Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_1-JUTBEfK-Pg9MMr6nWKV87n2E.roa
File: _1-JUTBEfK-Pg9MMr6nWKV87n2E.roa (raw, json)
Hash identifier: 2SvPLcJkxFuzcrpa/CD5wPJAaXkAqVg8PtI9oBfqfUc=
Subject key identifier: FF:5F:89:51:30:44:7C:AF:8F:83:D3:0C:AF:A9:D6:29:5F:3B:9F:61
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DDA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_1-JUTBEfK-Pg9MMr6nWKV87n2E.roa
Signing time: Fri 01 Sep 2023 10:15:22 +0000
ROA not before: Fri 01 Sep 2023 10:15:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.159.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7642 (0x1dda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FF5F895130447CAF8F83D30CAFA9D6295F3B9F61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:99:55:c4:94:58:1b:06:30:a2:31:fc:29:9c:
4b:cb:7b:a7:d3:3f:c3:38:27:a7:43:50:aa:ba:3c:
79:16:6c:4b:fc:94:f1:8f:d9:2a:23:6d:22:da:50:
9b:44:c9:03:3b:89:9b:e1:26:59:1c:52:8e:6f:b0:
21:1d:4f:0d:aa:eb:be:97:50:8f:43:3a:9d:4b:0a:
99:07:6d:e1:c2:97:af:55:0b:28:10:bf:78:1d:a1:
e3:61:ac:98:69:c6:5a:d1:26:db:c1:28:00:e3:39:
d8:e3:33:cf:8f:02:57:11:5f:9b:68:50:cc:fa:98:
2a:a7:10:cd:5c:13:95:00:9d:8a:55:89:51:f0:d6:
d9:20:61:81:67:1b:10:bf:1c:ad:97:e0:e0:86:ef:
c5:92:2f:7e:d2:5c:1e:44:ac:55:73:39:8b:8b:1e:
0f:31:99:b1:99:94:5f:20:19:f1:f0:e5:c7:c2:18:
59:ce:69:23:85:c7:aa:98:fb:b1:1f:72:5f:c9:b6:
98:13:d6:f8:65:78:f0:ea:83:16:ad:63:16:3c:b5:
48:d2:e4:cf:9b:08:1f:6e:45:b9:87:86:8f:1f:4a:
57:e9:16:60:1f:34:28:a6:e6:05:f9:95:06:55:fd:
2f:2e:3b:bc:a9:fb:e6:44:50:9d:c0:13:47:5d:87:
00:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5F:89:51:30:44:7C:AF:8F:83:D3:0C:AF:A9:D6:29:5F:3B:9F:61
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_1-JUTBEfK-Pg9MMr6nWKV87n2E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.168.0/21
Signature Algorithm: sha256WithRSAEncryption
54:10:97:ae:3d:36:04:ca:be:bb:55:e5:3b:5e:a6:d5:a4:7a:
21:9c:b5:f1:0f:79:3e:64:9d:d9:ee:fa:41:e4:8b:f0:73:8c:
b5:b5:03:44:bc:df:35:5b:0d:77:81:29:9f:ea:25:75:e9:60:
3d:29:ce:ea:81:69:37:d7:8d:7f:5c:5a:dc:9a:c4:eb:b9:84:
3c:c3:14:ea:79:4d:6a:74:f6:2a:82:51:73:3a:55:a1:fc:64:
ea:35:a5:28:17:ec:5b:cf:78:17:79:96:65:7c:79:3e:51:18:
9d:70:f9:34:b3:07:57:3f:1f:0a:2b:4a:2b:98:97:70:90:8c:
d6:e6:8a:4e:e1:f4:b3:fb:98:83:8b:50:44:ac:ae:ee:39:51:
b8:3a:53:21:a1:fb:01:76:20:d6:f5:7f:d2:f2:72:7d:c4:7f:
e3:b4:c5:69:36:9f:3b:02:9e:4d:3d:04:43:c3:e0:d4:62:c9:
13:a4:36:93:48:1a:67:f6:92:fa:75:15:bd:0b:02:1d:1a:e3:
70:48:c5:24:39:0f:50:6b:f6:07:5a:e7:b8:fc:24:ab:5d:fb:
6c:e8:4b:d2:c6:f7:1f:8b:ce:9b:bd:01:a5:c6:84:7e:c9:e4:
84:ed:37:86:b0:dc:55:e9:26:86:ee:9e:9d:ad:66:ed:b6:f9:
9a:be:be:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org