Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MBEiztaFWN_f_itxCOJVVwnMu4Y.roa
File: MBEiztaFWN_f_itxCOJVVwnMu4Y.roa (raw, json)
Hash identifier: tbV/YsohfEf97sOo2pXtoXDkIY1Ts3nf3RKbOvDMcKw=
Subject key identifier: 30:11:22:CE:D6:85:58:DF:DF:FE:2B:71:08:E2:55:57:09:CC:BB:86
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E14
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MBEiztaFWN_f_itxCOJVVwnMu4Y.roa
Signing time: Fri 01 Sep 2023 10:15:39 +0000
ROA not before: Fri 01 Sep 2023 10:15:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7700 (0x1e14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=301122CED68558DFDFFE2B7108E2555709CCBB86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:a5:d1:5d:67:24:a7:10:a8:8d:dc:9d:62:
6d:e6:c7:0b:1b:4d:9f:6f:3c:4d:d9:4c:44:47:fc:
13:af:35:b5:8f:a2:79:b1:61:46:ed:4f:63:bd:44:
b7:e7:12:37:bd:00:3d:22:9c:89:77:b5:0a:bd:2e:
c6:f3:91:e0:27:c2:c4:41:82:c0:9d:f9:32:8e:17:
25:7d:8f:38:5f:15:a8:41:10:e9:f6:ad:28:89:26:
31:d0:fc:2e:f6:34:6e:83:64:cd:3c:58:f8:04:80:
4c:50:92:18:8d:5a:ad:94:29:2c:09:2d:82:cc:4c:
3a:4b:e4:05:e3:90:34:4a:57:ed:bc:8f:7d:ef:4c:
c3:47:26:91:e3:90:03:56:68:cb:8a:e7:4d:17:4e:
0d:27:23:17:fa:c7:3c:05:8b:4d:2f:b3:6d:b9:7a:
6a:d0:05:4f:23:fe:81:d1:2d:a4:6a:5c:fb:45:8e:
1a:26:f0:96:da:35:18:f7:e1:1d:9c:93:14:80:46:
79:bb:9a:81:41:d9:14:85:bb:28:30:9a:5b:0c:25:
76:c9:09:d7:4e:60:48:a9:2a:cb:6f:73:61:2b:42:
64:99:b0:16:ef:9c:e2:3e:3a:0b:9c:66:04:b4:6a:
7f:74:f7:96:da:e4:2f:e9:7c:04:18:63:b7:39:d5:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:11:22:CE:D6:85:58:DF:DF:FE:2B:71:08:E2:55:57:09:CC:BB:86
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MBEiztaFWN_f_itxCOJVVwnMu4Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.104.0/21
Signature Algorithm: sha256WithRSAEncryption
86:c8:72:78:6a:30:7e:36:9c:22:47:71:9c:1f:7f:9c:99:ca:
92:08:f8:be:d5:8d:f2:5e:64:c0:68:c2:e7:cc:e5:26:82:b4:
f0:5e:cd:e3:79:6d:9a:eb:9e:8c:d1:44:37:3a:5a:c6:2b:a4:
0e:58:66:51:72:18:a3:58:64:3e:f8:60:b3:0f:9e:eb:61:ea:
c4:83:b6:cb:e6:b8:93:77:68:f8:26:03:5b:0d:cf:aa:2b:14:
8d:a5:cd:fd:74:a6:0a:88:79:13:e2:ca:77:ab:33:3d:75:5b:
ff:7c:67:79:fe:70:ad:d8:70:14:49:c7:d5:ed:92:6f:61:a9:
c0:4e:8c:83:30:ab:a2:7d:ad:00:92:ee:8e:d2:84:35:cf:04:
80:26:4c:4d:7a:31:a1:22:5b:85:d8:da:35:12:60:a3:1c:90:
27:93:15:5f:f2:4a:30:9c:27:7f:d8:1d:c1:0d:0b:92:1a:fe:
2d:62:9f:72:4b:0a:23:0b:b9:ed:90:e2:11:85:b2:53:63:f3:
dd:3f:47:11:e1:59:cd:f9:a6:df:e4:d5:db:fd:90:d4:b0:85:
f0:82:29:5c:e2:a4:b9:8d:c4:74:06:11:c8:89:c9:74:f8:53:
da:34:b3:97:a8:3d:cd:d4:d8:f9:d1:07:de:5f:fe:37:b1:ef:
b1:09:82:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org