Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PnDRZ3jzPLIsAyanqlmHElBCr3M.roa
File: PnDRZ3jzPLIsAyanqlmHElBCr3M.roa (raw, json)
Hash identifier: L9TakZREM/KwTrThoQji+Fjo1PIqjNSLaVj0+qbLT+M=
Subject key identifier: 3E:70:D1:67:78:F3:3C:B2:2C:03:26:A7:AA:59:87:12:50:42:AF:73
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1EBE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PnDRZ3jzPLIsAyanqlmHElBCr3M.roa
Signing time: Fri 01 Sep 2023 10:16:24 +0000
ROA not before: Fri 01 Sep 2023 10:16:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7870 (0x1ebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3E70D16778F33CB22C0326A7AA5987125042AF73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:99:9a:f7:4a:62:1f:dd:e9:ae:b6:1f:b7:09:
82:8d:1c:51:a6:b8:59:d8:57:bb:6f:3f:bc:aa:a0:
f5:8f:f7:21:9d:7d:fd:b3:c7:8f:85:7b:99:b1:42:
be:22:4a:3b:29:56:15:39:57:99:ca:ce:32:9a:b6:
91:92:a7:55:b0:ca:94:03:70:89:96:24:d0:14:ae:
d8:54:45:f8:52:01:6b:ef:60:38:e1:79:9e:e3:86:
de:52:1f:4f:26:aa:cb:75:f0:0a:6f:9a:bc:d3:81:
98:74:13:02:26:a0:4a:8a:b2:33:15:58:03:44:32:
3c:8d:05:fd:c6:7a:f6:53:60:49:41:5b:16:96:e3:
1b:4e:49:19:05:e2:10:5e:94:4a:2f:65:cf:7d:1d:
77:74:66:b4:c3:ad:c3:c9:ba:43:0a:25:5e:20:79:
46:fc:cf:d9:e5:33:d8:79:33:89:4e:2b:e9:54:33:
e0:ff:fe:97:fe:45:fb:38:8a:6d:e0:46:53:a3:a8:
29:8b:4f:fe:85:a1:46:39:55:a4:6d:61:34:0f:68:
e2:91:4c:fd:2a:22:36:52:18:1e:cc:ef:73:b6:f8:
22:0c:34:d8:98:3e:92:be:5e:d5:3c:37:b0:67:50:
bb:1b:00:93:f7:a9:45:9b:51:94:07:80:0a:e2:0d:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:70:D1:67:78:F3:3C:B2:2C:03:26:A7:AA:59:87:12:50:42:AF:73
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PnDRZ3jzPLIsAyanqlmHElBCr3M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.160.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:69:8d:a8:ed:7e:34:de:1b:11:35:c2:59:cb:23:52:b3:40:
2d:fb:2d:20:02:ad:4e:61:b2:ce:c2:0c:ed:41:99:5c:5e:1f:
3f:75:18:9b:79:9f:20:76:0c:a9:33:99:35:bb:00:4e:72:e1:
10:24:7b:1e:8d:e1:6b:84:82:ac:1e:c3:1a:9d:9d:72:b7:1d:
f3:3a:cd:6e:41:7d:aa:c0:f4:9f:d3:d8:09:21:31:c3:9c:31:
fd:a9:65:b6:e0:14:5a:7a:d5:b7:a6:a2:38:40:df:87:26:9e:
50:6d:8a:59:29:79:50:ac:f8:3e:89:88:b9:8d:39:0d:93:7a:
69:ff:f0:8f:82:5c:69:b0:bc:8e:6e:1c:c7:10:4f:23:2a:a3:
01:43:8c:8a:9e:10:a8:2a:02:31:12:9f:2e:7b:90:da:3c:30:
a4:5a:2f:f7:e2:6a:09:5b:6d:39:5b:a6:6c:f6:15:ad:59:83:
61:a2:66:8b:f7:97:84:09:1c:fd:73:6a:64:34:b3:a0:65:12:
da:f9:58:0a:d3:87:41:d7:2d:1e:47:07:aa:f8:db:29:f7:2f:
2e:1a:48:0a:f1:36:41:ed:8e:e8:af:95:87:02:ab:69:33:66:
8e:3a:6f:ad:48:aa:82:d9:b5:67:95:2f:83:e8:1b:84:d9:e2:
8b:20:24:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org