Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BsJGAUrPg8quZ5dpAJx-Cl_4_iM.roa
File: BsJGAUrPg8quZ5dpAJx-Cl_4_iM.roa (raw, json)
Hash identifier: nEWIy1XT1C0TACD9l8BF128A95IhG2bTrIBYZ9G4H80=
Subject key identifier: 06:C2:46:01:4A:CF:83:CA:AE:67:97:69:00:9C:7E:0A:5F:F8:FE:23
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D86
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BsJGAUrPg8quZ5dpAJx-Cl_4_iM.roa
Signing time: Fri 01 Sep 2023 10:14:57 +0000
ROA not before: Fri 01 Sep 2023 10:14:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.159.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7558 (0x1d86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=06C246014ACF83CAAE679769009C7E0A5FF8FE23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:36:a3:3b:32:9f:09:91:25:3a:a3:a3:d8:
cf:e3:1a:02:2d:f0:c5:cc:8c:12:56:2e:e7:26:9c:
1f:80:3b:ea:1b:62:4a:18:6f:25:d9:7f:0c:3d:28:
0d:1f:c7:d9:d3:2f:19:a8:ac:85:bc:13:a8:5a:10:
5d:62:a9:22:af:4b:ab:47:4b:a5:c5:d9:45:74:02:
6c:fc:6a:df:fd:83:8e:78:70:fe:b7:58:c6:91:e5:
f5:8f:56:fe:f3:01:c7:3c:51:ec:47:74:42:3c:54:
5c:d0:c2:ad:49:3d:e0:5b:d4:03:f7:ab:2f:4e:a5:
16:2e:bc:7c:92:be:01:a1:08:7a:ca:77:52:57:0c:
d1:f2:a5:42:6a:46:1d:c9:46:e8:b1:56:a8:9b:44:
21:2e:9b:8e:86:1b:80:bf:c0:1f:f5:9f:cc:c1:ed:
d1:d6:ce:41:8f:fb:f3:a5:18:50:01:ae:86:9a:a6:
4f:f2:0a:72:20:c0:d3:42:8c:df:06:92:8e:c7:36:
0e:09:5a:43:5d:ae:14:69:73:26:ee:ff:41:d4:d5:
1c:ed:d9:1c:8e:b3:86:df:97:35:b3:28:a0:a8:e9:
0b:1b:1a:cb:5f:c3:ff:f1:6c:b9:61:c3:93:ff:02:
55:27:2c:9e:b6:ee:3d:af:54:7d:bd:40:07:51:b0:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C2:46:01:4A:CF:83:CA:AE:67:97:69:00:9C:7E:0A:5F:F8:FE:23
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BsJGAUrPg8quZ5dpAJx-Cl_4_iM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.32.0/21
Signature Algorithm: sha256WithRSAEncryption
79:e7:4b:ce:f6:c2:96:03:e7:6a:98:89:e9:cf:97:e5:d3:a1:
da:5b:6f:b3:3b:22:23:58:63:9d:ba:eb:25:29:4a:c8:8c:53:
a4:06:9a:46:e4:2f:c7:36:ee:a2:32:d6:80:9d:36:a4:fe:ec:
fe:7e:5e:47:00:7f:73:ff:aa:7d:75:7c:f7:44:97:53:df:03:
3b:7e:df:bc:31:ca:01:41:23:f2:83:96:c4:86:3a:5f:2b:0e:
3e:a4:0c:5e:81:10:40:00:e9:08:1d:64:7e:f9:e8:0b:cc:a7:
d1:30:eb:4d:53:e7:33:b3:4b:5c:eb:ba:06:47:76:85:47:7d:
e3:70:68:b2:6d:32:ac:12:57:30:41:6b:0c:59:e5:93:9f:ba:
db:3b:4f:b9:74:98:59:64:21:92:8e:45:55:53:a4:f5:59:ae:
1e:75:c2:e4:4d:4d:cf:e9:79:3e:da:18:df:df:31:de:72:2f:
f7:6e:f2:e2:d8:b3:00:b7:ee:b6:0d:1b:a9:6f:67:39:3d:30:
38:e0:68:1b:e6:cc:03:80:f6:d9:54:eb:05:d0:4a:52:81:62:
ea:16:de:12:32:30:c7:ec:63:4f:fb:5a:8b:35:78:84:9a:2f:
66:29:81:8a:a4:17:f7:0b:86:31:29:36:88:6d:cb:ae:23:8f:
f8:b6:f7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org