Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hj4ayBkCPxJCxFGHHJtWpeXMsX8.roa
File: hj4ayBkCPxJCxFGHHJtWpeXMsX8.roa (raw, json)
Hash identifier: qroMxX2uGRIssVn5hgqHrBPXQmabs5HQF3iA3s6zJ5E=
Subject key identifier: 86:3E:1A:C8:19:02:3F:12:42:C4:51:87:1C:9B:56:A5:E5:CC:B1:7F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D77
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hj4ayBkCPxJCxFGHHJtWpeXMsX8.roa
Signing time: Fri 01 Sep 2023 10:14:52 +0000
ROA not before: Fri 01 Sep 2023 10:14:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7543 (0x1d77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=863E1AC819023F1242C451871C9B56A5E5CCB17F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:42:fd:4c:9f:f2:0c:d5:7c:7f:26:38:48:
d2:d4:b5:21:40:a7:da:0e:cc:ba:ff:c5:e2:12:3f:
13:94:2a:3e:83:86:67:06:13:e3:1d:d0:b5:54:93:
9d:fe:57:bf:10:e1:30:76:91:86:8a:96:54:ea:cc:
78:16:ec:e4:b7:56:53:f6:b2:b1:1b:b5:b6:11:b9:
8b:35:08:24:88:97:dd:a4:fd:c9:a0:47:b6:c5:46:
96:b5:be:65:74:af:d5:23:1b:1b:f5:3e:bc:99:29:
27:eb:34:23:08:bd:8c:2c:8d:50:59:d2:2a:a8:bc:
ed:67:57:cf:78:6d:ec:e0:e5:e8:07:79:a1:1a:70:
48:82:60:c2:fa:49:61:e2:27:3c:a8:42:42:03:34:
0e:e2:bc:40:71:70:aa:ef:56:14:8d:d3:6e:14:40:
a9:fa:44:69:f8:f3:dd:af:f2:d6:6e:07:a7:23:fa:
c2:e8:35:75:bf:67:d2:88:9c:50:8e:28:5b:83:6f:
89:d4:da:3e:0d:a2:8b:6b:92:6b:d4:ea:1b:d8:3e:
08:55:f9:31:8c:07:f8:59:30:61:1f:52:e2:6a:4e:
05:a3:6d:63:e1:42:83:ba:e1:00:3d:1e:79:cf:59:
de:d7:99:23:79:d1:b1:a9:89:b2:71:8f:98:a7:5d:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3E:1A:C8:19:02:3F:12:42:C4:51:87:1C:9B:56:A5:E5:CC:B1:7F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hj4ayBkCPxJCxFGHHJtWpeXMsX8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.64.0/20
Signature Algorithm: sha256WithRSAEncryption
43:79:49:11:76:61:d1:aa:14:4c:77:76:92:8e:27:dc:3c:79:
90:2e:cd:9f:dd:5e:c3:f6:7f:b8:76:68:cc:7b:df:a2:df:0b:
8f:80:3d:52:db:2e:15:38:49:61:88:3f:3c:1b:15:df:be:2c:
ec:70:2d:54:ac:e3:ae:38:4a:fc:3a:1a:98:71:ce:47:95:d4:
7d:b0:fc:6f:7a:72:b7:8a:51:26:70:2d:8e:3a:ec:07:b7:24:
14:70:cf:ed:96:42:b5:28:14:38:58:61:6d:ed:50:c2:f3:42:
a0:7a:b8:dd:93:ba:31:37:de:df:96:96:15:4f:48:dd:70:9a:
37:04:a0:02:1d:f4:15:af:17:93:bc:c0:50:e2:d2:2a:3a:76:
e5:ea:19:9d:71:7f:f0:14:ca:2a:4a:63:1f:b0:2d:ec:68:5c:
4f:c7:50:3a:95:d7:36:cf:38:83:57:26:d6:de:b4:3f:7f:a1:
a9:7a:79:e4:71:f1:f7:f9:85:bf:ab:ca:98:ef:05:c7:03:39:
5e:c3:08:82:68:9e:f1:b2:4a:39:31:2d:3f:40:25:11:be:83:
ec:5f:b3:65:dc:a3:29:22:89:ad:4a:4b:a7:6a:1a:c1:83:c6:
9d:12:3a:ad:17:f6:45:75:fe:ed:09:75:9e:b0:ac:4b:c1:72:
19:2e:71:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org