Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g81aVtZTo4XwQ0mIebWIYPBdHZw.roa
File: g81aVtZTo4XwQ0mIebWIYPBdHZw.roa (raw, json)
Hash identifier: RLk9d+W0g/TuFy0unmDeT3IhpKzdLHubxi7fabb/SFI=
Subject key identifier: 83:CD:5A:56:D6:53:A3:85:F0:43:49:88:79:B5:88:60:F0:5D:1D:9C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E0A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g81aVtZTo4XwQ0mIebWIYPBdHZw.roa
Signing time: Fri 01 Sep 2023 10:15:36 +0000
ROA not before: Fri 01 Sep 2023 10:15:36 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 49.159.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7690 (0x1e0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:36 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=83CD5A56D653A385F043498879B58860F05D1D9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:f5:5f:d5:08:14:f1:70:b3:bf:a8:c3:b0:
b0:b4:da:c3:10:d2:ce:d1:5a:4c:e8:ff:b7:08:2a:
d3:04:4e:45:35:57:64:1f:87:a1:03:c9:71:96:6a:
b5:bb:de:51:b5:23:7b:0e:98:02:b4:89:06:5d:78:
65:56:0f:a6:c5:f3:10:9c:3d:59:d9:ba:fa:9a:ed:
de:e7:e9:8f:cb:20:31:f4:ec:51:ed:5d:2a:df:6a:
db:ea:5a:db:ac:ef:da:4f:2f:64:be:7c:04:66:96:
f8:be:b5:b1:ef:ff:5f:9d:49:fd:83:55:1d:f1:08:
b4:fe:e4:5e:ab:ab:e4:41:45:0a:f4:2d:d4:e7:c0:
66:b9:7c:9f:8e:34:63:42:6b:00:59:db:0f:ef:0e:
a9:b4:34:15:8e:52:b8:e0:be:28:aa:9b:08:dd:1a:
7e:f7:42:01:f8:f6:e5:20:c8:97:2a:13:04:aa:59:
9b:bb:eb:9f:d0:b9:d9:ba:60:fe:fb:12:b5:c2:83:
e5:dc:12:e1:7e:2b:8c:65:9d:49:fb:b6:30:b4:ce:
6f:79:e0:f1:c1:69:c6:6c:b1:ed:70:8d:c5:93:42:
9d:15:c1:2e:be:c3:57:d7:15:6a:0b:91:a8:b1:aa:
48:47:39:74:7e:a2:40:e9:18:8a:5e:4e:cc:75:08:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CD:5A:56:D6:53:A3:85:F0:43:49:88:79:B5:88:60:F0:5D:1D:9C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g81aVtZTo4XwQ0mIebWIYPBdHZw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.68.0/22
Signature Algorithm: sha256WithRSAEncryption
37:a8:5e:dc:9d:0d:11:d7:bb:e8:7a:4b:05:da:a3:3e:24:59:
74:1d:60:83:2b:16:b4:61:24:b1:30:b8:2b:a5:ae:55:26:04:
bc:2e:a1:bd:ef:77:98:09:1a:fe:57:57:6b:6b:15:ee:67:fe:
a8:eb:31:39:2f:88:44:e4:2b:33:89:40:7a:17:10:8b:4b:8a:
40:e7:33:45:02:df:50:62:d4:48:12:95:ec:af:34:c2:32:ab:
e8:2b:c8:c9:38:37:8b:9c:39:de:f3:87:1e:cc:63:2e:20:a4:
6f:03:f9:3d:7c:8e:f8:ff:3d:51:fa:9a:33:5a:82:19:a0:28:
5a:f2:78:10:15:88:a7:cd:65:20:6c:05:52:70:96:a5:bf:e3:
33:f9:bc:71:f9:e3:5b:84:71:04:a5:d1:bc:ef:22:04:3f:ac:
2f:d9:87:6c:1f:ca:a3:41:ef:5e:1c:8b:cd:f8:63:32:22:e7:
fa:23:5e:a9:81:9f:30:21:d9:f5:b9:da:01:70:ed:4a:f7:68:
e2:0e:d7:0e:c3:a0:98:a7:f2:02:dd:76:fe:ba:1e:8c:b2:de:
9b:a2:bc:dd:70:a6:28:88:65:73:95:f3:3e:b2:65:31:dd:19:
fd:da:84:3b:df:0e:04:55:79:4d:e5:3d:f3:de:27:0b:17:5f:
97:8a:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org