Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PTZNSaDkCTniy47O5Dr0CQaRTX0.roa
File: PTZNSaDkCTniy47O5Dr0CQaRTX0.roa (raw, json)
Hash identifier: 67mb75uy8taVcIbcE+3vZlsvTlZzzhaA5/CmbE9qVkc=
Subject key identifier: 3D:36:4D:49:A0:E4:09:39:E2:CB:8E:CE:E4:3A:F4:09:06:91:4D:7D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E0C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PTZNSaDkCTniy47O5Dr0CQaRTX0.roa
Signing time: Fri 01 Sep 2023 10:15:37 +0000
ROA not before: Fri 01 Sep 2023 10:15:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7692 (0x1e0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:37 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3D364D49A0E40939E2CB8ECEE43AF40906914D7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:13:a4:d5:4b:63:9c:9f:30:f3:fc:2d:db:
71:64:fe:3b:b5:c3:84:f1:50:20:03:76:0f:f5:9c:
30:69:41:ec:05:ff:a1:6f:2e:cf:0c:73:4d:e8:34:
b3:71:fe:48:06:75:f4:9e:de:c8:eb:b1:52:a5:59:
43:cb:c6:34:2e:c8:06:2f:8f:b1:1c:80:5f:30:19:
62:ac:28:35:62:22:8c:f7:8e:27:f8:89:d7:5f:13:
fc:dd:7c:bc:69:d2:c2:49:83:d5:af:80:3e:0b:d2:
0b:2b:46:d5:ac:dc:f4:bd:82:be:f0:00:b6:bf:57:
6b:5f:ec:d3:35:38:95:75:29:b5:bf:32:32:e0:e4:
bd:70:3b:52:a7:29:e6:b5:f3:02:99:e9:3d:1f:d7:
df:a5:ae:f2:63:c7:75:47:ab:ae:72:bf:db:2c:2c:
da:54:b7:03:d4:5d:6b:d9:2b:87:de:8d:51:ad:21:
71:ff:c5:9d:54:7b:33:99:fd:2b:95:ae:84:59:12:
f9:73:65:4a:f1:57:71:53:09:e6:d9:64:26:19:1f:
e1:7a:ca:23:56:72:81:eb:7f:ad:b0:d8:3a:ec:f7:
9e:eb:2c:5b:53:ac:4c:54:10:66:93:ae:59:0b:6a:
20:66:07:20:81:dd:f3:88:a4:4b:1b:de:2c:30:c9:
c9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:36:4D:49:A0:E4:09:39:E2:CB:8E:CE:E4:3A:F4:09:06:91:4D:7D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PTZNSaDkCTniy47O5Dr0CQaRTX0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.147.0/24
Signature Algorithm: sha256WithRSAEncryption
35:08:9d:1b:a8:b6:c4:b7:cc:51:27:2a:08:05:ed:06:54:09:
3d:68:9b:97:d5:76:b4:d7:f1:93:af:d0:01:e4:62:b8:a2:f6:
ec:41:62:68:1f:28:95:5b:91:d6:15:76:34:73:35:e4:26:85:
34:7b:07:8d:d4:25:71:c8:34:99:99:5d:e1:c6:68:2d:1a:f7:
03:f3:41:7f:b1:31:a6:60:54:6b:0d:e3:d8:38:af:2e:e8:bd:
f4:95:e9:48:79:61:da:3a:c1:e2:b4:f4:ff:1a:1f:f1:bf:1f:
8d:0f:da:07:57:ca:88:87:aa:8a:e2:01:99:0f:09:98:ef:09:
c4:8e:ea:69:26:7f:b8:68:4b:17:50:40:fe:6e:7d:ad:3b:40:
1b:d7:9a:80:48:84:00:cf:06:be:49:7b:b4:75:d4:1d:36:7e:
95:31:c8:db:f9:35:6c:ef:d2:84:94:2a:c9:85:4b:c4:ce:3a:
01:8e:04:ce:0b:a6:5d:c3:4b:76:f7:fc:52:da:66:e4:82:54:
89:83:71:75:31:eb:77:b2:d6:6b:5f:d7:44:3d:38:d5:dd:7f:
b7:4e:67:c7:93:72:4f:3b:08:0d:42:77:bc:6a:d5:91:31:59:
5b:40:99:62:41:91:3c:74:f0:c6:f6:2c:32:3d:7c:9f:01:45:
76:b6:b6:79
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHgwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1MzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNEMzY0RDQ5QTBFNDA5
MzlFMkNCOEVDRUU0M0FGNDA5MDY5MTREN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+6BOk1UtjnJ8w8/wt23Fk/ju1w4TxUCADdg/1nDBpQewF/6Fv
Ls8Mc03oNLNx/kgGdfSe3sjrsVKlWUPLxjQuyAYvj7EcgF8wGWKsKDViIoz3jif4
iddfE/zdfLxp0sJJg9WvgD4L0gsrRtWs3PS9gr7wALa/V2tf7NM1OJV1KbW/MjLg
5L1wO1KnKea18wKZ6T0f19+lrvJjx3VHq65yv9ssLNpUtwPUXWvZK4fejVGtIXH/
xZ1UezOZ/SuVroRZEvlzZUrxV3FTCebZZCYZH+F6yiNWcoHrf62w2Drs957rLFtT
rExUEGaTrlkLaiBmByCB3fOIpEsb3iwwyclJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPTZNSaDkCTniy47O5Dr0CQaRTX0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1BUWk5TYURrQ1RuaXk0N081
RHIwQ1FhUlRYMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx
npMwDQYJKoZIhvcNAQELBQADggEBADUInRuotsS3zFEnKggF7QZUCT1om5fVdrTX
8ZOv0AHkYrii9uxBYmgfKJVbkdYVdjRzNeQmhTR7B43UJXHINJmZXeHGaC0a9wPz
QX+xMaZgVGsN49g4ry7ovfSV6Uh5Ydo6weK09P8aH/G/H40P2gdXyoiHqoriAZkP
CZjvCcSO6mkmf7hoSxdQQP5ufa07QBvXmoBIhADPBr5Je7R11B02fpUxyNv5NWzv
0oSUKsmFS8TOOgGOBM4Lpl3DS3b3/FLaZuSCVImDcXUx63ey1mtf10Q9ONXdf7dO
Z8eTck87CA1Cd7xq1ZExWVtAmWJBkTx08Mb2LDI9fJ8BRXa2tnk=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org