Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Aqc4jsKR3wyItIKHEHblfOMwuxk.roa
File: Aqc4jsKR3wyItIKHEHblfOMwuxk.roa (raw, json)
Hash identifier: E/eeClID8fdSi6TgI4Acmvw+Qjp3ToautRfQJfIHHrg=
Subject key identifier: 02:A7:38:8E:C2:91:DF:0C:88:B4:82:87:10:76:E5:7C:E3:30:BB:19
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D9D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Aqc4jsKR3wyItIKHEHblfOMwuxk.roa
Signing time: Fri 01 Sep 2023 10:15:04 +0000
ROA not before: Fri 01 Sep 2023 10:15:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.240.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7581 (0x1d9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:04 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=02A7388EC291DF0C88B482871076E57CE330BB19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:42:0e:9d:f4:ec:0f:82:fd:92:f7:bb:6e:
14:ca:22:16:8b:b4:1f:b1:dc:e4:44:c0:fc:fa:bc:
67:22:f0:81:d6:c9:d5:c2:01:b8:b6:79:9c:f3:5c:
63:d3:c5:77:60:fe:45:45:2b:fe:24:be:bc:27:58:
3f:57:dc:bd:d2:4f:12:97:95:82:a7:7a:a0:c9:d9:
e5:e5:9e:67:c6:16:b4:e6:e9:09:91:70:1a:72:86:
21:aa:8d:74:9d:8a:62:fc:1f:2e:1b:af:3c:30:e9:
14:8a:a5:db:47:a9:83:fc:a3:8f:92:35:64:0a:6c:
40:3a:e3:ea:28:55:9a:6d:f9:6d:3e:8d:ab:65:72:
37:e8:39:c6:95:4e:cd:ea:24:13:7b:f2:c9:e2:0d:
82:1f:f4:85:49:45:d1:5d:a2:c3:e2:a3:8d:d2:c4:
79:70:2b:56:6a:6f:ab:2f:38:bd:4b:ce:c5:c9:9b:
72:34:54:1e:e2:e9:85:0d:79:6c:36:c9:05:72:48:
e2:9e:9e:de:d9:2d:a7:ae:1a:25:29:fa:a4:eb:a1:
3e:46:7a:f0:61:6e:25:9a:eb:ac:ec:ce:df:da:0a:
d8:72:8e:f6:6c:5b:61:52:dc:22:e9:10:19:ba:d2:
6f:da:13:30:f7:9c:76:3d:41:65:1a:4d:20:e4:1e:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A7:38:8E:C2:91:DF:0C:88:B4:82:87:10:76:E5:7C:E3:30:BB:19
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Aqc4jsKR3wyItIKHEHblfOMwuxk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.240.0/21
Signature Algorithm: sha256WithRSAEncryption
25:e7:e1:3f:96:5a:ac:c8:01:46:c2:b5:34:62:e1:2c:f1:f9:
ad:28:5d:23:9e:c9:ce:ae:a2:24:2a:05:b6:f8:40:3e:dd:23:
f1:b4:4a:11:74:a8:de:c4:4a:b4:d7:ce:99:43:53:6f:e0:26:
7b:3f:72:e5:18:dd:fa:71:be:f0:1a:db:c7:85:c9:55:51:c4:
c9:46:b9:d1:5f:72:03:bf:96:e4:c7:7e:f6:89:c6:25:57:8e:
d5:b7:49:33:a9:2f:d7:19:d9:8e:00:25:5d:71:fd:d1:76:22:
ba:21:7b:4a:36:7a:72:15:4b:2e:57:78:f8:c1:24:c1:6c:b6:
be:37:85:7d:4c:8c:40:2e:20:f7:b5:bc:c0:ae:37:c3:74:d2:
48:22:f8:54:00:e2:c5:ba:4c:23:40:0a:b7:f4:f4:22:de:25:
f4:27:e5:3b:04:7f:78:a3:f1:58:1d:09:41:2f:16:b7:fc:a0:
04:3a:7a:f7:09:d1:e7:d5:a7:e9:a0:89:ec:d0:e8:a9:25:00:
59:7b:7f:08:ae:1d:ba:0f:0c:c9:a7:2f:02:87:7d:6d:67:c6:
5b:f9:26:fc:c3:8d:ce:27:aa:69:02:b2:52:a2:02:ae:35:58:
2b:bc:4b:35:4b:26:de:fe:1e:7d:78:0a:a9:71:e1:e7:10:6e:
ad:d7:b2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org