Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FQVP6bkIfJoN9bEBVtNbsTBxLWw.roa
File: FQVP6bkIfJoN9bEBVtNbsTBxLWw.roa (raw, json)
Hash identifier: afS7FrM3wVHHCcA0YerqWvStXzYtxDQnhHqJYL91ZQM=
Subject key identifier: 15:05:4F:E9:B9:08:7C:9A:0D:F5:B1:01:56:D3:5B:B1:30:71:2D:6C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E76
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FQVP6bkIfJoN9bEBVtNbsTBxLWw.roa
Signing time: Fri 01 Sep 2023 10:16:05 +0000
ROA not before: Fri 01 Sep 2023 10:16:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7798 (0x1e76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=15054FE9B9087C9A0DF5B10156D35BB130712D6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9b:1e:16:fc:85:cb:e1:5d:c1:6f:0b:a1:98:
96:5d:5d:01:e5:82:57:10:fd:77:46:54:9c:b7:cd:
b1:c8:9f:dd:25:a4:ae:56:60:7e:b5:d5:e4:f3:ff:
3b:f8:cd:1b:f8:f5:d1:97:a1:41:c1:f3:a4:d8:b3:
0a:1e:6e:ff:1c:22:86:c0:d3:13:20:da:8b:78:a1:
92:9b:65:7b:0b:4f:a7:20:fb:e8:ee:b9:51:23:94:
cc:50:af:e7:e1:85:ef:47:80:91:8c:74:02:81:d1:
7f:a8:01:b1:d3:a6:4e:2d:3b:b3:1a:03:9d:90:27:
0e:4b:85:a6:10:2d:b1:ec:88:74:44:c3:28:9b:32:
03:03:cc:25:7b:2d:3d:e8:94:bb:64:47:98:fa:71:
8e:72:36:1f:90:d7:e7:3c:7a:58:cc:33:fe:83:b8:
1d:8c:35:79:cd:94:f1:a6:62:c8:30:e7:0c:53:34:
7c:0e:a2:29:15:d0:bd:ee:42:62:50:6c:36:b8:f4:
89:f1:67:23:0b:0a:cf:86:ae:2e:0b:8c:26:1c:39:
3c:36:27:9e:85:df:18:73:c6:8f:06:da:97:62:70:
d0:5f:26:73:7f:58:fa:09:ba:0a:8a:ec:4b:09:b8:
ec:c9:c5:70:3e:a1:12:be:bd:cc:08:ab:93:15:1b:
0a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:05:4F:E9:B9:08:7C:9A:0D:F5:B1:01:56:D3:5B:B1:30:71:2D:6C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FQVP6bkIfJoN9bEBVtNbsTBxLWw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.136.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:18:55:82:f1:b0:17:a8:31:51:00:dc:10:06:35:15:cd:76:
ed:99:98:b7:d8:e4:11:23:75:4b:29:52:f9:0c:17:28:bb:f4:
7b:77:fc:0e:fd:5b:b2:8b:57:c3:88:e3:8a:b1:cb:59:67:59:
d7:55:c8:93:83:91:21:91:7c:38:d9:2d:0d:09:0e:7c:e5:66:
0f:a1:39:f9:83:ca:94:40:90:6e:cb:54:e5:9e:04:69:b0:a6:
f7:da:05:54:c7:dc:fb:42:a1:59:8f:03:89:34:f8:e8:d3:37:
d1:7f:25:09:ad:5f:e6:da:ad:1e:45:ef:c0:2a:aa:5d:9b:76:
bf:5d:9b:b0:73:2e:4f:83:02:de:ac:c3:15:6e:fe:85:bc:41:
f4:e7:ab:1d:11:07:b7:86:49:e8:f0:38:5c:e7:ac:2b:5a:9a:
5b:e3:20:ed:d5:4f:0c:66:66:36:ec:b1:ba:8e:d4:70:6d:8e:
96:70:de:c6:03:0b:ed:5d:6d:de:5a:72:7a:96:3f:db:8a:22:
25:0a:20:cb:9e:f1:cf:77:9b:fb:c2:a7:fb:03:d7:66:36:7b:
88:15:48:8d:87:00:9a:d5:e9:78:d5:9c:82:34:53:b7:43:28:
32:38:e4:45:03:d8:fc:9a:99:cb:de:f9:9a:ae:e8:f2:ad:f1:
e0:af:37:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org