Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FhKlhc-5ZZl4gJXa09o6vVJD6FA.roa
File: FhKlhc-5ZZl4gJXa09o6vVJD6FA.roa (raw, json)
Hash identifier: 4wyEp4VBBL9zRR19z5XAmSgKib3Cp3dg4067GJHwT5c=
Subject key identifier: 16:12:A5:85:CF:B9:65:99:78:80:95:DA:D3:DA:3A:BD:52:43:E8:50
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D66
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FhKlhc-5ZZl4gJXa09o6vVJD6FA.roa
Signing time: Fri 01 Sep 2023 10:14:46 +0000
ROA not before: Fri 01 Sep 2023 10:14:46 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 61.64.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7526 (0x1d66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:46 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1612A585CFB96599788095DAD3DA3ABD5243E850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:f8:5f:07:82:05:82:25:87:27:51:b9:da:
9f:24:87:90:cb:bd:78:a6:c2:41:29:dd:27:1d:b4:
b3:a0:7f:b9:2e:68:39:30:9a:f0:ea:03:fa:47:90:
57:54:8a:9f:f2:7a:ba:1e:46:34:5d:1a:d3:ce:1d:
3e:8c:79:12:a0:2b:29:f0:30:98:01:f6:99:40:7a:
1d:b4:7d:4a:f8:94:b1:25:c4:54:1d:b4:18:b8:b0:
c1:aa:2b:e1:6e:7b:d9:62:28:62:7f:a0:32:ce:8a:
9c:ab:bb:29:91:e5:99:86:98:a4:fd:49:31:fe:31:
95:99:2c:f0:0e:d1:ac:34:ff:6e:78:bb:2d:70:76:
55:a1:dc:d5:69:f3:a1:e4:07:90:0f:b7:4a:70:ac:
0a:77:92:b7:36:ac:92:f5:49:37:04:7d:17:56:dc:
a1:8f:96:30:35:ed:bb:f9:9c:11:92:9a:12:aa:ad:
79:37:6a:f1:8d:3b:43:64:52:e1:b5:02:4b:42:59:
2c:78:dd:21:8d:89:73:f5:71:f5:2c:1c:1c:5c:7f:
7a:95:20:ea:d0:ca:11:eb:4f:b6:c1:15:7b:26:a2:
97:80:fa:f6:b2:14:bf:83:34:f4:65:ce:3a:d8:99:
e7:e3:8e:a5:f3:80:16:04:15:b7:61:b3:79:d0:fe:
e0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:12:A5:85:CF:B9:65:99:78:80:95:DA:D3:DA:3A:BD:52:43:E8:50
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FhKlhc-5ZZl4gJXa09o6vVJD6FA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.0.0/22
Signature Algorithm: sha256WithRSAEncryption
02:b2:36:73:8d:99:ea:32:3e:be:32:15:c8:11:68:67:da:47:
c9:b9:f7:55:2b:32:b7:65:11:3b:6d:dd:01:c6:ad:8a:5a:2a:
0b:ac:04:4e:48:1d:16:26:39:88:8c:fb:f9:16:2d:d9:f6:bf:
fe:0f:fc:f7:0c:7e:70:22:a4:16:9d:1c:77:08:cc:f9:21:ce:
e6:f9:c3:7a:44:5f:9e:d8:44:bb:6c:66:77:11:39:a3:1a:2b:
56:b5:1f:cd:3d:91:9a:83:f4:1c:7b:09:d0:60:d0:a5:d5:0a:
1b:b7:69:66:e9:1e:6f:74:80:d1:87:9f:a5:ce:ff:9d:db:a4:
29:90:02:05:80:7f:46:48:ad:7b:97:43:4b:0e:a3:d5:ec:05:
27:20:98:27:2e:49:93:36:f8:9b:25:0e:ff:79:a3:ee:f9:1b:
17:73:c8:79:d9:83:25:6a:20:c1:d3:6e:69:b2:7e:99:83:53:
51:dc:a4:ea:83:14:a4:d2:2a:94:db:78:90:eb:50:73:41:59:
32:7e:7c:9a:2a:5f:5f:e1:0e:01:fa:f1:aa:c2:0a:65:8a:26:
4d:b8:49:47:52:89:be:00:a3:c2:98:aa:63:4a:fc:91:a5:78:
c4:5c:e9:50:45:31:31:9c:5f:f8:63:8a:02:92:54:5c:f2:15:
a3:24:5b:0f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHWYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE0NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE2MTJBNTg1Q0ZCOTY1
OTk3ODgwOTVEQUQzREEzQUJENTI0M0U4NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsQfhfB4IFgiWHJ1G52p8kh5DLvXimwkEp3ScdtLOgf7kuaDkw
mvDqA/pHkFdUip/yeroeRjRdGtPOHT6MeRKgKynwMJgB9plAeh20fUr4lLElxFQd
tBi4sMGqK+Fue9liKGJ/oDLOipyruymR5ZmGmKT9STH+MZWZLPAO0aw0/254uy1w
dlWh3NVp86HkB5APt0pwrAp3krc2rJL1STcEfRdW3KGPljA17bv5nBGSmhKqrXk3
avGNO0NkUuG1AktCWSx43SGNiXP1cfUsHBxcf3qVIOrQyhHrT7bBFXsmopeA+vay
FL+DNPRlzjrYmefjjqXzgBYEFbdhs3nQ/uBlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFhKlhc+5ZZl4gJXa09o6vVJD6FAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ZoS2xoYy01WlpsNGdKWGEw
OW82dlZKRDZGQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
QAAwDQYJKoZIhvcNAQELBQADggEBAAKyNnONmeoyPr4yFcgRaGfaR8m591UrMrdl
ETtt3QHGrYpaKgusBE5IHRYmOYiM+/kWLdn2v/4P/PcMfnAipBadHHcIzPkhzub5
w3pEX57YRLtsZncROaMaK1a1H809kZqD9Bx7CdBg0KXVChu3aWbpHm90gNGHn6XO
/53bpCmQAgWAf0ZIrXuXQ0sOo9XsBScgmCcuSZM2+JslDv95o+75GxdzyHnZgyVq
IMHTbmmyfpmDU1HcpOqDFKTSKpTbeJDrUHNBWTJ+fJoqX1/hDgH68arCCmWKJk24
SUdSib4Ao8KYqmNK/JGleMRc6VBFMTGcX/hjigKSVFzyFaMkWw8=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org