Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RThQz8CwoqzStkoTGwRiIk7QCVg.roa
File: RThQz8CwoqzStkoTGwRiIk7QCVg.roa (raw, json)
Hash identifier: TFe1iUSoveofirU+0u5tJgqgyR/MSVLhjzmAMuFyL0M=
Subject key identifier: 45:38:50:CF:C0:B0:A2:AC:D2:B6:4A:13:1B:04:62:22:4E:D0:09:58
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E52
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RThQz8CwoqzStkoTGwRiIk7QCVg.roa
Signing time: Fri 01 Sep 2023 10:15:53 +0000
ROA not before: Fri 01 Sep 2023 10:15:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.159.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7762 (0x1e52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=453850CFC0B0A2ACD2B64A131B0462224ED00958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:27:3c:a3:42:2e:ff:62:65:20:2d:dd:01:
87:c2:4e:df:34:b9:d4:da:19:f9:8f:29:ed:73:15:
60:62:68:ee:be:d9:92:f7:9c:af:33:4a:78:e4:0a:
46:80:4d:a0:ae:42:86:8d:b5:18:b7:39:f5:11:c9:
fc:ac:a4:c8:80:7a:45:97:fa:f8:4b:12:09:bb:c8:
67:6d:36:7b:3e:60:4b:80:6f:ec:2b:e2:1f:cc:3d:
cf:db:f0:e8:c5:67:d3:60:52:e0:4c:2d:97:20:a7:
fb:4e:4e:01:f1:83:30:df:ce:fe:7d:d8:fb:db:56:
ad:ed:ef:01:0f:5e:a4:ba:1d:60:57:dd:f5:ee:52:
a0:b7:c2:72:d4:a5:4f:28:00:16:88:0f:2f:31:63:
cc:c9:6d:04:96:da:51:0f:7b:81:7f:1f:fa:39:2f:
99:2b:67:65:61:87:16:2c:a1:b5:3a:02:1f:09:02:
16:37:93:3b:4f:01:8e:09:db:e1:8c:d7:56:0d:a8:
ca:cd:0e:e0:85:58:6f:ce:ce:0d:ee:82:b0:37:a3:
c0:5f:ec:d2:a7:42:e9:c7:ce:86:7c:bd:6e:73:d0:
49:8e:17:1c:c6:f8:c5:31:8d:fd:20:e6:63:41:10:
08:de:de:11:93:a9:4f:ff:a1:7f:6e:1b:44:29:0a:
dc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:38:50:CF:C0:B0:A2:AC:D2:B6:4A:13:1B:04:62:22:4E:D0:09:58
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RThQz8CwoqzStkoTGwRiIk7QCVg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.128.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:02:ab:c0:5b:65:e2:cc:7e:04:07:b3:32:04:bd:fa:d1:10:
fa:36:2a:e2:ab:69:13:17:3a:96:62:43:fd:72:91:c0:f6:a0:
da:3c:46:3f:76:cd:07:e9:a0:05:da:ac:32:da:99:f7:88:a9:
06:88:d4:4d:42:df:f7:10:5d:90:6e:4c:a1:bb:35:c6:cc:a8:
09:bc:c3:92:8f:08:62:09:b3:f2:d1:d1:e3:42:d1:0d:9c:d8:
99:cc:9c:90:5f:e3:ab:8c:c9:0f:c1:35:3c:1e:fd:b3:ce:10:
b8:84:27:b8:fa:8f:6f:d2:83:c3:1b:db:f2:d2:0c:ea:d0:1c:
7f:55:5a:ef:cc:79:73:49:f1:37:70:b2:b8:64:e9:fa:8d:64:
83:38:b1:c8:59:90:2b:39:23:fe:2f:e8:8e:5e:75:0f:49:3e:
97:33:2b:38:38:b9:42:4c:5a:3a:39:f8:96:a3:cd:2e:74:b6:
37:9e:d3:91:4b:e7:02:2e:f9:f2:c3:52:48:28:18:d7:25:ee:
17:fe:1f:10:25:07:7b:c0:99:53:ec:0a:76:2b:b6:2a:fc:99:
6f:d8:44:95:10:07:14:81:05:78:c4:e3:47:b6:da:ae:b9:e5:
a8:dc:07:0a:ed:f3:8d:77:ff:9f:92:66:e5:3c:37:76:3d:31:
1f:6c:ee:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org