Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vhh576h5KR9-M6Jbk0WWSM6X2w0.roa
File: Vhh576h5KR9-M6Jbk0WWSM6X2w0.roa (raw, json)
Hash identifier: 7c+QsBu/0uZH7TwfU/NKaDaWDhQzUHeVJJzKzYPgqNI=
Subject key identifier: 56:18:79:EF:A8:79:29:1F:7E:33:A2:5B:93:45:96:48:CE:97:DB:0D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E33
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vhh576h5KR9-M6Jbk0WWSM6X2w0.roa
Signing time: Fri 01 Sep 2023 10:15:47 +0000
ROA not before: Fri 01 Sep 2023 10:15:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 123.0.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7731 (0x1e33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:47 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=561879EFA879291F7E33A25B93459648CE97DB0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:4a:a3:8a:19:38:90:72:ec:2f:7b:eb:fc:
09:f0:0b:c8:7f:0f:2d:af:03:e6:10:53:92:b4:59:
7b:42:9c:82:8d:28:12:b6:3a:d2:ef:3c:d2:00:4f:
b7:1d:c7:29:43:7c:c1:db:ab:c7:97:86:b3:50:55:
5a:5d:3f:8c:73:73:2b:c9:94:7f:e6:11:31:fb:eb:
fa:1c:62:62:a9:82:e3:e4:ba:8b:0e:65:30:51:4f:
51:70:c8:05:71:41:35:31:5b:c0:7a:9c:2c:70:5a:
3a:f6:d9:ee:ab:76:57:01:6c:5f:47:4b:c6:0f:30:
15:bb:96:d0:b1:16:25:ae:14:6f:16:e3:e7:87:39:
9f:34:bc:b0:dd:38:88:90:fc:61:26:90:6b:4f:bd:
de:1f:90:50:a3:8f:44:72:45:31:7b:61:72:76:73:
7a:e2:3b:60:e9:40:ef:77:2b:65:dd:a6:6b:d8:55:
4e:d7:e9:9e:76:52:d9:60:7a:d5:1b:59:5b:7c:2f:
ef:4e:a8:23:8c:e2:c1:42:6e:9c:93:7c:44:9b:1b:
5a:e8:70:8d:d6:ee:7e:ca:e3:86:4e:65:c0:d5:47:
b0:7f:f3:7c:16:38:46:fd:4a:51:28:51:a4:27:84:
23:df:9d:41:20:bf:dd:24:6e:f2:69:63:7e:c1:e9:
37:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:18:79:EF:A8:79:29:1F:7E:33:A2:5B:93:45:96:48:CE:97:DB:0D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vhh576h5KR9-M6Jbk0WWSM6X2w0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.44.0/22
Signature Algorithm: sha256WithRSAEncryption
21:a8:c8:48:a2:b0:a1:c0:1f:20:de:cc:30:c9:a8:ba:97:2f:
28:c2:17:9e:9f:10:f6:c8:b0:62:9c:70:71:95:de:84:b6:a1:
46:3f:e5:01:3a:cd:8c:35:5e:67:3e:ab:dc:8f:15:bf:f8:1c:
d1:f6:0d:1f:49:37:26:94:05:5d:08:4d:9c:1f:e3:51:04:b5:
63:ee:d2:9a:24:5a:ab:59:0b:6d:6a:76:48:f2:61:dc:3c:a7:
1d:f3:3b:0d:58:45:47:d6:f4:6f:8d:3c:dd:63:5a:16:ac:a3:
77:c2:dc:1d:65:b1:ee:b3:e9:94:f3:49:60:76:2e:59:21:7d:
05:cd:9d:95:f0:f8:7f:e3:16:f1:7e:2d:f1:e2:73:68:0c:1b:
56:ec:19:8e:21:1f:c4:4a:be:2b:a6:f6:fe:84:d5:1c:64:33:
ca:ec:10:2e:7a:74:86:1a:a7:a3:b6:5a:5c:15:8f:d8:47:1f:
7e:a2:4c:79:e2:a9:22:6e:98:de:12:93:ac:f2:4a:df:4e:42:
fe:9f:5f:a3:cf:d7:13:ff:54:26:90:b4:e5:23:69:ed:c0:d5:
2a:7b:e5:60:f2:81:e1:fe:87:17:fa:89:17:6b:6e:d6:79:85:
30:b1:e5:9e:e9:f8:5c:74:34:e2:90:aa:3e:03:b9:4a:fa:24:
5a:b8:2e:28
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHjMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1NDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDU2MTg3OUVGQTg3OTI5
MUY3RTMzQTI1QjkzNDU5NjQ4Q0U5N0RCMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXOkqjihk4kHLsL3vr/AnwC8h/Dy2vA+YQU5K0WXtCnIKNKBK2
OtLvPNIAT7cdxylDfMHbq8eXhrNQVVpdP4xzcyvJlH/mETH76/ocYmKpguPkuosO
ZTBRT1FwyAVxQTUxW8B6nCxwWjr22e6rdlcBbF9HS8YPMBW7ltCxFiWuFG8W4+eH
OZ80vLDdOIiQ/GEmkGtPvd4fkFCjj0RyRTF7YXJ2c3riO2DpQO93K2XdpmvYVU7X
6Z52UtlgetUbWVt8L+9OqCOM4sFCbpyTfESbG1rocI3W7n7K44ZOZcDVR7B/83wW
OEb9SlEoUaQnhCPfnUEgv90kbvJpY37B6TevAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVhh576h5KR9+M6Jbk0WWSM6X2w0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1ZoaDU3Nmg1S1I5LU02SmJr
MFdXU002WDJ3MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
ACwwDQYJKoZIhvcNAQELBQADggEBACGoyEiisKHAHyDezDDJqLqXLyjCF56fEPbI
sGKccHGV3oS2oUY/5QE6zYw1Xmc+q9yPFb/4HNH2DR9JNyaUBV0ITZwf41EEtWPu
0pokWqtZC21qdkjyYdw8px3zOw1YRUfW9G+NPN1jWhaso3fC3B1lse6z6ZTzSWB2
LlkhfQXNnZXw+H/jFvF+LfHic2gMG1bsGY4hH8RKvium9v6E1RxkM8rsEC56dIYa
p6O2WlwVj9hHH36iTHniqSJumN4Sk6zySt9OQv6fX6PP1xP/VCaQtOUjae3A1Sp7
5WDygeH+hxf6iRdrbtZ5hTCx5Z7p+Fx0NOKQqj4DuUr6JFq4Lig=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org