Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hedIFKTRy9uTLhHsKECQRwge7yM.roa
File: hedIFKTRy9uTLhHsKECQRwge7yM.roa (raw, json)
Hash identifier: Kbgt2eUEewT9nTpjpiVOk1jFCNb24V0/QEaCHZXjHh8=
Subject key identifier: 85:E7:48:14:A4:D1:CB:DB:93:2E:11:EC:28:40:90:47:08:1E:EF:23
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E4D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hedIFKTRy9uTLhHsKECQRwge7yM.roa
Signing time: Fri 01 Sep 2023 10:15:52 +0000
ROA not before: Fri 01 Sep 2023 10:15:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7757 (0x1e4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=85E74814A4D1CBDB932E11EC28409047081EEF23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:30:ea:bc:00:14:0e:f2:3b:a7:86:1f:6b:0c:
7b:40:61:f5:99:94:87:67:87:ee:e0:e7:14:a0:e6:
71:74:64:c5:db:b4:0f:32:98:a5:c5:20:a5:91:6c:
07:7b:75:1c:fa:32:fd:67:b0:0b:e1:c3:c4:72:99:
fe:cf:a6:ea:54:b8:49:80:0a:80:32:48:62:89:3c:
09:1d:dd:df:5c:d5:35:3b:cb:63:51:d6:b7:03:44:
52:e5:72:1c:e2:ba:11:ba:8c:89:4b:5d:af:d0:4a:
23:ae:97:26:b9:81:73:ce:89:f2:e9:0e:02:44:8c:
a7:cf:52:34:b4:22:f3:90:5e:72:c4:38:3d:d6:f5:
95:ef:0f:b4:52:e3:3a:95:ca:5f:b1:9c:16:47:b1:
44:73:5c:4b:ef:78:f3:28:60:de:74:6e:54:b0:16:
91:d9:21:82:0c:bd:78:e4:6c:80:2e:99:12:94:cb:
ae:68:f1:1d:ad:8c:4d:12:c7:c2:ba:88:65:d8:55:
83:9c:fe:33:9f:25:8a:8c:36:79:59:0c:d5:e5:fc:
62:fc:00:98:22:2e:ba:2d:56:f3:1d:05:7d:36:ad:
80:70:f1:0c:ed:94:f6:83:01:05:b7:7e:6e:eb:39:
a9:c0:ae:08:8c:2b:43:04:cc:ab:25:43:95:18:02:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E7:48:14:A4:D1:CB:DB:93:2E:11:EC:28:40:90:47:08:1E:EF:23
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hedIFKTRy9uTLhHsKECQRwge7yM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.32.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:ba:e4:90:15:6d:01:71:c5:bd:de:48:1e:35:72:77:71:20:
02:00:ac:a8:90:ae:0e:b7:96:a5:8e:9d:65:d5:5e:f7:61:8f:
d8:69:e6:02:46:65:7e:a4:9f:25:ce:5b:c7:77:a8:06:65:65:
37:dc:1a:40:52:ce:47:2b:80:12:0b:a1:8c:69:44:b3:f7:00:
08:bc:60:77:4f:65:c8:26:b0:fa:4e:80:4c:af:35:ce:56:c8:
74:84:cf:e4:88:fd:6e:c1:f6:d1:13:27:f9:eb:14:b3:a0:61:
15:91:67:ab:5e:ac:94:ab:f5:b5:50:e3:e1:9a:21:23:8b:ab:
f2:ad:e8:e7:c7:58:4c:f1:51:f3:69:d7:d8:14:47:12:81:dd:
98:4c:e5:70:79:ca:d9:ad:07:2a:db:39:7c:42:02:bb:bb:00:
b3:31:33:e3:55:26:23:07:90:21:23:2f:ec:0a:ec:8a:cc:7a:
e8:3d:e7:56:09:11:98:bc:20:7d:d4:d8:9a:aa:77:6e:4d:66:
1e:16:96:89:d0:20:cf:2f:eb:b0:19:83:47:dd:c5:cb:18:ce:
28:1d:93:92:4f:66:6f:8d:5b:a6:2a:3b:da:25:df:5f:b5:4a:
f5:03:36:50:aa:7a:69:4f:6c:04:d0:f2:00:c6:69:64:12:96:
1f:db:f9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org