Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9-Kx83dVBQm-xPSQ16RTMalqXk0.roa
File: 9-Kx83dVBQm-xPSQ16RTMalqXk0.roa (raw, json)
Hash identifier: 7b7AwNfeizaRdwzJJKfF5xLgb+gimJ7wKdOdQZP2s2g=
Subject key identifier: F7:E2:B1:F3:77:55:05:09:BE:C4:F4:90:D7:A4:53:31:A9:6A:5E:4D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DA5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9-Kx83dVBQm-xPSQ16RTMalqXk0.roa
Signing time: Fri 01 Sep 2023 10:15:06 +0000
ROA not before: Fri 01 Sep 2023 10:15:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.159.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7589 (0x1da5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F7E2B1F377550509BEC4F490D7A45331A96A5E4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:83:8b:43:d0:82:ca:5c:ed:bd:e5:cb:88:
d1:03:d1:aa:39:1e:67:49:ee:ee:08:1a:6a:55:e8:
71:97:b2:02:9a:58:85:82:a5:32:24:a2:0d:87:a7:
d5:54:44:3b:77:13:44:56:24:be:60:68:c6:f5:61:
c8:76:fb:14:0d:9d:fb:34:ca:fa:94:3f:f8:11:e5:
61:7d:10:b3:6b:5d:9a:44:44:63:89:63:71:9f:20:
48:3d:1d:9b:c9:59:72:c5:65:1c:d1:d4:23:07:0e:
6e:f9:d3:6b:5d:2e:0d:7c:93:e3:62:d0:26:19:ef:
19:ed:c6:52:b8:92:0c:46:ef:d6:17:3e:10:e2:1d:
d6:ed:66:42:58:b9:be:51:a0:0d:59:9f:a8:a4:e6:
b4:62:e9:70:7d:39:fd:c1:13:63:78:d7:50:7c:27:
26:73:b9:e5:d6:a1:84:33:9d:20:79:8b:60:a5:0e:
40:44:d5:89:1a:e2:14:d7:7b:b0:86:56:b1:c2:7b:
2b:03:d9:f3:c7:2a:80:2a:1c:ba:7d:30:65:4c:2d:
f1:61:e7:bf:3c:fa:65:9b:79:62:cf:3f:7c:58:5c:
ff:1f:69:85:ac:5d:5d:f8:22:07:16:65:bb:79:e8:
61:5e:b9:30:e4:01:ff:26:6f:a3:3a:58:b0:36:8e:
f9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E2:B1:F3:77:55:05:09:BE:C4:F4:90:D7:A4:53:31:A9:6A:5E:4D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9-Kx83dVBQm-xPSQ16RTMalqXk0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.56.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:af:04:26:06:f2:80:d3:d7:19:01:f4:af:55:46:c3:42:02:
87:d8:73:e2:e4:e3:63:26:f7:70:f4:4d:c3:26:f7:bd:82:72:
c1:2a:8c:3f:6e:23:53:a8:65:5e:3a:07:c5:f4:e9:31:ca:42:
3e:65:c9:55:82:14:8a:21:2d:ec:a1:55:13:48:b6:8a:d8:36:
57:e0:1c:9d:66:66:e4:dd:6a:5d:b6:e6:af:ad:45:6b:fd:64:
10:a2:2d:e0:c1:38:60:15:e1:61:8d:42:3f:8a:29:2d:3a:78:
ae:f5:f0:e8:70:e1:0e:6d:06:e6:2b:1c:0d:ad:84:35:22:85:
27:99:c1:68:26:93:50:cb:52:2e:52:5e:fa:f6:2d:b8:c2:7b:
e1:77:e6:b1:38:f2:ea:1e:30:5c:fb:24:5c:22:a0:40:7f:1a:
56:43:4a:ad:5b:8f:56:1f:1c:b5:03:fc:3d:44:dc:03:99:25:
55:4e:24:be:78:ff:36:fe:72:c0:57:e7:4b:52:ae:15:07:b0:
6d:ec:32:6b:04:40:81:a5:c6:97:51:8f:dc:e6:d0:f1:89:36:
72:da:a1:0d:aa:96:2b:9f:2c:9a:47:9b:05:12:13:47:b8:c9:
12:bc:48:ea:c2:fd:6f:19:85:8a:de:4a:e7:7d:c8:86:d4:3d:
a1:a3:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org