Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hM2sSBxgeDHLsfbH84rnwuCh6tg.roa
File: hM2sSBxgeDHLsfbH84rnwuCh6tg.roa (raw, json)
Hash identifier: fKJA3APZEBtBKqz3Z7lcUiVi9jhECWY/+gN8UVZsRB8=
Subject key identifier: 84:CD:AC:48:1C:60:78:31:CB:B1:F6:C7:F3:8A:E7:C2:E0:A1:EA:D8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E0E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hM2sSBxgeDHLsfbH84rnwuCh6tg.roa
Signing time: Fri 01 Sep 2023 10:15:37 +0000
ROA not before: Fri 01 Sep 2023 10:15:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.159.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7694 (0x1e0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:37 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=84CDAC481C607831CBB1F6C7F38AE7C2E0A1EAD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:93:66:ac:86:f3:8a:ab:3d:95:3d:93:3d:
74:65:26:af:2d:e3:06:c4:50:af:d8:00:de:86:a7:
aa:25:08:7d:12:f4:b5:59:7e:28:06:bb:34:cd:9d:
3c:86:38:82:9f:a4:8c:a1:2b:21:b1:19:93:ae:2f:
87:14:e9:d5:f7:b5:26:1b:58:c9:46:91:fc:40:58:
b5:1e:00:11:bd:8c:8a:da:a1:8c:8a:05:3d:ed:49:
a4:f4:fa:38:35:96:8e:94:87:cd:b8:27:8a:6e:83:
eb:73:c0:5a:a1:fd:7c:8f:04:18:00:72:d9:c2:cc:
c9:b8:f8:c0:d6:fb:ad:90:71:b0:c1:da:28:87:07:
41:98:35:ec:ec:fd:92:b9:8b:1d:1b:ad:54:d7:38:
b1:3e:f0:55:90:8d:1e:02:e4:ab:f8:92:5a:3f:fd:
d7:aa:d4:6b:2b:1e:60:0e:46:e7:76:03:c1:e5:8d:
29:20:71:3f:d3:bf:cc:be:fe:23:78:b9:b4:59:4f:
e1:cb:0f:62:eb:71:53:e2:39:0a:df:51:0b:b1:af:
9e:fd:1c:8f:db:8a:c3:cf:87:2a:f3:67:15:ce:2a:
ee:0a:f0:87:f3:f7:7b:b4:e1:0a:14:be:3d:c3:9f:
df:58:c9:e9:6c:03:89:c0:93:4b:76:b2:e8:3a:5d:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CD:AC:48:1C:60:78:31:CB:B1:F6:C7:F3:8A:E7:C2:E0:A1:EA:D8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hM2sSBxgeDHLsfbH84rnwuCh6tg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.216.0/21
Signature Algorithm: sha256WithRSAEncryption
13:6f:5a:9a:d9:40:b7:bc:f4:22:e6:83:b6:db:a7:78:b7:30:
ed:49:11:8d:23:4c:44:81:57:77:2b:fb:3c:8f:a7:cc:53:55:
79:1b:ef:b1:9d:af:8f:68:44:92:94:d9:ba:44:00:62:23:aa:
9a:8d:5e:35:24:75:e7:35:7e:fa:13:89:45:4d:6b:0f:45:23:
ce:89:11:82:a2:ad:d8:d6:25:bc:08:ba:ed:57:e5:fb:b8:4c:
29:23:dc:e3:1d:65:1f:e4:f0:a5:f0:cb:65:24:98:ea:b3:b6:
0b:3c:0a:0f:d9:f1:e0:d1:43:55:22:67:e9:e9:04:fe:39:e6:
e4:8c:01:0c:7b:e8:a8:bb:f5:0a:a4:6d:65:5b:5b:c8:b0:62:
d5:82:13:9c:ac:55:db:2b:c2:74:e2:51:d3:00:f6:a7:f7:48:
25:2f:62:4c:c1:16:f9:a9:ee:cf:19:8b:eb:fd:55:94:d9:ff:
69:33:ed:18:1b:23:21:4c:4b:b1:13:cf:7a:90:f0:8c:83:33:
a4:7b:e8:66:37:5f:0e:71:f9:03:37:b0:58:f0:58:05:8a:1f:
7b:5f:e9:13:50:9e:c3:56:3a:c1:82:78:22:ee:7b:6e:16:d1:
a7:cd:24:b6:db:33:86:5c:2a:32:ed:ba:c5:de:9a:fb:a2:55:
b4:a0:26:d2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHg4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1MzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg0Q0RBQzQ4MUM2MDc4
MzFDQkIxRjZDN0YzOEFFN0MyRTBBMUVBRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA7ZNmrIbziqs9lT2TPXRlJq8t4wbEUK/YAN6Gp6olCH0S9LVZ
figGuzTNnTyGOIKfpIyhKyGxGZOuL4cU6dX3tSYbWMlGkfxAWLUeABG9jIraoYyK
BT3tSaT0+jg1lo6Uh824J4pug+tzwFqh/XyPBBgActnCzMm4+MDW+62QcbDB2iiH
B0GYNezs/ZK5ix0brVTXOLE+8FWQjR4C5Kv4klo//deq1GsrHmAORud2A8HljSkg
cT/Tv8y+/iN4ubRZT+HLD2LrcVPiOQrfUQuxr579HI/bisPPhyrzZxXOKu4K8Ifz
93u04QoUvj3Dn99YyelsA4nAk0t2sug6XY1fAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUhM2sSBxgeDHLsfbH84rnwuCh6tgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2hNMnNTQnhnZURITHNmYkg4
NHJud3VDaDZ0Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
n9gwDQYJKoZIhvcNAQELBQADggEBABNvWprZQLe89CLmg7bbp3i3MO1JEY0jTESB
V3cr+zyPp8xTVXkb77Gdr49oRJKU2bpEAGIjqpqNXjUkdec1fvoTiUVNaw9FI86J
EYKirdjWJbwIuu1X5fu4TCkj3OMdZR/k8KXwy2UkmOqztgs8Cg/Z8eDRQ1UiZ+np
BP455uSMAQx76Ki79QqkbWVbW8iwYtWCE5ysVdsrwnTiUdMA9qf3SCUvYkzBFvmp
7s8Zi+v9VZTZ/2kz7RgbIyFMS7ETz3qQ8IyDM6R76GY3Xw5x+QM3sFjwWAWKH3tf
6RNQnsNWOsGCeCLue24W0afNJLbbM4ZcKjLtusXemvuiVbSgJtI=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org