Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/metIICNtFoEYpC7iCjUOBwlMhkU.roa
File: metIICNtFoEYpC7iCjUOBwlMhkU.roa (raw, json)
Hash identifier: jL9rhcviFEShCk5yPTS8EAyY3qaMmN1Ti5UbZb092n8=
Subject key identifier: 99:EB:48:20:23:6D:16:81:18:A4:2E:E2:0A:35:0E:07:09:4C:86:45
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E16
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/metIICNtFoEYpC7iCjUOBwlMhkU.roa
Signing time: Fri 01 Sep 2023 10:15:39 +0000
ROA not before: Fri 01 Sep 2023 10:15:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7702 (0x1e16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=99EB4820236D168118A42EE20A350E07094C8645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:26:4d:59:15:f1:d1:b7:8c:35:38:53:cf:
bf:98:11:2a:7f:2f:68:2a:0e:00:dc:85:f4:48:d2:
31:bf:2c:cd:ea:39:89:c8:65:5e:e8:6a:01:22:db:
83:82:91:43:e6:50:a1:f2:00:65:b2:fa:52:e4:40:
fb:ca:2d:74:93:1e:94:1e:f5:ae:dc:10:3c:c9:23:
0f:d0:32:4c:a4:0b:8a:17:a2:be:ab:b9:15:e8:aa:
98:24:82:a8:19:de:32:1c:46:1f:a1:12:02:0a:27:
84:58:69:66:ca:1c:fe:6e:e2:fb:dd:89:21:43:9e:
6e:bb:e5:3d:f8:0c:ca:c0:d9:8e:2e:1d:42:e8:2e:
df:c3:25:51:25:ab:39:7f:56:f6:28:01:77:49:f9:
e7:d1:e0:d2:0a:d8:d4:f3:d6:3e:ff:1e:37:20:41:
bb:cf:5e:04:f5:c2:c6:ba:01:7b:5e:af:e5:50:1f:
a1:6a:80:7e:d8:5c:e5:0a:1c:ed:40:5e:14:8d:84:
f5:84:90:fc:91:02:c0:19:83:ac:72:65:a3:5a:8d:
64:55:c7:a7:1c:59:27:5d:c6:c3:97:8e:b8:ee:6a:
03:5e:f9:45:84:50:97:2a:ab:76:b3:ac:89:3c:b6:
0e:ea:88:eb:81:93:7d:23:f0:8f:8e:f2:ad:45:26:
53:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EB:48:20:23:6D:16:81:18:A4:2E:E2:0A:35:0E:07:09:4C:86:45
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/metIICNtFoEYpC7iCjUOBwlMhkU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.144.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:3f:ce:39:a8:6f:58:dc:8b:a3:28:44:d7:d9:51:7c:14:f5:
b0:34:0a:1c:4c:24:e9:84:a3:13:66:44:98:22:37:a6:47:1b:
d3:d2:b4:16:dc:28:5d:24:96:8b:39:77:0c:99:2f:09:f1:8a:
89:fd:bc:6f:fd:68:c5:09:88:a3:9a:4e:44:eb:7e:6f:23:0d:
92:19:a8:8e:3b:62:75:d9:b9:bf:5e:1f:95:29:a2:26:7f:73:
5f:b7:02:3a:df:78:e4:ca:a6:04:33:c4:58:40:44:80:84:f8:
f8:1f:68:f8:f2:64:7b:ed:95:a9:76:db:35:55:12:4d:a6:25:
62:e3:51:d4:6d:8a:9d:d8:d6:cc:ed:aa:41:2e:50:db:77:0e:
dd:fb:f9:64:1a:69:a8:a6:a9:5c:0b:f6:f0:9c:f3:71:a8:fd:
0a:ba:48:4e:c5:88:ce:62:a1:63:95:20:9c:5d:02:9f:37:36:
c1:78:c2:3d:30:4a:52:64:e9:5a:19:88:25:e6:bf:48:27:b1:
a6:87:b8:30:6a:40:3d:e0:d9:ad:22:cc:ee:cb:89:59:06:25:
dc:91:64:0a:5e:0f:b7:a4:26:b3:a6:f2:46:36:12:ff:6d:4d:
32:75:b7:c2:3d:83:33:84:33:aa:04:69:2a:f3:1f:fc:b8:19:
39:ee:ac:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org