Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WHltOwH3BSwlJ_QY-BJiFuyUluA.roa
File: WHltOwH3BSwlJ_QY-BJiFuyUluA.roa (raw, json)
Hash identifier: K+41zmkE4r6lX97awdTxR/tZ5Oo1/Emquu7JESTTPzs=
Subject key identifier: 58:79:6D:3B:01:F7:05:2C:25:27:F4:18:F8:12:62:16:EC:94:96:E0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D85
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WHltOwH3BSwlJ_QY-BJiFuyUluA.roa
Signing time: Fri 01 Sep 2023 10:14:56 +0000
ROA not before: Fri 01 Sep 2023 10:14:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 49.159.176.0/20 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7557 (0x1d85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:56 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=58796D3B01F7052C2527F418F8126216EC9496E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:8a:7b:4a:26:19:ea:21:09:56:e8:d4:42:
f9:07:3b:89:9d:43:82:09:f2:80:af:7f:9f:9f:f4:
b8:bc:8f:ce:0f:c0:b0:24:22:9e:44:9a:7c:f9:b6:
7d:27:84:28:80:27:ec:e7:0c:2f:24:47:11:15:80:
be:e0:a2:df:bb:62:cd:38:d3:09:d1:6c:b4:a7:41:
c4:12:fd:3c:bd:1a:c3:61:be:40:10:89:3a:3d:2a:
32:7b:32:c8:cd:29:7a:f8:19:c8:53:d5:ea:5f:a3:
23:e4:35:b4:c3:84:55:74:a2:f8:d3:b2:df:31:66:
9a:34:67:7b:9c:1c:1c:7f:cc:a1:4f:36:48:f2:74:
fd:02:0c:bf:31:46:c1:70:48:e7:2a:02:3f:a7:ac:
1b:5a:ca:b5:59:2e:1b:7c:15:34:04:ab:95:60:a8:
60:0a:17:f1:09:ea:e0:7e:41:31:eb:c1:2e:cc:b6:
da:5b:27:0d:86:6f:ec:b3:03:a2:e9:f8:98:66:4a:
2e:34:59:1b:90:1d:ac:81:24:39:c9:be:61:57:4d:
e4:d2:d5:05:ab:67:be:02:dc:c2:36:ed:e1:b8:27:
a6:60:08:a6:6d:8e:45:1b:ad:59:e4:d4:30:e8:66:
c7:af:0b:1e:58:b5:14:33:98:bf:04:72:f3:ff:e4:
9c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:79:6D:3B:01:F7:05:2C:25:27:F4:18:F8:12:62:16:EC:94:96:E0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WHltOwH3BSwlJ_QY-BJiFuyUluA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.176.0/20
Signature Algorithm: sha256WithRSAEncryption
16:9f:33:5d:9c:f2:28:04:0e:79:ac:bf:d1:4e:22:d3:d1:40:
f1:a1:50:48:59:9b:76:78:59:b1:aa:a8:c8:7f:16:31:ad:46:
a4:f7:f0:29:4b:27:34:ae:05:85:d1:93:de:89:c6:d0:96:f7:
e8:5b:1e:b0:eb:43:b0:ed:09:27:a4:44:53:84:81:ce:64:2a:
32:c4:0b:12:9d:1c:59:18:a8:d6:f3:a3:b4:69:ae:5a:ee:8c:
0e:8d:9f:fc:b4:4d:f1:4c:de:95:33:ff:4a:8e:ba:fc:bd:87:
b0:3b:76:07:b5:6f:f4:b0:37:e3:61:1b:0b:cf:54:e4:c8:f4:
ff:82:27:02:ca:5f:55:03:32:bc:66:d3:80:b3:60:a2:5b:32:
05:db:64:35:c6:5e:e2:1c:5a:61:5b:e2:b9:03:cc:9b:39:83:
2c:8d:c5:4b:ae:cb:45:40:fc:bf:33:9a:09:00:d9:5d:82:f2:
d4:08:2f:9f:29:33:1a:8f:35:12:76:f9:a3:75:d5:51:24:9c:
cc:cb:60:96:9c:20:9c:15:e8:e9:9a:28:98:4e:dd:be:f3:b6:
d4:a9:fd:ff:57:1f:b8:0c:e7:d4:4d:9e:b2:ef:ba:be:8b:29:
fe:0e:7e:fe:7a:bb:81:29:42:58:43:74:0f:d1:ca:bf:4b:f1:
7c:b0:00:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org