Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NFGX7rY5UPaIHMPg18eNjNpwn5Y.roa
File: NFGX7rY5UPaIHMPg18eNjNpwn5Y.roa (raw, json)
Hash identifier: XCwtL1q8aZCKH+pWeUs9k8lVyosBZvEWFurQZsjiKaA=
Subject key identifier: 34:51:97:EE:B6:39:50:F6:88:1C:C3:E0:D7:C7:8D:8C:DA:70:9F:96
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1EB2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NFGX7rY5UPaIHMPg18eNjNpwn5Y.roa
Signing time: Fri 01 Sep 2023 10:16:21 +0000
ROA not before: Fri 01 Sep 2023 10:16:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7858 (0x1eb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=345197EEB63950F6881CC3E0D7C78D8CDA709F96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:e7:bd:e6:de:d2:ab:1c:1b:7e:fa:4c:4e:
45:3d:7f:d1:9e:70:1e:cd:e8:94:3f:98:dd:22:15:
b7:d6:82:ee:68:e7:e5:ff:10:1e:7c:4e:0d:d3:a6:
ec:ec:07:a1:eb:d9:d2:2e:60:80:d9:67:79:b6:89:
d0:0d:ca:2a:57:7d:58:97:8a:b3:3d:05:7c:e3:b4:
51:73:36:bf:52:90:de:4c:87:e4:f0:2b:f7:a0:bb:
70:ba:a8:3c:bc:a6:eb:43:99:4a:d2:1f:30:24:11:
87:2c:56:99:51:d7:d7:37:d1:c0:9a:5d:87:7c:c5:
aa:45:0d:fd:fb:51:5d:00:15:d1:7e:ce:47:0e:ff:
cd:11:dd:e4:cc:9c:03:74:18:35:31:c7:ad:83:92:
e8:0d:ad:bc:50:12:1e:76:3b:f0:b4:de:e2:86:71:
c0:51:6e:1d:09:49:3b:53:1f:7e:c8:24:9d:7b:95:
de:c1:99:ac:60:3b:12:b4:de:9b:da:98:0c:ba:9d:
9a:4c:b1:aa:4b:bc:69:37:3b:43:a2:f3:05:f3:61:
c1:dc:1c:f1:2f:e1:e1:c6:f4:12:e8:f0:cd:69:9c:
74:32:a6:6d:bc:a3:e6:29:bf:24:b9:fc:27:e2:28:
7b:33:bd:47:c3:74:79:36:00:7e:83:3d:b9:1d:03:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:51:97:EE:B6:39:50:F6:88:1C:C3:E0:D7:C7:8D:8C:DA:70:9F:96
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NFGX7rY5UPaIHMPg18eNjNpwn5Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.40.0/21
Signature Algorithm: sha256WithRSAEncryption
10:fb:4c:ae:1f:b3:58:f3:d7:71:ae:7c:31:22:c2:98:ea:c4:
b6:87:19:b4:a1:28:2f:5f:43:f5:2c:c9:b0:8a:9b:29:0d:15:
a6:57:e6:31:33:56:2a:f8:37:dd:7a:57:3f:3a:63:ab:8b:95:
5a:d2:4d:4f:32:93:40:15:fd:ae:ec:e6:ed:dc:bf:57:5d:1e:
51:01:de:12:d7:66:19:85:c5:ec:55:f4:fb:67:d2:3d:28:1d:
5b:ce:30:ac:86:e5:dd:c4:dc:e8:03:9c:1d:88:58:da:d7:78:
55:43:e3:36:c3:14:91:1f:87:32:cb:2a:74:5f:0a:4f:6b:5b:
34:85:34:19:1d:e6:3f:67:f9:a4:75:64:5a:df:c0:b7:47:38:
3d:22:39:39:5a:b1:f3:6d:14:a4:c3:df:56:e8:01:37:03:d2:
a2:9f:6a:ea:c8:d4:3f:af:5c:a2:d3:d2:eb:ea:63:58:19:fc:
70:02:96:c7:56:57:95:91:f9:48:73:b3:ef:b4:0d:40:a6:35:
ec:1b:17:53:c8:a2:b6:6f:8b:c1:b8:02:48:fc:2c:7e:5b:d9:
80:21:7b:d3:f7:47:0c:ba:32:6e:d9:50:90:8f:9b:a5:08:5d:
d2:a9:bb:72:e0:d3:86:99:eb:00:31:5d:0e:69:cd:45:0a:89:
1b:d3:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org