Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J9ANVvWISA7JS1jHj-KYZFMo0nQ.roa
File: J9ANVvWISA7JS1jHj-KYZFMo0nQ.roa (raw, json)
Hash identifier: 7uKdYb68Xkqd1FqzV6SKb0mkEHLI+nXQN9AmLtchupM=
Subject key identifier: 27:D0:0D:56:F5:88:48:0E:C9:4B:58:C7:8F:E2:98:64:53:28:D2:74
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E66
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J9ANVvWISA7JS1jHj-KYZFMo0nQ.roa
Signing time: Fri 01 Sep 2023 10:16:00 +0000
ROA not before: Fri 01 Sep 2023 10:16:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 49.159.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7782 (0x1e66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:00 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=27D00D56F588480EC94B58C78FE298645328D274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:5c:48:bd:cd:69:7f:de:fa:e4:5a:27:4e:
f2:0c:56:81:22:5d:b8:f5:cb:97:69:7e:8e:25:e3:
2d:23:f6:9c:cc:71:73:1b:1f:dc:36:42:0f:be:c4:
48:3b:c9:bd:88:f7:03:55:cb:69:19:54:d1:41:79:
66:cd:43:99:82:1a:75:1f:88:86:53:63:91:36:cb:
17:69:af:b8:46:7b:e1:f2:f8:03:9b:03:b0:35:30:
45:be:46:d4:da:62:d0:cf:29:a8:37:1f:fc:14:94:
66:58:0b:8c:07:1d:ce:b7:db:70:e5:fd:1f:6e:11:
1f:95:05:24:69:90:e4:57:d4:9f:99:57:93:f8:73:
49:47:e4:47:2b:68:90:5c:32:b5:78:17:9d:ce:62:
ec:cb:e6:62:9e:21:b1:3a:c4:79:c5:0d:e6:4b:9d:
bf:55:9b:cf:c2:48:f4:1f:b0:db:22:38:f3:79:3a:
3a:80:c7:a1:0b:57:2d:96:d1:1a:55:9d:a9:9d:b1:
f0:6b:89:1e:aa:d5:90:b0:12:a7:d7:48:8a:ea:18:
e7:93:69:c2:9f:cc:64:a7:7b:ca:60:4f:bd:69:e4:
52:d9:a2:ef:6d:71:45:2f:e0:4f:87:4c:9c:3f:6c:
bb:33:ff:dc:7e:6f:d1:ef:29:44:81:fa:af:c7:e9:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D0:0D:56:F5:88:48:0E:C9:4B:58:C7:8F:E2:98:64:53:28:D2:74
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J9ANVvWISA7JS1jHj-KYZFMo0nQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.252.0/22
Signature Algorithm: sha256WithRSAEncryption
26:a7:30:2f:55:b9:bb:9d:11:30:4d:16:e7:4b:50:29:b9:b3:
b6:65:ce:44:8a:55:51:ff:86:4e:ce:2e:84:cd:fb:58:61:67:
37:d0:61:fd:e4:2a:15:fb:1a:08:fc:8e:87:46:01:ee:87:9b:
ea:cf:35:9a:46:f9:6b:ab:fc:78:47:23:8f:d2:5d:8c:d6:fd:
02:fc:75:01:61:13:06:c2:16:00:6c:37:cb:e9:15:cd:74:30:
f5:8c:47:11:35:8e:4b:d0:4d:6e:d5:7c:6e:3e:de:27:4a:30:
d1:b9:6e:7c:0d:95:35:3a:10:70:5f:4a:0e:54:b7:54:36:b1:
cf:43:ba:2b:41:78:91:78:9a:3f:ac:ea:25:6f:a0:ef:08:e0:
d3:e0:cc:fd:8e:74:4e:2e:73:f8:7e:59:fe:7c:34:0b:19:1f:
90:c0:87:7a:3d:0d:73:39:55:e2:9d:e2:f4:89:e4:29:b4:78:
f0:f4:30:f2:ad:da:cc:2d:75:51:af:20:7b:86:36:f0:ee:d8:
84:1d:9a:3d:96:ab:be:43:06:69:b0:b3:73:11:7a:7f:23:b6:
60:d1:1a:05:37:1c:4e:21:49:54:94:c0:fd:ea:20:05:2c:71:
48:a1:d4:fe:c8:23:bd:84:13:dc:4d:2b:db:6f:4f:fa:a0:31:
da:03:d5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org