Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PG79UvXs4ERk5DKkpVDrSMcHpfs.roa
File: PG79UvXs4ERk5DKkpVDrSMcHpfs.roa (raw, json)
Hash identifier: 1InqljaJRKvEObD/Rqu6TZJjWw0P6dYadLOnJ10/7LY=
Subject key identifier: 3C:6E:FD:52:F5:EC:E0:44:64:E4:32:A4:A5:50:EB:48:C7:07:A5:FB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E54
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PG79UvXs4ERk5DKkpVDrSMcHpfs.roa
Signing time: Fri 01 Sep 2023 10:15:54 +0000
ROA not before: Fri 01 Sep 2023 10:15:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.159.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7764 (0x1e54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3C6EFD52F5ECE04464E432A4A550EB48C707A5FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:7f:67:c3:73:a8:cd:6b:1d:6c:f0:52:f8:
9e:6e:13:57:94:cc:98:53:9e:b5:f0:61:55:1a:94:
b2:8b:78:60:1f:c0:9e:eb:21:b8:85:04:45:2b:a7:
12:ef:ea:b0:e8:24:0e:0e:ff:f6:4e:1b:92:92:c9:
28:fe:ee:b8:29:b3:e7:8f:56:3b:e4:a9:d9:fc:55:
9f:94:01:dd:b7:02:a9:05:f6:53:e6:57:6b:f0:46:
e7:34:48:26:ad:4f:39:f2:58:63:81:37:d6:e5:c3:
64:a4:a5:cf:12:18:6d:fa:71:d8:1d:69:21:c3:fe:
97:5f:d8:9b:f1:72:1f:f9:fe:f2:a2:a7:e9:31:df:
1a:7d:33:54:24:d3:5e:b0:f7:01:e3:07:e0:ff:c4:
c6:7f:7d:52:a4:15:f5:10:f3:90:75:4a:3f:0d:42:
d3:33:48:7c:46:69:37:8c:54:7e:4f:18:4b:24:4c:
bd:b1:70:e6:a6:64:08:95:97:a2:6a:fb:87:f0:24:
8c:03:6e:ef:0c:d7:28:87:d5:4d:11:81:af:89:3c:
6d:b5:1d:35:7b:67:63:4e:c8:a7:17:9d:81:92:76:
3b:dc:9d:03:de:bf:cf:d7:88:1b:f2:c2:a1:19:e0:
8b:d2:86:bb:fa:fc:cb:63:bf:0f:78:ee:28:82:8b:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6E:FD:52:F5:EC:E0:44:64:E4:32:A4:A5:50:EB:48:C7:07:A5:FB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PG79UvXs4ERk5DKkpVDrSMcHpfs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:a1:db:ac:45:4e:58:87:e4:31:e6:ff:5c:c6:1e:ac:88:fd:
4f:d3:5b:25:a8:66:5d:04:19:6f:8c:ff:12:e7:94:74:31:54:
79:0b:8a:b0:66:21:73:dd:bc:cd:f5:4d:c7:30:8a:4e:99:53:
c7:18:ec:73:ee:c9:b2:6d:b1:86:00:69:ea:d0:84:2e:c9:8e:
12:80:2d:37:59:3f:b6:f9:46:6c:87:56:d5:a6:49:6c:88:fc:
fa:38:c4:84:88:d6:70:b4:5c:12:d7:01:6c:46:1a:8c:fc:cc:
53:b1:0b:a0:5a:fa:f4:9d:7a:b1:cd:fa:a5:1a:37:87:c3:be:
e8:b3:65:db:0a:02:68:eb:35:fe:2c:a2:04:d4:c3:a1:72:6d:
b4:ab:42:c4:1d:57:8f:20:7e:ff:5e:e5:52:21:16:90:8a:5a:
91:49:d0:42:d3:9c:c9:a2:c5:e8:b0:f7:4a:30:f8:23:32:73:
8d:c3:88:0e:c0:00:78:63:c7:db:93:6e:cc:d6:11:41:6e:bb:
c9:15:70:7c:fd:bd:75:2e:49:cd:c0:14:30:d6:20:16:d1:0a:
5e:2f:73:08:0b:03:6d:4f:de:5f:ee:86:61:23:f7:5a:da:20:
5f:e7:5e:fc:66:62:b2:b7:08:e3:ee:02:56:1f:d4:c7:20:f6:
22:43:22:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org