Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TPxmJ_jLVOjkWhKQYydzO9EBZI4.roa
File: TPxmJ_jLVOjkWhKQYydzO9EBZI4.roa (raw, json)
Hash identifier: ji06F1QNY0lgxBs2NqMw7M1bXMTY5+Jo63W9VfGk16I=
Subject key identifier: 4C:FC:66:27:F8:CB:54:E8:E4:5A:12:90:63:27:73:3B:D1:01:64:8E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E29
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TPxmJ_jLVOjkWhKQYydzO9EBZI4.roa
Signing time: Fri 01 Sep 2023 10:15:44 +0000
ROA not before: Fri 01 Sep 2023 10:15:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 61.61.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7721 (0x1e29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4CFC6627F8CB54E8E45A12906327733BD101648E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:32:aa:20:65:12:18:d8:1e:15:94:4b:7a:
dc:99:83:44:c9:96:69:8a:8e:1d:e3:85:a1:51:fc:
b3:d9:f3:be:ea:0c:91:3e:e0:63:43:86:d9:be:4f:
0f:b1:28:38:4b:90:d9:c5:56:67:ae:f2:be:f2:8a:
7a:97:41:1e:d7:a8:28:ca:ce:c7:17:26:b8:d0:57:
ef:13:bc:7b:61:0f:79:41:ca:0a:7e:88:95:8e:75:
24:42:06:25:bc:cf:b1:10:e7:1a:9c:2f:9f:45:03:
85:22:09:5d:86:6e:5c:c3:c9:3f:48:fb:f5:a7:41:
84:7d:70:84:24:d5:96:1b:5f:7a:61:ab:4b:09:06:
2b:30:48:f4:8d:0f:6d:93:b6:4f:d1:72:39:56:fe:
04:84:5b:30:a8:c6:b0:aa:b2:5b:d7:5a:d5:08:fb:
8f:e6:c5:49:12:77:de:f0:0a:72:67:4e:dc:7e:2c:
c9:37:55:d1:53:b3:43:cc:50:b7:b6:f7:1e:62:8d:
25:b0:7c:81:cf:75:03:a1:af:a2:4e:e9:4e:f3:ff:
cc:64:9e:89:f3:2b:c0:f1:16:28:91:8d:12:77:ed:
45:65:4e:7b:fd:d3:e3:bd:af:89:7a:71:da:19:3b:
fe:ae:6c:7b:bf:03:be:d1:54:7f:76:c0:43:23:67:
9f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FC:66:27:F8:CB:54:E8:E4:5A:12:90:63:27:73:3B:D1:01:64:8E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TPxmJ_jLVOjkWhKQYydzO9EBZI4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.208.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:58:77:3d:cb:5e:0f:65:bc:73:b3:62:90:1e:1e:29:6d:fa:
18:b2:b7:b8:81:93:ed:ec:c3:14:d4:2c:f7:e9:80:01:82:64:
ca:f1:9c:de:b8:0a:5a:77:8c:f0:c4:4c:f0:fa:37:ba:a6:52:
58:6a:f1:7b:de:98:23:e9:ad:a0:23:fd:b4:81:43:db:da:af:
5d:e7:f3:40:70:bb:58:ea:df:2b:52:8d:bf:9c:22:9e:8c:9d:
8f:b8:15:ec:83:a1:86:e5:6e:91:69:9c:b5:f3:d6:32:61:54:
cc:3c:09:03:d8:a6:f8:1e:6d:af:f9:55:f5:af:2c:96:70:6d:
f0:0b:78:b3:d0:b1:9b:d9:96:f5:a4:42:fe:f4:f3:62:29:9c:
d3:03:be:13:e3:75:cb:db:47:bc:b6:00:d8:f6:94:bb:4c:fe:
9b:36:2f:a1:a1:2f:c9:62:b8:fd:fd:1b:14:ec:08:4b:de:e5:
35:46:77:eb:28:2c:18:11:a5:57:a9:21:1f:1b:fe:95:e1:b3:
1c:eb:5f:18:b9:fd:6e:cc:65:9f:1a:81:5f:ea:c5:ea:9f:f9:
61:62:66:c1:3c:dc:3f:6b:01:df:c0:b0:73:41:a2:77:a4:7b:
0b:65:14:78:51:d7:02:f6:d8:ec:2a:63:b0:8a:24:8a:f9:51:
90:39:2f:b6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHikwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1NDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRDRkM2NjI3RjhDQjU0
RThFNDVBMTI5MDYzMjc3MzNCRDEwMTY0OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOtTKqIGUSGNgeFZRLetyZg0TJlmmKjh3jhaFR/LPZ877qDJE+
4GNDhtm+Tw+xKDhLkNnFVmeu8r7yinqXQR7XqCjKzscXJrjQV+8TvHthD3lBygp+
iJWOdSRCBiW8z7EQ5xqcL59FA4UiCV2GblzDyT9I+/WnQYR9cIQk1ZYbX3phq0sJ
BiswSPSND22Ttk/RcjlW/gSEWzCoxrCqslvXWtUI+4/mxUkSd97wCnJnTtx+LMk3
VdFTs0PMULe29x5ijSWwfIHPdQOhr6JO6U7z/8xknonzK8DxFiiRjRJ37UVlTnv9
0+O9r4l6cdoZO/6ubHu/A77RVH92wEMjZ58bAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUTPxmJ/jLVOjkWhKQYydzO9EBZI4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1RQeG1KX2pMVk9qa1doS1FZ
eWR6TzlFQlpJNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9
PdAwDQYJKoZIhvcNAQELBQADggEBAFtYdz3LXg9lvHOzYpAeHilt+hiyt7iBk+3s
wxTULPfpgAGCZMrxnN64Clp3jPDETPD6N7qmUlhq8XvemCPpraAj/bSBQ9var13n
80Bwu1jq3ytSjb+cIp6MnY+4FeyDoYblbpFpnLXz1jJhVMw8CQPYpvgeba/5VfWv
LJZwbfALeLPQsZvZlvWkQv7082IpnNMDvhPjdcvbR7y2ANj2lLtM/ps2L6GhL8li
uP39GxTsCEve5TVGd+soLBgRpVepIR8b/pXhsxzrXxi5/W7MZZ8agV/qxeqf+WFi
ZsE83D9rAd/AsHNBonekewtlFHhR1wL22OwqY7CKJIr5UZA5L7Y=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org