Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WWRghiue7oQTtufkslW1xk4zUio.roa
File: WWRghiue7oQTtufkslW1xk4zUio.roa (raw, json)
Hash identifier: 7FVGtpwR3oJLfEdEr0UveaM0fcHPWh+/tUVV4gpDlZg=
Subject key identifier: 59:64:60:86:2B:9E:EE:84:13:B6:E7:E4:B2:55:B5:C6:4E:33:52:2A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DC7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WWRghiue7oQTtufkslW1xk4zUio.roa
Signing time: Fri 01 Sep 2023 10:15:17 +0000
ROA not before: Fri 01 Sep 2023 10:15:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.159.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7623 (0x1dc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=596460862B9EEE8413B6E7E4B255B5C64E33522A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:29:4f:60:df:cf:ea:28:c7:9c:7b:80:b3:5d:
f7:4a:b4:15:81:fe:0e:2f:2d:1a:12:f9:2d:0b:38:
96:9c:86:fc:45:91:3b:ac:d8:46:3f:1d:7f:9b:0a:
17:10:dc:4e:24:16:aa:13:5d:16:c8:c7:4a:1e:43:
3f:e1:d2:ed:a5:bb:76:cc:28:51:cd:49:69:6d:53:
b1:63:de:05:ec:a9:c5:a6:d3:ff:45:b2:cc:68:36:
5c:56:aa:4f:23:fe:78:d2:88:4d:f1:b8:fb:d0:15:
00:da:ba:5f:e1:8e:9b:1f:c1:5c:35:6c:df:80:d9:
5f:18:44:ea:ab:19:21:c6:f1:e0:a9:d1:39:8b:76:
6d:de:bd:1d:0d:5a:ba:8a:70:90:18:82:0e:75:68:
dc:4e:25:6d:e5:7d:7f:4e:fd:f6:d1:d1:0f:c8:c7:
1a:4c:c1:fb:d7:ea:23:7a:6c:26:28:cf:9c:9f:43:
df:80:5b:c4:ad:65:a1:85:14:02:ed:17:27:40:fc:
53:f6:23:82:63:de:32:9c:77:b1:d1:34:58:29:d2:
ef:0b:9c:05:73:4a:ad:d1:e2:b1:63:93:44:a5:bd:
34:ac:a4:0c:c0:be:45:06:53:c8:8a:29:20:10:d0:
f5:53:45:a3:f2:e3:af:20:19:f2:c5:2f:ab:53:a5:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:64:60:86:2B:9E:EE:84:13:B6:E7:E4:B2:55:B5:C6:4E:33:52:2A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WWRghiue7oQTtufkslW1xk4zUio.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.224.0/21
Signature Algorithm: sha256WithRSAEncryption
14:bf:8a:0b:63:b8:25:ac:fd:dc:75:d9:a3:2f:45:55:07:44:
3f:e2:e6:d5:a4:27:3d:83:5c:42:87:6e:47:22:dd:a1:d7:78:
e6:c7:40:33:da:e2:90:7f:10:57:b1:70:c3:bf:7f:fc:54:33:
ca:9d:aa:13:25:48:10:92:13:4e:07:d1:ae:5d:c5:26:49:a5:
9c:0d:f9:ce:ed:6e:37:31:80:d7:e1:7e:ab:1d:4c:bf:57:f4:
d0:e3:86:12:1f:1d:f4:b2:eb:0b:91:95:c4:34:2e:e3:d7:1c:
a9:a1:59:5a:00:87:99:ed:2e:35:bb:4a:be:e7:f7:35:8b:7e:
16:c2:de:e6:01:3a:3a:68:b4:02:bf:2d:f6:6a:94:51:85:e0:
4f:72:11:35:62:67:5f:17:e1:b1:c9:af:3e:fc:f2:05:00:10:
cc:65:7e:3c:a6:99:f9:fd:d7:8b:22:7d:33:ed:c2:55:a0:f7:
91:c9:e7:64:97:89:48:22:fc:7e:08:a1:e7:65:75:9c:52:2e:
63:23:d9:91:31:b9:87:56:9b:e7:cd:6f:34:20:2d:08:8e:3b:
e5:2e:74:5f:34:3c:b3:f5:c7:d3:67:04:c7:d3:c8:df:4e:f4:
a9:f1:60:ff:ec:6f:32:67:90:45:67:9d:71:71:28:8f:a1:e9:
e1:d5:7d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org