Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Fi3nG50VAUjFHDsGjOIfZxM8BmE.roa
File: Fi3nG50VAUjFHDsGjOIfZxM8BmE.roa (raw, json)
Hash identifier: QypmnrpZEC1vOS4hqGj90gwM8k8zi5BjIh7tEiHkwYY=
Subject key identifier: 16:2D:E7:1B:9D:15:01:48:C5:1C:3B:06:8C:E2:1F:67:13:3C:06:61
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1EBA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Fi3nG50VAUjFHDsGjOIfZxM8BmE.roa
Signing time: Fri 01 Sep 2023 10:16:23 +0000
ROA not before: Fri 01 Sep 2023 10:16:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 61.58.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7866 (0x1eba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=162DE71B9D150148C51C3B068CE21F67133C0661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:f8:8f:9d:9b:56:5c:ec:4d:3b:d5:e1:3c:
8b:6e:ec:6a:27:a7:56:06:fb:2a:de:39:5f:57:bf:
70:c2:42:92:ca:dc:55:98:49:45:d6:2c:46:6c:2f:
7d:92:24:26:58:73:8f:b2:a5:a3:e8:a7:71:b4:d9:
b0:4f:05:f5:c5:04:ac:40:ac:bb:4b:5c:11:2a:a7:
9b:9d:e8:46:30:3a:55:07:0f:5c:49:56:a3:2a:75:
9c:6f:44:f8:be:a3:a9:3a:51:71:01:7d:f9:7e:bb:
30:85:cb:2e:c6:06:c4:73:74:4e:7c:a6:a7:d1:27:
88:03:91:e7:b8:de:47:91:da:50:28:69:ba:ce:bd:
8c:e9:e4:28:13:a8:26:03:19:b4:66:9d:29:74:70:
a2:4b:3a:c9:a0:bc:a4:7e:dd:10:40:90:9f:6d:f1:
cd:cc:c1:ec:2f:cb:68:82:11:96:57:29:4c:63:11:
01:bc:73:f2:92:c6:9a:03:23:86:59:80:98:a4:38:
ad:1e:41:7a:76:00:54:e3:c9:bd:53:56:8c:6e:5e:
3c:3b:9e:92:2f:f7:dd:1d:b4:a6:da:78:52:9f:d1:
cb:dd:79:36:95:f7:e1:f6:fc:c2:65:e4:06:5d:da:
d3:93:ec:77:2b:83:06:b4:fe:5a:98:f1:7f:ef:7c:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2D:E7:1B:9D:15:01:48:C5:1C:3B:06:8C:E2:1F:67:13:3C:06:61
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Fi3nG50VAUjFHDsGjOIfZxM8BmE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.112.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:7f:88:40:b5:8e:70:fa:54:4f:0f:09:ae:32:1b:ad:9f:d8:
67:9c:0b:f5:9c:ca:7d:e9:6e:3f:cb:ee:c1:05:c3:1e:b6:53:
80:f6:b9:50:87:1b:12:c5:18:0d:33:09:2e:40:d0:c8:84:f1:
98:53:b6:8e:94:5c:07:66:52:1c:97:02:5e:1e:8b:a7:54:af:
2a:75:b0:0a:a3:33:d5:4f:bf:38:d3:b6:91:08:ec:a2:0a:59:
35:99:63:cc:4b:c3:a6:60:18:eb:5a:0d:8b:16:cd:44:d0:77:
b3:d6:b1:2f:c6:f5:b8:41:85:88:df:04:63:3b:cd:8a:30:a8:
93:77:50:97:3c:3a:8b:55:40:8a:cc:57:36:a3:72:30:c7:c6:
6e:e0:aa:e5:cf:e9:6a:f1:c7:bc:57:8a:7e:a4:2d:ed:dc:b9:
7b:7c:7f:5d:1a:40:d1:23:92:72:56:27:4e:7a:ee:2a:18:d0:
96:fd:e4:1d:3e:36:57:13:9f:c4:fd:91:d5:3d:ea:2f:49:3b:
aa:d7:27:42:6f:2e:ec:54:14:d2:dd:8b:99:61:c9:c2:f9:bb:
83:da:9e:3e:3f:36:d0:0d:67:1d:36:d0:11:be:57:1b:5f:ca:
6f:f6:a5:81:a7:98:11:93:82:65:96:39:de:d0:04:cb:7b:e5:
1d:33:5b:96
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHrowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE2MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE2MkRFNzFCOUQxNTAx
NDhDNTFDM0IwNjhDRTIxRjY3MTMzQzA2NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCz4fiPnZtWXOxNO9XhPItu7Gonp1YG+yreOV9Xv3DCQpLK3FWY
SUXWLEZsL32SJCZYc4+ypaPop3G02bBPBfXFBKxArLtLXBEqp5ud6EYwOlUHD1xJ
VqMqdZxvRPi+o6k6UXEBffl+uzCFyy7GBsRzdE58pqfRJ4gDkee43keR2lAoabrO
vYzp5CgTqCYDGbRmnSl0cKJLOsmgvKR+3RBAkJ9t8c3Mwewvy2iCEZZXKUxjEQG8
c/KSxpoDI4ZZgJikOK0eQXp2AFTjyb1TVoxuXjw7npIv990dtKbaeFKf0cvdeTaV
9+H2/MJl5AZd2tOT7Hcrgwa0/lqY8X/vfNVTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFi3nG50VAUjFHDsGjOIfZxM8BmEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ZpM25HNTBWQVVqRkhEc0dq
T0lmWnhNOEJtRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9
OnAwDQYJKoZIhvcNAQELBQADggEBAGt/iEC1jnD6VE8PCa4yG62f2GecC/Wcyn3p
bj/L7sEFwx62U4D2uVCHGxLFGA0zCS5A0MiE8ZhTto6UXAdmUhyXAl4ei6dUryp1
sAqjM9VPvzjTtpEI7KIKWTWZY8xLw6ZgGOtaDYsWzUTQd7PWsS/G9bhBhYjfBGM7
zYowqJN3UJc8OotVQIrMVzajcjDHxm7gquXP6Wrxx7xXin6kLe3cuXt8f10aQNEj
knJWJ0567ioY0Jb95B0+NlcTn8T9kdU96i9JO6rXJ0JvLuxUFNLdi5lhycL5u4Pa
nj4/NtANZx020BG+Vxtfym/2pYGnmBGTgmWWOd7QBMt75R0zW5Y=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org