:fa:a8:71:
9e:32:67:11:5f:f4:a5:ed:65:eb:6e:7c:3c:50:4c:
ab:79:79:2d:c4:11:04:7b:88:22:93:3f:b0:58:16:
7b:c6:cd:a5:41:05:51:d1:fa:90:e1:b3:8e:a4:32:
e1:ae:8e:f0:43:ed:4d:9c:d0:b1:bd:e3:2c:80:f2:
e0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:45:D7:7E:77:E6:58:06:74:60:93:FB:66:27:12:B0:6B:60:A1:9F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8kXXfnfmWAZ0YJP7ZicSsGtgoZ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.100.0/22
Signature Algorithm: sha256WithRSAEncryption
06:fc:3b:21:78:0c:a2:ab:68:ec:3e:58:48:bf:bb:1e:9f:5a:
53:ff:37:17:26:18:d3:15:52:a4:3c:b8:43:84:fa:37:ec:7e:
0d:08:e5:fd:b9:07:a3:71:ad:89:0b:56:c7:2f:6e:41:7c:f2:
52:20:9f:4a:e9:ae:c7:94:28:42:51:71:b6:82:65:c8:ab:a6:
3d:f2:8f:55:e6:59:93:e9:3e:7a:3a:f0:8d:73:d3:47:83:37:
5c:f3:c5:a2:61:e9:f1:24:92:15:09:e7:4f:7d:b9:33:1c:f8:
b5:6c:2e:35:d1:d5:ac:1f:14:7a:4a:4c:87:2c:af:d4:e4:8d:
2f:70:4a:9f:ee:85:3c:65:92:bd:fc:f7:f6:87:d8:1b:c2:d1:
05:af:5f:e5:01:b6:85:61:5a:63:46:70:b9:1d:df:06:c7:54:
30:00:27:f6:a2:2f:aa:c5:3b:aa:62:0e:44:71:f9:08:e8:54:
a5:fd:d0:86:0f:03:47:1a:a7:2b:15:9c:18:57:90:ca:2e:53:
19:e9:6a:7c:e2:2a:88:d9:07:9f:68:db:a3:9f:22:3e:36:11:
2f:e6:c0:47:2b:01:a2:36:2e:97:dc:3f:6a:d9:a6:f0:63:89:
f8:a4:e3:a7:38:b2:74:9a:7f:88:8a:66:16:f8:a0:70:44:fa:
21:4d:90:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org