Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QbcBJkwmT2RhieGw-WPUuwszmKY.roa
File: QbcBJkwmT2RhieGw-WPUuwszmKY.roa (raw, json)
Hash identifier: Fu/XzTNZ15cvlSg3zRhQcKDLGBYaq8i6/+1mZbU3T2I=
Subject key identifier: 41:B7:01:26:4C:26:4F:64:61:89:E1:B0:F9:63:D4:BB:0B:33:98:A6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1EAB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QbcBJkwmT2RhieGw-WPUuwszmKY.roa
Signing time: Fri 01 Sep 2023 10:16:19 +0000
ROA not before: Fri 01 Sep 2023 10:16:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.159.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7851 (0x1eab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=41B701264C264F646189E1B0F963D4BB0B3398A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:86:43:72:94:a1:f4:e6:45:b8:3e:7b:e4:62:
8f:39:16:d4:b1:58:12:4a:fc:e4:a2:88:cd:a9:06:
8b:14:5d:96:0e:9b:ce:c7:9a:02:cd:04:0d:af:eb:
fa:05:91:62:11:01:11:fe:f8:6c:db:76:1d:4f:62:
ec:cb:ca:cb:77:48:0e:35:eb:34:25:46:9b:46:a2:
f3:28:11:0b:31:e3:0e:2d:41:d8:9a:c2:23:fa:31:
fd:b1:19:76:56:2a:fb:59:d1:97:35:45:1d:e0:81:
8b:0a:a5:c0:ea:42:fe:d6:e6:b3:78:c9:55:fc:e9:
7e:a6:80:63:a2:90:aa:06:cf:70:cb:af:60:5a:1f:
c7:ac:08:94:31:e0:0c:e1:72:5b:bf:66:03:32:c6:
16:6c:98:2b:49:be:ed:8f:29:e0:dc:09:f4:a8:d9:
bd:b4:d1:06:bc:49:d7:54:cb:d5:a3:5c:60:da:7e:
1d:a2:37:10:77:84:c6:23:ad:f2:79:90:d7:a4:b7:
9b:b6:ea:52:a9:18:bb:71:3b:c7:3f:f5:7c:8e:3f:
f2:d9:f2:b0:d2:43:6d:21:fb:7f:61:54:bd:27:a1:
40:02:5b:8d:48:4a:0e:b6:20:78:cb:72:02:46:7b:
b1:16:2c:55:b5:6b:19:ea:df:0c:9c:35:4b:fe:3a:
6b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B7:01:26:4C:26:4F:64:61:89:E1:B0:F9:63:D4:BB:0B:33:98:A6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QbcBJkwmT2RhieGw-WPUuwszmKY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.8.0/21
Signature Algorithm: sha256WithRSAEncryption
38:04:65:1c:fb:9a:c4:7e:08:b2:91:11:61:31:74:91:b4:98:
9e:56:56:13:d3:3f:7e:14:f9:7d:33:0c:6b:fe:df:e4:e7:00:
e4:33:7d:d0:72:d6:bf:a9:fc:55:28:2b:87:72:fb:12:16:22:
54:a0:db:bc:e5:c7:8e:0c:76:ff:e4:df:48:fa:1a:f7:cb:1d:
02:10:7f:73:a9:d5:d3:3c:72:79:8d:0a:d9:f1:f4:2d:fd:8b:
30:b9:e5:e5:22:02:9f:4f:14:5d:8b:aa:f4:d6:27:77:3d:1b:
34:ce:53:fd:7d:9b:78:8c:ca:0c:6b:72:f9:a8:50:8a:99:6c:
c0:3c:fb:70:52:79:c3:d3:e5:02:ea:81:28:0a:02:ce:6c:28:
72:d1:8e:d9:bc:9b:6d:b7:3d:fd:19:8f:bb:3d:e4:3f:b8:bf:
42:1f:ea:a4:2f:91:64:41:4e:bd:1a:3a:48:65:26:9c:5f:1c:
a0:2d:27:b6:89:be:eb:41:7e:6f:5a:d7:62:d4:f5:54:f3:e4:
d0:13:13:7b:e4:f2:92:6a:18:cd:72:61:93:c1:fd:0f:c2:f7:
a9:b6:a0:cd:a1:a7:25:ae:52:67:88:ac:64:75:51:ae:79:20:
d6:95:82:cd:ff:54:3a:6a:05:20:44:59:90:dc:ca:83:13:38:
46:b1:7f:27
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHqswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE2MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQxQjcwMTI2NEMyNjRG
NjQ2MTg5RTFCMEY5NjNENEJCMEIzMzk4QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDwhkNylKH05kW4PnvkYo85FtSxWBJK/OSiiM2pBosUXZYOm87H
mgLNBA2v6/oFkWIRARH++Gzbdh1PYuzLyst3SA416zQlRptGovMoEQsx4w4tQdia
wiP6Mf2xGXZWKvtZ0Zc1RR3ggYsKpcDqQv7W5rN4yVX86X6mgGOikKoGz3DLr2Ba
H8esCJQx4Azhclu/ZgMyxhZsmCtJvu2PKeDcCfSo2b200Qa8SddUy9WjXGDafh2i
NxB3hMYjrfJ5kNekt5u26lKpGLtxO8c/9XyOP/LZ8rDSQ20h+39hVL0noUACW41I
Sg62IHjLcgJGe7EWLFW1axnq3wycNUv+OmsdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUQbcBJkwmT2RhieGw+WPUuwszmKYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FiY0JKa3dtVDJSaGllR3ct
V1BVdXdzem1LWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
nwgwDQYJKoZIhvcNAQELBQADggEBADgEZRz7msR+CLKREWExdJG0mJ5WVhPTP34U
+X0zDGv+3+TnAOQzfdBy1r+p/FUoK4dy+xIWIlSg27zlx44Mdv/k30j6GvfLHQIQ
f3Op1dM8cnmNCtnx9C39izC55eUiAp9PFF2LqvTWJ3c9GzTOU/19m3iMygxrcvmo
UIqZbMA8+3BSecPT5QLqgSgKAs5sKHLRjtm8m223Pf0Zj7s95D+4v0If6qQvkWRB
Tr0aOkhlJpxfHKAtJ7aJvutBfm9a12LU9VTz5NATE3vk8pJqGM1yYZPB/Q/C96m2
oM2hpyWuUmeIrGR1Ua55INaVgs3/VDpqBSBEWZDcyoMTOEaxfyc=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org