Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_LpMIpzC86WVDBSvH5du557Uczo.roa
File: _LpMIpzC86WVDBSvH5du557Uczo.roa (raw, json)
Hash identifier: lwmwL2zEpVDc8aV1JUd6x0v6pIP7QlKFrAJMR6vajxk=
Subject key identifier: FC:BA:4C:22:9C:C2:F3:A5:95:0C:14:AF:1F:97:6E:E7:9E:D4:73:3A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E6C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_LpMIpzC86WVDBSvH5du557Uczo.roa
Signing time: Fri 01 Sep 2023 10:16:01 +0000
ROA not before: Fri 01 Sep 2023 10:16:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7788 (0x1e6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FCBA4C229CC2F3A5950C14AF1F976EE79ED4733A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d6:2f:79:7b:8e:9c:b2:fc:5a:0d:de:12:75:
4c:a8:75:cb:ce:fc:3f:6a:ad:8b:ab:b9:61:95:29:
78:af:45:b7:ba:7e:cc:ca:e4:ef:65:e7:bd:92:68:
b4:39:8a:97:c8:bd:f4:25:c5:18:4c:3d:a7:7d:fc:
11:68:40:dc:7c:3a:bf:7c:86:3e:07:db:11:5a:98:
a1:96:9d:b7:65:e7:bc:2e:1c:4c:aa:9b:23:6a:09:
eb:a0:32:f2:b7:8c:9d:7e:08:06:fb:c9:30:76:75:
38:52:0a:8f:88:7c:05:d9:ca:be:ed:0a:cd:1a:b4:
9e:ed:f0:16:f0:0d:8a:41:70:78:37:29:b5:93:8f:
0a:51:e7:1f:be:ac:9b:6d:37:5f:35:51:16:91:35:
53:d8:94:31:38:18:7b:ee:28:0d:e0:03:e8:98:09:
2a:cb:5f:45:8c:ac:9d:fb:3d:cd:fd:e1:f9:cc:d3:
98:54:9f:9f:2f:90:10:bd:12:64:bf:e0:8c:e5:f5:
88:a5:01:47:18:07:30:6f:81:fb:4e:3f:77:2a:53:
83:64:b9:2c:a7:be:3f:5a:7a:75:3e:0c:55:83:2f:
6f:a2:f9:14:01:02:a1:e6:8e:69:e6:2a:98:61:26:
4c:a5:3c:31:ab:68:02:60:de:ea:3e:ae:b9:ab:40:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BA:4C:22:9C:C2:F3:A5:95:0C:14:AF:1F:97:6E:E7:9E:D4:73:3A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_LpMIpzC86WVDBSvH5du557Uczo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.60.0/24
Signature Algorithm: sha256WithRSAEncryption
67:6a:9c:02:49:cb:3b:f1:5b:f2:37:49:76:41:5b:7f:4c:2b:
72:eb:5c:77:4c:bb:cd:30:e2:21:66:20:cc:41:85:88:9e:6a:
88:8f:8f:fc:45:fa:9b:68:72:ff:3e:fe:b2:d8:d1:72:33:66:
a0:94:0f:44:96:df:1c:75:f0:89:4e:cf:67:c5:33:42:30:e0:
41:3c:c5:98:32:65:db:08:48:4e:4c:c3:3b:54:c2:a5:7d:af:
24:bd:d5:87:10:e3:14:06:d7:25:5f:87:c6:37:d4:42:51:ef:
38:a0:8d:e6:7d:cc:0a:94:fe:68:53:d9:cd:8d:55:08:95:b0:
62:1c:58:7f:6c:dc:68:dc:69:66:1d:21:b2:6d:7b:d8:b6:d0:
d0:6a:86:94:44:d5:84:95:7e:a8:60:d2:68:05:64:9b:63:80:
70:b8:cd:4d:fd:34:01:87:cc:22:c9:a5:15:fc:68:fd:84:36:
ec:a0:34:0d:11:df:19:91:5e:ba:cb:5f:c4:3a:32:d8:2c:78:
05:44:3a:5d:24:65:52:56:a8:1e:9d:a9:ff:09:83:0e:ed:80:
36:ee:99:99:f8:85:2c:3b:ee:21:c7:cd:13:26:7a:12:36:6a:
f7:cb:dc:c7:02:a1:49:4f:73:46:d4:a5:24:7d:d4:9a:9f:00:
54:f6:28:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org