Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OaupZkyRKxKre-Fmiu4dmV3VzzI.roa
File: OaupZkyRKxKre-Fmiu4dmV3VzzI.roa (raw, json)
Hash identifier: hoFZaJS3P4GXdgz+0xz+mgp20PYDX3TGoQGJVaWG8q8=
Subject key identifier: 39:AB:A9:66:4C:91:2B:12:AB:7B:E1:66:8A:EE:1D:99:5D:D5:CF:32
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E3B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OaupZkyRKxKre-Fmiu4dmV3VzzI.roa
Signing time: Fri 01 Sep 2023 10:15:49 +0000
ROA not before: Fri 01 Sep 2023 10:15:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7739 (0x1e3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:49 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=39ABA9664C912B12AB7BE1668AEE1D995DD5CF32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:6c:c0:be:0b:9a:d0:94:a9:e3:75:b1:9e:
58:08:a6:6f:53:ab:c5:66:43:70:0f:fd:48:b3:b9:
14:55:66:ec:aa:1b:ba:ad:64:38:38:f6:e4:bc:10:
ba:13:c8:12:25:26:f4:1a:05:84:8f:b0:e6:23:1a:
38:6b:6f:4e:82:80:a4:2b:53:fd:4c:93:95:fd:fe:
4b:96:22:46:c4:a7:ea:57:62:52:18:c2:72:a8:7a:
13:5f:70:3d:d0:18:05:be:f7:37:30:28:4a:a9:29:
b2:a4:cd:1f:d9:e9:0a:57:df:45:b5:a4:cf:19:38:
2b:3b:3c:bd:8b:46:d8:67:f3:51:72:f1:88:5d:bc:
4f:9b:9c:e0:48:c8:2c:fd:2c:49:35:52:a6:56:37:
dc:b3:a9:f4:56:df:1e:60:1d:51:a1:da:83:a8:be:
45:2a:5e:23:60:03:7d:fe:a6:c3:7b:f5:f3:fa:b9:
a8:9c:66:59:63:36:65:a4:43:2e:11:58:27:22:75:
06:13:bb:d8:8e:4e:98:8a:f1:9d:41:5b:86:31:be:
93:01:16:8b:4e:80:d1:84:a8:74:32:66:39:8a:a5:
17:3d:d1:dc:0c:99:7a:4d:2d:8c:28:c7:eb:18:32:
3a:5c:a0:9a:51:b1:70:83:64:53:fb:64:13:77:8c:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AB:A9:66:4C:91:2B:12:AB:7B:E1:66:8A:EE:1D:99:5D:D5:CF:32
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OaupZkyRKxKre-Fmiu4dmV3VzzI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.61.0/24
Signature Algorithm: sha256WithRSAEncryption
71:6e:a8:cd:4b:9b:68:fb:ba:1e:23:64:8d:37:36:83:59:3e:
78:21:db:c1:6c:3d:60:ea:43:4b:79:83:67:0e:26:b7:70:88:
7f:d2:40:13:54:b1:3c:c3:51:2f:a6:58:52:45:12:e2:e8:5d:
58:ab:a9:c4:80:10:4a:b4:b1:ff:81:38:4b:ef:e3:52:f3:fa:
8a:62:8d:b7:02:5e:d0:34:67:e9:6d:80:e7:75:ee:20:95:66:
db:55:aa:5d:27:44:b7:93:83:3c:60:4e:3c:20:5e:84:35:25:
46:39:94:e2:e6:4a:00:89:13:e9:9d:ef:42:fd:a9:64:b6:bb:
c4:c1:67:47:52:a8:d8:d4:02:f3:e5:18:25:38:dc:fc:f8:ba:
c7:ae:a2:b2:f9:0a:e5:cf:a0:b4:59:62:4c:50:b3:8b:5c:0a:
70:59:aa:e5:1f:b1:ef:c4:56:0b:76:b5:ab:8c:b1:75:80:6d:
de:f7:06:ba:1c:4c:42:1f:50:8d:a2:8b:14:98:c1:96:ae:64:
65:bf:d7:45:6b:88:58:06:14:bd:2e:1d:2b:a5:f9:cf:9d:13:
92:7e:76:66:f2:90:2a:f3:2d:9c:67:b2:c4:a4:34:c6:8c:0b:
e2:49:65:d4:dd:7d:be:88:2b:dc:50:f4:29:21:3c:16:7c:5d:
e4:3f:6d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org