Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ESa3aJJzOXgW7yieN5c7LV8ZwFY.roa
File: ESa3aJJzOXgW7yieN5c7LV8ZwFY.roa (raw, json)
Hash identifier: 13Qir6gn6MnE6/0qPJfuMmwb3E9RB9Ke1drgTldAZmk=
Subject key identifier: 11:26:B7:68:92:73:39:78:16:EF:28:9E:37:97:3B:2D:5F:19:C0:56
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E27
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ESa3aJJzOXgW7yieN5c7LV8ZwFY.roa
Signing time: Fri 01 Sep 2023 10:15:43 +0000
ROA not before: Fri 01 Sep 2023 10:15:43 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7719 (0x1e27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:43 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1126B7689273397816EF289E37973B2D5F19C056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:dd:48:7b:92:19:62:47:14:6f:a8:28:73:5b:
36:78:53:8c:60:cb:91:72:ef:ff:2f:37:74:ec:f3:
b3:28:e2:94:2e:25:92:f7:f4:54:17:c7:5c:4c:bc:
f8:27:2c:95:16:63:b8:76:2f:94:de:16:10:36:c2:
75:5c:66:d6:2d:1c:2a:07:01:7e:85:e7:f1:ef:67:
d4:80:9c:3a:c2:ca:62:e9:b0:5d:7d:28:42:49:2d:
e1:d4:3b:74:09:5d:26:73:e5:06:2b:ce:40:09:cc:
12:df:af:8d:0e:ff:aa:28:7e:97:e9:da:cb:a6:65:
b5:6f:bf:44:7f:c9:52:4d:bf:ea:63:99:a9:e4:85:
68:c6:18:ac:a4:ba:b4:3b:38:36:39:9e:6e:79:64:
5e:d0:a6:19:67:d7:3b:fa:bb:6c:24:01:26:65:d6:
88:d1:a0:dc:dd:80:8f:1c:e1:a8:86:e0:10:63:25:
eb:9b:03:bc:73:cb:09:d6:f5:de:3e:63:05:8a:ad:
1a:09:44:f6:0c:77:81:78:32:30:8a:14:f9:d1:4f:
1f:aa:b6:83:94:67:79:20:08:ca:dd:93:57:e1:79:
03:c8:4f:ba:91:5a:4a:0b:d3:f3:e9:92:c1:2a:a8:
ee:dd:a8:42:5e:14:46:91:49:b0:ba:db:36:14:2b:
25:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:26:B7:68:92:73:39:78:16:EF:28:9E:37:97:3B:2D:5F:19:C0:56
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ESa3aJJzOXgW7yieN5c7LV8ZwFY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.140.0/22
Signature Algorithm: sha256WithRSAEncryption
14:70:14:02:48:3b:e2:73:f5:ea:00:b3:e2:0e:8f:2d:78:34:
4e:5e:7b:db:44:5b:02:34:f5:d0:32:10:4d:5d:f5:86:1b:dd:
87:4d:ec:b8:f3:fc:f6:9b:06:f9:17:00:4a:e8:42:eb:4c:83:
e7:a8:2c:76:d7:75:ac:d8:ed:17:28:40:88:df:d8:c6:17:96:
df:8b:26:6b:d7:35:a8:57:17:3b:ad:39:f2:07:0c:7e:3c:d3:
3b:d9:4e:ba:3c:1b:73:e6:e2:47:fb:92:d5:66:ed:6f:7e:d7:
d4:a1:38:ec:89:60:77:44:42:67:9c:59:ee:3e:dd:ee:2d:72:
f5:d3:6b:b5:dd:e1:7e:c1:d7:08:7c:47:60:3d:e9:9f:72:13:
53:79:c4:aa:c6:0f:4a:03:03:94:fa:f9:67:51:fa:41:29:c0:
e2:15:59:b6:e0:4e:33:22:0d:77:c2:73:17:f1:89:01:3b:40:
b0:0d:3a:26:b9:73:95:52:f5:ab:1c:e1:c3:d1:c5:6f:db:d9:
fb:58:96:3c:7f:47:42:5f:a4:01:be:12:37:5b:fd:97:a0:2c:
60:d5:05:ce:eb:93:a2:da:b3:ad:7f:58:4e:df:79:cc:06:e7:
e5:94:c5:81:e2:b1:ba:60:3d:d4:3d:e7:8a:95:86:8f:4a:37:
3b:15:a4:25
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHicwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDExMjZCNzY4OTI3MzM5
NzgxNkVGMjg5RTM3OTczQjJENUYxOUMwNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD63Uh7khliRxRvqChzWzZ4U4xgy5Fy7/8vN3Ts87Mo4pQuJZL3
9FQXx1xMvPgnLJUWY7h2L5TeFhA2wnVcZtYtHCoHAX6F5/HvZ9SAnDrCymLpsF19
KEJJLeHUO3QJXSZz5QYrzkAJzBLfr40O/6oofpfp2sumZbVvv0R/yVJNv+pjmank
hWjGGKykurQ7ODY5nm55ZF7Qphln1zv6u2wkASZl1ojRoNzdgI8c4aiG4BBjJeub
A7xzywnW9d4+YwWKrRoJRPYMd4F4MjCKFPnRTx+qtoOUZ3kgCMrdk1fheQPIT7qR
WkoL0/PpksEqqO7dqEJeFEaRSbC62zYUKyVfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUESa3aJJzOXgW7yieN5c7LV8ZwFYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0VTYTNhSkp6T1hnVzd5aWVO
NWM3TFY4WndGWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
nowwDQYJKoZIhvcNAQELBQADggEBABRwFAJIO+Jz9eoAs+IOjy14NE5ee9tEWwI0
9dAyEE1d9YYb3YdN7Ljz/PabBvkXAEroQutMg+eoLHbXdazY7RcoQIjf2MYXlt+L
JmvXNahXFzutOfIHDH480zvZTro8G3Pm4kf7ktVm7W9+19ShOOyJYHdEQmecWe4+
3e4tcvXTa7Xd4X7B1wh8R2A96Z9yE1N5xKrGD0oDA5T6+WdR+kEpwOIVWbbgTjMi
DXfCcxfxiQE7QLANOia5c5VS9asc4cPRxW/b2ftYljx/R0JfpAG+Ejdb/ZegLGDV
Bc7rk6Las61/WE7fecwG5+WUxYHisbpgPdQ954qVho9KNzsVpCU=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org