Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/noaXbhULvLECTypowo2VClG6WlY.roa
File: noaXbhULvLECTypowo2VClG6WlY.roa (raw, json)
Hash identifier: 2wt3queLdnNiy7FPTPbPt/if45PSG6dp7z4NVj7HO3E=
Subject key identifier: 9E:86:97:6E:15:0B:BC:B1:02:4F:2A:68:C2:8D:95:0A:51:BA:5A:56
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E5C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/noaXbhULvLECTypowo2VClG6WlY.roa
Signing time: Fri 01 Sep 2023 10:15:56 +0000
ROA not before: Fri 01 Sep 2023 10:15:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7772 (0x1e5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:56 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9E86976E150BBCB1024F2A68C28D950A51BA5A56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1e:2f:3a:c6:68:64:ef:09:48:ca:1a:15:eb:
9c:b0:6e:0c:74:86:a9:98:9c:4e:ce:b1:5e:aa:3d:
b5:a9:b4:93:b0:0f:a2:34:16:4b:74:54:2d:eb:3a:
99:75:1b:3a:17:f1:b3:a5:e4:82:91:d0:fa:97:3d:
45:c3:eb:e9:24:e2:bc:7f:f0:2c:86:e8:29:a4:28:
88:c2:2b:fa:5d:25:7d:f5:dc:f9:61:5b:cf:7f:ff:
39:0f:81:0e:0f:50:0b:57:93:7f:19:69:4a:bc:e2:
f2:aa:80:16:28:b8:71:95:9c:6a:9b:b7:3f:b6:4f:
2f:a7:c4:79:d4:81:98:11:9b:45:67:8b:5a:9f:f8:
ce:76:16:9d:00:30:b5:5a:e5:3b:23:cb:78:b3:a4:
55:49:ce:2f:f4:a8:ea:8a:96:ff:b8:93:6c:f1:d4:
49:8a:72:07:7e:28:3e:5a:47:f5:13:c7:7e:4d:54:
9f:3b:ce:b7:cc:0f:96:6d:1c:40:46:3d:47:1c:ec:
60:ea:e4:2b:f2:42:2f:37:9e:79:1c:59:4b:cc:9e:
fa:e5:1e:70:db:8f:67:2f:e8:9c:6a:21:6b:e1:6a:
87:60:af:93:34:7a:dc:db:c4:cb:67:e0:6a:91:af:
84:87:63:6a:38:37:58:9d:4c:2e:b6:90:0a:49:fc:
31:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:86:97:6E:15:0B:BC:B1:02:4F:2A:68:C2:8D:95:0A:51:BA:5A:56
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/noaXbhULvLECTypowo2VClG6WlY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.176.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:46:6e:48:4b:b8:23:f6:56:38:6a:95:de:a7:43:bb:35:c9:
8d:70:84:fb:1e:6e:53:a6:2c:4f:c7:d1:5c:65:bd:e7:36:73:
03:bc:3d:35:fc:93:67:94:07:c1:05:17:d2:ca:6c:1d:6c:6e:
b4:b5:d4:c1:04:d7:9b:6f:03:e9:e8:49:e8:f8:0c:93:70:d1:
67:ac:c5:9b:1a:d5:c2:07:fe:81:c5:af:fe:c0:b8:71:2d:9a:
73:9c:a5:51:a1:d0:0b:5f:ff:ad:71:c5:83:72:e6:4c:b8:7c:
6b:0b:f4:87:9c:8c:14:0c:08:45:54:ee:15:fe:62:ba:c9:e2:
8f:ba:eb:28:c6:ec:03:28:76:4a:70:58:11:f2:45:93:8d:05:
62:3f:84:d2:59:85:f5:54:a7:37:37:95:54:7d:e1:ba:fe:b5:
9c:72:7d:7e:05:40:62:e6:a6:07:de:99:02:78:c9:49:01:bc:
16:26:5d:fb:82:75:58:ac:99:c2:f9:51:77:08:5b:fb:39:23:
38:fd:81:ea:0d:30:71:7b:a8:62:c1:00:77:c3:3c:54:4a:71:
66:62:0c:f1:0b:01:22:02:41:bd:71:82:7c:ca:dd:33:19:24:
9a:a8:c1:f0:78:1c:6e:5d:23:e2:bc:f4:01:50:14:b6:a5:78:
3b:0b:f7:58
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHlwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1NTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlFODY5NzZFMTUwQkJD
QjEwMjRGMkE2OEMyOEQ5NTBBNTFCQTVBNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeHi86xmhk7wlIyhoV65ywbgx0hqmYnE7OsV6qPbWptJOwD6I0
Fkt0VC3rOpl1GzoX8bOl5IKR0PqXPUXD6+kk4rx/8CyG6CmkKIjCK/pdJX313Plh
W89//zkPgQ4PUAtXk38ZaUq84vKqgBYouHGVnGqbtz+2Ty+nxHnUgZgRm0Vni1qf
+M52Fp0AMLVa5Tsjy3izpFVJzi/0qOqKlv+4k2zx1EmKcgd+KD5aR/UTx35NVJ87
zrfMD5ZtHEBGPUcc7GDq5CvyQi83nnkcWUvMnvrlHnDbj2cv6JxqIWvhaodgr5M0
etzbxMtn4GqRr4SHY2o4N1idTC62kApJ/DHhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUnoaXbhULvLECTypowo2VClG6WlYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL25vYVhiaFVMdkxFQ1R5cG93
bzJWQ2xHNldsWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
nrAwDQYJKoZIhvcNAQELBQADggEBAA9GbkhLuCP2Vjhqld6nQ7s1yY1whPseblOm
LE/H0Vxlvec2cwO8PTX8k2eUB8EFF9LKbB1sbrS11MEE15tvA+noSej4DJNw0Wes
xZsa1cIH/oHFr/7AuHEtmnOcpVGh0Atf/61xxYNy5ky4fGsL9IecjBQMCEVU7hX+
YrrJ4o+66yjG7AModkpwWBHyRZONBWI/hNJZhfVUpzc3lVR94br+tZxyfX4FQGLm
pgfemQJ4yUkBvBYmXfuCdVismcL5UXcIW/s5Izj9geoNMHF7qGLBAHfDPFRKcWZi
DPELASICQb1xgnzK3TMZJJqowfB4HG5dI+K89AFQFLaleDsL91g=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org