Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rzn_BuemBZhckNJNMlOqWwtJtiM.roa
File: Rzn_BuemBZhckNJNMlOqWwtJtiM.roa (raw, json)
Hash identifier: gHOd/WYfVNS0yZKXdwNk0QvukeUjr6WVUWAEra4Z34c=
Subject key identifier: 47:39:FF:06:E7:A6:05:98:5C:90:D2:4D:32:53:AA:5B:0B:49:B6:23
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DCF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rzn_BuemBZhckNJNMlOqWwtJtiM.roa
Signing time: Fri 01 Sep 2023 10:15:19 +0000
ROA not before: Fri 01 Sep 2023 10:15:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 122.100.72.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7631 (0x1dcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4739FF06E7A605985C90D24D3253AA5B0B49B623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:77:97:61:bd:a6:9d:80:ed:cf:7b:ca:fc:
8e:0f:a0:97:8e:91:4c:3f:aa:80:b7:c3:06:6e:b8:
d1:ce:83:73:b7:50:a1:3d:42:26:5b:9a:ee:35:43:
9f:68:bf:f9:ff:ed:b2:f5:aa:81:4a:24:3b:8d:79:
ae:ac:a9:cf:c4:cf:31:5c:a7:96:08:ad:1d:d9:c6:
47:62:23:82:9c:e6:be:ed:0e:da:de:b3:5b:06:03:
42:ab:53:5d:9c:7a:13:7a:f2:20:88:2c:de:59:af:
39:14:08:46:2e:fd:04:56:2c:f1:22:34:48:8d:15:
e3:c1:0e:8d:3e:34:63:d3:40:82:73:43:1c:f3:f6:
67:58:59:f5:d1:11:d0:89:a4:62:ba:b7:c6:b6:71:
3d:82:26:96:90:44:9d:76:5b:8b:0b:1a:fa:04:f8:
49:3b:14:fc:a5:9b:6c:4d:4f:d7:94:fd:6e:5d:f7:
08:a1:14:53:d7:f3:cc:6b:b0:3b:ac:3c:9c:44:36:
04:a2:30:bc:5f:c0:ca:10:86:4a:55:2d:7a:20:5e:
63:75:5c:85:ea:d1:4a:88:90:18:4f:d8:a8:1a:f4:
82:69:94:31:92:b0:04:bc:c6:72:1c:f2:9b:04:36:
3b:fb:d3:e7:01:b9:a2:62:7d:98:cc:ce:8b:ae:ac:
0f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:39:FF:06:E7:A6:05:98:5C:90:D2:4D:32:53:AA:5B:0B:49:B6:23
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rzn_BuemBZhckNJNMlOqWwtJtiM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.72.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:60:1a:27:a7:08:4f:7b:2f:f3:03:42:12:c2:80:31:4f:8c:
b4:10:c4:15:33:68:9c:64:de:f5:76:ee:95:74:8f:63:f7:8f:
12:f2:75:d5:db:da:af:09:b2:ca:42:62:ab:0b:74:e4:98:62:
89:a0:ee:d5:ac:52:be:7e:67:f0:0e:b5:d0:05:70:ab:26:b4:
66:a2:6b:51:16:56:98:49:7a:93:74:eb:16:b7:b9:3e:d3:a0:
f7:2b:92:3f:50:ef:45:64:3a:4d:0a:cd:dc:b4:ec:25:d6:c0:
ef:4f:82:f3:00:b5:2e:bf:0c:a1:e6:05:ec:ba:03:8f:01:3b:
dc:f3:36:28:a9:13:31:cc:5d:d9:67:e0:3d:4e:ed:b6:c6:c4:
4e:91:95:0c:5d:1b:4d:bb:74:a7:cb:ad:1f:5a:18:4b:c2:90:
33:c4:6a:4a:02:6f:b8:45:77:7b:0e:27:d2:a8:ac:b2:b1:b8:
b3:0a:0c:06:a7:3b:84:af:96:3c:57:92:d9:79:22:58:a0:f0:
aa:fd:e6:e4:45:b6:2a:43:a6:aa:71:e9:74:a6:05:19:e4:ab:
30:39:df:bb:bb:4b:ff:2b:17:b8:f2:ff:b0:2e:d6:01:5c:34:
97:4c:a3:e7:49:d3:3e:c4:3a:78:c0:40:8e:e7:db:c5:60:8e:
c1:f3:c1:33
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHc8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ3MzlGRjA2RTdBNjA1
OTg1QzkwRDI0RDMyNTNBQTVCMEI0OUI2MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCka3eXYb2mnYDtz3vK/I4PoJeOkUw/qoC3wwZuuNHOg3O3UKE9
QiZbmu41Q59ov/n/7bL1qoFKJDuNea6sqc/EzzFcp5YIrR3ZxkdiI4Kc5r7tDtre
s1sGA0KrU12cehN68iCILN5ZrzkUCEYu/QRWLPEiNEiNFePBDo0+NGPTQIJzQxzz
9mdYWfXREdCJpGK6t8a2cT2CJpaQRJ12W4sLGvoE+Ek7FPylm2xNT9eU/W5d9wih
FFPX88xrsDusPJxENgSiMLxfwMoQhkpVLXogXmN1XIXq0UqIkBhP2Kga9IJplDGS
sAS8xnIc8psENjv70+cBuaJifZjMzouurA8BAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQURzn/BuemBZhckNJNMlOqWwtJtiMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1J6bl9CdWVtQlpoY2tOSk5N
bE9xV3d0SnRpTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6
ZEgwDQYJKoZIhvcNAQELBQADggEBAA1gGienCE97L/MDQhLCgDFPjLQQxBUzaJxk
3vV27pV0j2P3jxLyddXb2q8JsspCYqsLdOSYYomg7tWsUr5+Z/AOtdAFcKsmtGai
a1EWVphJepN06xa3uT7ToPcrkj9Q70VkOk0Kzdy07CXWwO9PgvMAtS6/DKHmBey6
A48BO9zzNiipEzHMXdln4D1O7bbGxE6RlQxdG027dKfLrR9aGEvCkDPEakoCb7hF
d3sOJ9KorLKxuLMKDAanO4SvljxXktl5Ilig8Kr95uRFtipDpqpx6XSmBRnkqzA5
37u7S/8rF7jy/7Au1gFcNJdMo+dJ0z7EOnjAQI7n28VgjsHzwTM=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org