Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ojg6eoOXdeC1lEWBPxU-zOLCMoo.roa
File: Ojg6eoOXdeC1lEWBPxU-zOLCMoo.roa (raw, json)
Hash identifier: /zr89+6QUzhF3qpXhYCuUMCHFix5SXqvKvJBNgBZIPU=
Subject key identifier: 3A:38:3A:7A:83:97:75:E0:B5:94:45:81:3F:15:3E:CC:E2:C2:32:8A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E36
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ojg6eoOXdeC1lEWBPxU-zOLCMoo.roa
Signing time: Fri 01 Sep 2023 10:15:48 +0000
ROA not before: Fri 01 Sep 2023 10:15:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7734 (0x1e36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3A383A7A839775E0B59445813F153ECCE2C2328A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:a5:f2:d0:65:4c:46:ea:ae:0e:03:3d:84:
4b:a0:6d:36:06:2d:a4:37:cf:9b:90:58:86:15:5f:
9f:f9:71:56:20:bf:11:4a:ee:a1:49:98:dc:56:0c:
19:4b:9b:4a:7e:dd:6c:3a:c8:9e:7a:a3:b0:10:a6:
ca:d1:3c:da:56:93:21:6b:67:b3:16:08:72:3f:a5:
a4:b5:18:03:78:83:da:ca:e2:7b:b7:b4:88:d3:e2:
a6:c5:5a:ac:68:b7:25:2f:7a:59:12:09:07:ce:63:
90:85:59:f3:be:d3:a3:a6:c9:a7:5c:2d:c3:67:83:
85:b1:a9:8b:df:18:89:6e:22:98:4d:cf:33:17:fb:
58:60:84:ce:9b:2a:5a:3b:10:e3:78:a4:f8:70:f2:
91:3b:03:48:1b:d9:58:a7:f5:e4:87:d4:88:33:a1:
69:57:7c:5d:5f:37:ad:48:09:93:84:9e:70:b5:c3:
ab:61:b7:cd:d8:0f:33:75:b5:77:98:dc:7c:05:51:
bb:f3:34:d3:c1:1c:f8:03:0c:b1:1b:55:3a:da:5c:
e2:b2:da:25:ab:d6:d6:74:82:90:aa:2f:00:4b:64:
34:f2:06:81:0f:46:cb:5a:b6:90:8b:47:75:db:dd:
3f:3e:09:52:d3:35:0f:94:ba:e3:c0:73:f9:1f:38:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:38:3A:7A:83:97:75:E0:B5:94:45:81:3F:15:3E:CC:E2:C2:32:8A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ojg6eoOXdeC1lEWBPxU-zOLCMoo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.0.0/15
Signature Algorithm: sha256WithRSAEncryption
00:3f:27:43:e0:29:3a:93:68:d7:3c:32:1a:9c:45:52:fa:32:
e9:f2:17:dc:a6:fe:ab:76:12:c3:85:cf:f4:e7:7b:c8:37:12:
78:5c:4d:8b:0e:a3:7d:0e:11:a2:af:d3:fb:78:fe:7e:0c:09:
59:cd:80:7b:29:58:92:31:6f:5b:9c:83:38:06:2f:d3:35:8e:
e2:c5:74:60:f1:75:0a:8a:70:b0:1e:cb:8e:2c:d0:bb:f5:c5:
9f:ed:43:8a:ef:8f:e1:46:d2:bf:c6:9b:75:02:d4:4b:f6:59:
a8:d2:0f:33:40:d2:37:f8:31:b3:be:a6:e8:cd:52:0c:78:f1:
58:02:54:e1:b1:4a:8b:c2:22:9f:a0:5d:47:ef:63:ec:ab:f0:
74:d7:1d:44:f0:30:aa:90:ac:20:a4:24:73:96:59:ba:e0:2f:
ba:ae:2a:79:28:ba:f5:86:db:05:d2:f5:2d:b4:75:82:db:e8:
b2:f7:d4:da:b0:cb:80:3f:2c:58:fa:32:7d:4f:86:e7:47:28:
41:0d:07:b9:9d:de:7f:1e:1c:e4:8a:c4:e8:51:9c:57:2e:5e:
ad:87:16:7a:9c:8d:d9:11:9f:0a:11:45:cc:96:d3:d6:66:cf:
04:b5:b0:d3:c1:c0:d3:81:84:08:6a:fc:94:3a:c3:cf:07:5e:
e6:0d:ea:5c
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICHjYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNBMzgzQTdBODM5Nzc1
RTBCNTk0NDU4MTNGMTUzRUNDRTJDMjMyOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCo+aXy0GVMRuquDgM9hEugbTYGLaQ3z5uQWIYVX5/5cVYgvxFK
7qFJmNxWDBlLm0p+3Ww6yJ56o7AQpsrRPNpWkyFrZ7MWCHI/paS1GAN4g9rK4nu3
tIjT4qbFWqxotyUvelkSCQfOY5CFWfO+06OmyadcLcNng4WxqYvfGIluIphNzzMX
+1hghM6bKlo7EON4pPhw8pE7A0gb2Vin9eSH1IgzoWlXfF1fN61ICZOEnnC1w6th
t83YDzN1tXeY3HwFUbvzNNPBHPgDDLEbVTraXOKy2iWr1tZ0gpCqLwBLZDTyBoEP
RstatpCLR3Xb3T8+CVLTNQ+UuuPAc/kfOPLzAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUOjg6eoOXdeC1lEWBPxU+zOLCMoowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL09qZzZlb09YZGVDMWxFV0JQ
eFUtek9MQ01vby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwEx
njANBgkqhkiG9w0BAQsFAAOCAQEAAD8nQ+ApOpNo1zwyGpxFUvoy6fIX3Kb+q3YS
w4XP9Od7yDcSeFxNiw6jfQ4Roq/T+3j+fgwJWc2AeylYkjFvW5yDOAYv0zWO4sV0
YPF1CopwsB7LjizQu/XFn+1Diu+P4UbSv8abdQLUS/ZZqNIPM0DSN/gxs76m6M1S
DHjxWAJU4bFKi8Iin6BdR+9j7KvwdNcdRPAwqpCsIKQkc5ZZuuAvuq4qeSi69Ybb
BdL1LbR1gtvosvfU2rDLgD8sWPoyfU+G50coQQ0HuZ3efx4c5IrE6FGcVy5erYcW
epyN2RGfChFFzJbT1mbPBLWw08HA04GECGr8lDrDzwde5g3qXA==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org