Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZOTixdLWdVqvlDYpOhbfVRYiGPo.roa
File: ZOTixdLWdVqvlDYpOhbfVRYiGPo.roa (raw, json)
Hash identifier: EMJ0s3tdFKeuyNU1VfF/BbKBADgDwBbylX3Q3c+qqlY=
Subject key identifier: 64:E4:E2:C5:D2:D6:75:5A:AF:94:36:29:3A:16:DF:55:16:22:18:FA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D8A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZOTixdLWdVqvlDYpOhbfVRYiGPo.roa
Signing time: Fri 01 Sep 2023 10:14:59 +0000
ROA not before: Fri 01 Sep 2023 10:14:59 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 49.159.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7562 (0x1d8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:59 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=64E4E2C5D2D6755AAF9436293A16DF55162218FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f4:60:49:19:bb:3c:9b:f5:72:a9:b9:fa:e9:
04:45:79:9f:c3:18:7b:20:42:af:a6:6c:40:ee:b3:
19:e0:9a:b8:fe:c4:43:e3:28:85:b8:b4:e6:38:66:
40:2c:7f:59:1d:9e:0c:be:b7:48:ee:36:18:2f:e1:
cc:86:90:d2:f9:a7:da:00:a3:4e:f4:7c:b1:d7:cc:
e5:09:88:98:68:dc:bb:73:89:d5:15:6a:86:63:13:
1a:af:53:7f:e9:fa:b0:9e:a4:1e:ae:5a:b8:83:e2:
e9:af:42:93:ca:db:de:8b:d3:97:30:7c:4b:b3:ad:
3c:e7:c5:8c:cc:b1:ca:69:d0:c8:34:47:b9:34:bf:
7f:06:d9:58:f5:5c:f1:0d:44:9b:b3:02:48:85:4a:
05:ea:dd:3e:35:56:04:88:7f:37:1c:4a:65:b1:8b:
7c:95:a9:51:8c:11:28:ef:7b:d6:2c:79:30:a5:fb:
4d:a5:12:f2:24:12:a6:f9:9e:aa:66:07:ff:0a:65:
8b:59:ec:8f:bf:02:16:89:2d:70:30:31:53:a0:e3:
78:ac:ce:15:de:38:0e:7e:ac:47:24:c5:d6:5c:51:
79:81:2f:c2:84:9e:3e:6a:a6:77:85:f1:4b:0d:a9:
28:77:4f:02:22:77:32:18:43:c5:1b:ab:53:17:6a:
95:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:E2:C5:D2:D6:75:5A:AF:94:36:29:3A:16:DF:55:16:22:18:FA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZOTixdLWdVqvlDYpOhbfVRYiGPo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:fc:27:ab:4c:98:ad:a4:b3:ae:5a:0d:38:da:66:53:1d:e4:
03:97:ef:60:e5:cd:34:84:d4:81:35:4e:20:6c:8b:2f:a8:89:
b6:82:a3:48:14:2a:ce:f2:2d:3d:d4:03:3e:be:eb:f5:02:3d:
fb:98:c5:52:1e:f7:6d:2b:30:33:28:b1:df:2f:48:0b:f2:0b:
d0:fd:03:80:86:87:e1:65:52:6e:5b:f6:e4:84:8d:09:51:ad:
c7:25:1d:8b:48:0a:cb:b0:c4:f4:a2:14:77:45:99:61:7d:9a:
9d:59:97:d6:58:f9:24:f1:0b:df:8c:5f:b9:cc:1f:9e:13:e9:
9a:fe:60:a0:06:44:bb:e5:3a:9b:60:9c:f2:54:ba:32:b2:ec:
ab:8d:ce:af:f5:73:be:7a:4d:a6:5d:42:6a:94:c0:a2:a5:ab:
de:f6:d7:e0:8c:d1:63:27:ff:9f:bc:e5:c2:7b:e3:09:95:aa:
29:47:7f:6e:3b:17:2e:eb:e4:bb:35:d1:4f:3d:fc:e9:f3:a1:
3b:90:f0:48:64:e1:2e:e2:c0:94:6c:72:10:70:bf:ba:2d:89:
6b:83:18:93:9b:28:0d:3d:31:b5:53:fe:c7:5f:2d:27:a4:e7:
35:e1:84:68:b3:0b:59:aa:b4:e5:5a:fa:81:e1:12:53:ee:8c:
f8:01:e9:9b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHYowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE0NTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY0RTRFMkM1RDJENjc1
NUFBRjk0MzYyOTNBMTZERjU1MTYyMjE4RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDj9GBJGbs8m/Vyqbn66QRFeZ/DGHsgQq+mbEDusxngmrj+xEPj
KIW4tOY4ZkAsf1kdngy+t0juNhgv4cyGkNL5p9oAo070fLHXzOUJiJho3LtzidUV
aoZjExqvU3/p+rCepB6uWriD4umvQpPK296L05cwfEuzrTznxYzMscpp0Mg0R7k0
v38G2Vj1XPENRJuzAkiFSgXq3T41VgSIfzccSmWxi3yVqVGMESjve9YseTCl+02l
EvIkEqb5nqpmB/8KZYtZ7I+/AhaJLXAwMVOg43iszhXeOA5+rEckxdZcUXmBL8KE
nj5qpneF8UsNqSh3TwIidzIYQ8Ubq1MXapVlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZOTixdLWdVqvlDYpOhbfVRYiGPowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1pPVGl4ZExXZFZxdmxEWXBP
aGJmVlJZaUdQby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
n0AwDQYJKoZIhvcNAQELBQADggEBAD78J6tMmK2ks65aDTjaZlMd5AOX72DlzTSE
1IE1TiBsiy+oibaCo0gUKs7yLT3UAz6+6/UCPfuYxVIe920rMDMosd8vSAvyC9D9
A4CGh+FlUm5b9uSEjQlRrcclHYtICsuwxPSiFHdFmWF9mp1Zl9ZY+STxC9+MX7nM
H54T6Zr+YKAGRLvlOptgnPJUujKy7KuNzq/1c756TaZdQmqUwKKlq9721+CM0WMn
/5+85cJ74wmVqilHf247Fy7r5Ls10U89/OnzoTuQ8Ehk4S7iwJRschBwv7otiWuD
GJObKA09MbVT/sdfLSek5zXhhGizC1mqtOVa+oHhElPujPgB6Zs=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org