Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LHCe6_ZO4Ks7HeIMYjwmNdafJ-Q.roa
File: LHCe6_ZO4Ks7HeIMYjwmNdafJ-Q.roa (raw, json)
Hash identifier: RfwAms60IoDAYFL5JxvwuGUH5ATwf4AxqdatMnOpiiM=
Subject key identifier: 2C:70:9E:EB:F6:4E:E0:AB:3B:1D:E2:0C:62:3C:26:35:D6:9F:27:E4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E41
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LHCe6_ZO4Ks7HeIMYjwmNdafJ-Q.roa
Signing time: Fri 01 Sep 2023 10:15:50 +0000
ROA not before: Fri 01 Sep 2023 10:15:50 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7745 (0x1e41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:50 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2C709EEBF64EE0AB3B1DE20C623C2635D69F27E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:0f:ad:e8:eb:02:55:0a:75:ba:9b:43:31:
7c:81:93:0c:92:b9:4d:d3:7e:fe:77:bd:a2:22:d4:
f8:79:fa:be:e3:5e:d6:fc:bb:17:b9:9b:59:e2:2c:
11:c7:a5:1f:d9:ed:f9:c1:55:1d:bf:98:bb:f2:92:
9d:8d:9d:ce:40:95:f8:12:f9:09:1a:98:0b:ad:a7:
30:87:1e:8a:8d:ee:33:d4:b5:96:2e:b1:b0:9c:6e:
e6:91:ba:12:a9:39:35:be:de:08:42:8c:04:a3:a4:
dd:80:9f:92:2c:2e:50:27:1c:cc:d2:42:cc:85:09:
2b:7c:e2:27:b5:45:a8:46:a3:7d:27:ac:7d:14:30:
a3:aa:33:53:17:64:8e:50:84:25:cc:1c:e0:a8:f4:
75:e8:bb:31:a7:b9:a2:73:6d:7b:30:24:ac:5f:d3:
df:d5:d1:9d:40:ad:b1:fb:70:97:36:61:ae:68:84:
c0:91:35:80:f3:49:61:15:08:ca:e9:58:d4:42:1f:
c9:42:90:8f:be:1d:ef:77:9d:69:85:2e:33:45:39:
25:d1:a7:01:c8:fe:d2:70:9a:6a:42:b3:95:9d:b8:
7d:de:42:c7:2a:44:4e:ff:5d:4b:7a:1c:d1:d3:54:
c1:a4:68:13:fd:dc:1f:68:bd:29:cf:dc:9c:37:64:
16:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:70:9E:EB:F6:4E:E0:AB:3B:1D:E2:0C:62:3C:26:35:D6:9F:27:E4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LHCe6_ZO4Ks7HeIMYjwmNdafJ-Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.32.0/20
Signature Algorithm: sha256WithRSAEncryption
10:d0:7d:2c:6c:cd:bf:90:69:96:2c:f4:6d:cb:9a:92:23:e1:
33:35:c9:1a:a3:5c:be:db:b4:98:89:b1:b2:96:4e:8e:61:40:
7c:3f:91:18:94:18:f4:9c:da:51:26:1c:9d:f5:65:d2:0f:16:
b4:b2:ad:3e:3a:39:5b:4d:16:02:7d:a0:39:6e:53:09:ca:5f:
67:23:d6:40:9c:f4:71:3a:a9:60:bd:2b:3d:13:4c:4c:a0:19:
02:e0:a9:2b:b9:74:27:89:ab:7e:7d:e2:c4:19:97:2f:8a:c6:
4c:d6:c3:8d:95:bf:36:49:5b:61:4b:a2:09:5b:68:01:84:28:
c3:c0:c8:e5:9a:e6:ac:67:b4:ed:d4:7a:17:99:d2:4c:a0:95:
7a:f9:8f:00:0e:28:46:f4:bd:3a:5e:a0:3d:43:12:0b:8f:b8:
3b:0e:3f:36:16:c4:dc:dc:3b:f5:a6:09:d7:51:e6:63:ce:46:
52:3e:da:67:da:1a:06:11:8b:4e:13:ed:48:48:07:36:e3:5a:
56:8a:18:8d:fb:12:2a:72:e0:3a:03:ac:11:59:58:ea:15:f3:
f2:99:be:44:be:e6:04:9e:6c:82:1d:8b:00:7b:e0:00:5e:be:
87:c6:cf:84:23:0a:7b:aa:9f:69:22:74:78:e1:65:ef:5e:36:
51:1f:32:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org