Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z1VvQYqPWAafw3aMly6Pl53owoI.roa
File: Z1VvQYqPWAafw3aMly6Pl53owoI.roa (raw, json)
Hash identifier: 2yDVzM8H1SbiQAvXSfl3duuS+ra9+8b31dQO2nLfzHs=
Subject key identifier: 67:55:6F:41:8A:8F:58:06:9F:C3:76:8C:97:2E:8F:97:9D:E8:C2:82
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DBC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z1VvQYqPWAafw3aMly6Pl53owoI.roa
Signing time: Fri 01 Sep 2023 10:15:13 +0000
ROA not before: Fri 01 Sep 2023 10:15:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7612 (0x1dbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=67556F418A8F58069FC3768C972E8F979DE8C282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:a8:00:4e:17:c6:11:88:0b:90:37:95:28:
83:73:99:27:f2:70:ea:4c:8b:ed:1c:31:28:b1:9c:
0e:26:14:6a:d7:9e:dd:69:14:fa:86:30:3d:d4:68:
84:20:8d:c4:e0:2c:72:cb:68:35:c5:a8:46:d2:e0:
45:cc:eb:6b:d1:c0:7f:90:27:c2:7d:c4:7d:e8:10:
bf:88:47:ca:52:f3:5b:ab:83:0d:17:d8:c5:4a:53:
09:c1:ad:29:58:aa:fd:56:5f:2e:41:87:5b:36:41:
1c:fc:8c:ba:fb:07:52:56:93:ca:a4:31:28:76:e0:
ab:0e:66:5e:c4:09:a3:85:33:74:35:83:9c:cb:79:
64:3d:63:13:90:e3:3a:e5:8e:45:68:d4:93:77:a8:
43:dc:e9:c3:64:8d:14:7c:89:6c:8f:6d:dc:82:83:
eb:9c:fb:48:8e:1e:a8:b9:dd:00:db:44:e8:b8:17:
78:5e:3d:2e:de:ef:f8:e7:f7:1c:2f:b6:01:c8:ab:
43:55:83:25:31:93:bc:bd:04:c0:7a:08:96:8d:2e:
53:82:95:cb:68:3e:6c:d7:aa:24:51:80:d6:4f:98:
d7:d4:88:3b:74:5c:98:16:90:4a:b9:c4:56:04:73:
57:8f:a4:6c:10:4c:19:f2:38:4f:da:f7:0d:6e:9b:
98:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:55:6F:41:8A:8F:58:06:9F:C3:76:8C:97:2E:8F:97:9D:E8:C2:82
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z1VvQYqPWAafw3aMly6Pl53owoI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:5b:d7:4b:17:d9:49:d8:ce:a7:88:3e:4c:28:18:de:cb:a9:
61:7c:39:b7:d4:fb:6d:0d:20:9e:c3:fc:70:9a:08:68:20:cc:
11:45:c7:6a:22:a3:b5:6f:e7:1c:44:3c:fa:77:e8:8a:89:e2:
f0:26:6d:75:84:bf:29:2e:f3:b5:9c:f4:b0:94:67:84:89:66:
02:f8:ce:a7:9a:26:4a:f9:47:cd:40:98:b6:3f:4c:bf:4c:3e:
ba:59:51:d7:47:c9:45:ca:f0:72:a7:05:de:6e:4a:b5:eb:a8:
c1:a6:a3:8e:bb:64:73:f4:0e:4e:7a:71:04:33:f0:eb:53:45:
16:66:18:42:9f:0c:ca:68:b1:7d:8c:00:56:23:78:ff:2b:98:
bd:09:8c:56:eb:32:c4:af:44:84:91:80:f8:db:53:d7:1d:ac:
7d:ed:de:8f:0b:95:3d:28:51:23:45:73:96:4d:6d:18:9d:81:
c8:62:7a:85:60:f4:ef:a1:d0:06:b8:36:a2:88:70:c3:2e:9b:
49:80:6e:6f:1c:f1:32:7c:dc:34:b9:a1:77:dd:22:4c:7e:07:
13:4b:4f:77:ee:77:9d:86:0e:17:90:d6:a9:6f:52:fb:1d:f0:
63:c2:02:52:85:ed:ff:d8:1c:41:6c:52:f9:80:3d:cf:07:ad:
cf:82:07:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org