Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nVO2ymbrN25Afe7vdpjhf0NNhjk.roa
File: nVO2ymbrN25Afe7vdpjhf0NNhjk.roa (raw, json)
Hash identifier: MUYqOwQWwMtRDW8Ey3TFMlc3lgiqUZ+yE30p2ScOz0Y=
Subject key identifier: 9D:53:B6:CA:66:EB:37:6E:40:7D:EE:EF:76:98:E1:7F:43:4D:86:39
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E21
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nVO2ymbrN25Afe7vdpjhf0NNhjk.roa
Signing time: Fri 01 Sep 2023 10:15:42 +0000
ROA not before: Fri 01 Sep 2023 10:15:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.159.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7713 (0x1e21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9D53B6CA66EB376E407DEEEF7698E17F434D8639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:45:85:78:02:39:b9:4e:d3:b8:e9:ad:47:26:
47:35:2a:f1:a0:0a:a1:eb:ab:ac:fa:86:88:cc:63:
4d:04:87:8e:25:2d:dc:ad:26:f0:9f:d1:4e:d8:83:
b9:65:f5:fc:44:68:3a:cc:55:ff:c0:4f:d8:c6:02:
e6:ab:9d:b9:bc:5c:77:68:32:0b:d0:62:c9:dc:70:
7c:63:a1:c4:04:ce:8c:e0:3c:99:67:9b:e4:52:a6:
71:b9:9e:a0:0d:80:84:f9:c5:de:f9:4c:e0:88:65:
8f:d0:0d:6e:2a:49:6d:fc:ec:af:29:6c:3c:21:f6:
0f:e6:4c:70:77:92:b4:04:e0:26:6c:5b:ee:b5:ee:
8e:26:30:79:28:3e:b6:c6:3b:5e:1e:b5:1f:22:20:
c9:ed:1b:0f:43:83:7d:bd:4f:6c:1f:6d:08:bc:56:
22:2c:1f:a5:e1:46:db:dc:8e:42:00:47:ba:83:c4:
14:0d:7e:c9:f8:6c:eb:80:9d:bb:34:c7:cb:cb:37:
dc:99:0a:bf:bf:63:c3:e6:b4:34:e1:75:b8:00:f8:
54:07:2a:aa:dc:bb:17:29:90:cb:ca:75:b3:05:4e:
e6:a2:bc:f1:08:d2:92:43:49:58:ac:d4:dd:c8:b3:
ba:2d:fe:24:06:6b:5d:2b:bd:70:16:6e:53:6e:bd:
86:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:53:B6:CA:66:EB:37:6E:40:7D:EE:EF:76:98:E1:7F:43:4D:86:39
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nVO2ymbrN25Afe7vdpjhf0NNhjk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.16.0/20
Signature Algorithm: sha256WithRSAEncryption
23:e1:2c:1b:73:17:78:78:2d:43:79:e3:61:c2:6d:e0:86:5e:
bc:e6:af:4c:5d:03:12:bb:b3:48:e3:8b:1c:83:dc:69:ae:c2:
af:ef:5c:28:25:10:45:24:05:95:61:18:e3:ad:94:43:a1:73:
30:73:f0:5e:f1:3d:cd:8f:70:c4:23:c4:60:2b:f7:2e:e1:ed:
6a:35:00:27:ca:d9:65:8b:cc:a9:d7:7b:41:df:af:da:2f:7f:
17:70:61:4a:69:e2:0a:44:36:08:13:70:6b:f8:ae:bf:7b:34:
83:83:9b:e2:84:3f:e7:e1:bb:3b:55:31:45:71:3c:35:7a:ca:
69:29:65:4a:40:17:ab:3f:d7:3b:67:ce:4b:a9:c7:46:81:74:
6c:02:9f:1a:5a:c2:71:c4:b9:d3:b9:7d:21:3a:76:21:ef:93:
e9:cb:77:ca:92:a5:28:a9:92:b2:52:17:22:4d:f7:5e:01:54:
4d:34:59:e1:2a:04:ab:40:e0:40:35:03:eb:b0:5e:2c:ef:95:
4f:a1:28:fb:63:b7:0f:44:c6:8b:66:51:21:fb:55:16:93:d8:
90:eb:b2:d3:f5:98:40:80:e6:dc:60:58:34:7a:6d:fe:9d:12:
28:e6:3d:81:9e:7f:1c:f6:51:aa:ae:c3:b8:94:d9:28:fd:f2:
09:8c:bf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org