Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o4HgJnzieJCKErKQDrjOaUoUi1k.roa
File: o4HgJnzieJCKErKQDrjOaUoUi1k.roa (raw, json)
Hash identifier: yDFKdFmQ3GWFkN1gHjpXroOPpcEdVUwodloozZtGN+o=
Subject key identifier: A3:81:E0:26:7C:E2:78:90:8A:12:B2:90:0E:B8:CE:69:4A:14:8B:59
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D6C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o4HgJnzieJCKErKQDrjOaUoUi1k.roa
Signing time: Fri 01 Sep 2023 10:14:48 +0000
ROA not before: Fri 01 Sep 2023 10:14:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.159.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7532 (0x1d6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A381E0267CE278908A12B2900EB8CE694A148B59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:c6:20:e1:f8:e7:09:1f:2a:58:c9:ab:3d:
05:2e:de:ba:d5:ee:65:45:ba:62:d3:57:02:3d:fe:
08:71:56:4b:91:b8:b6:2e:24:64:98:6d:95:24:a8:
78:f4:3b:6b:df:fe:2b:2e:03:70:3b:22:54:c8:49:
ac:fb:ff:8f:d6:02:6b:46:bd:67:51:8f:5e:77:97:
78:ac:7e:48:60:f1:54:8c:42:19:65:d1:33:90:90:
d9:98:93:e9:3a:b2:93:ac:1e:62:8d:98:c4:65:16:
29:c1:c2:e2:54:f7:f7:91:10:cf:0b:3a:1b:a2:1c:
76:1e:5c:ed:f3:06:81:f9:05:50:a3:36:d5:a2:52:
0e:7a:3b:eb:1c:00:17:c7:dc:44:14:27:c7:35:71:
da:f1:3b:f5:af:ac:1c:65:b6:fb:84:c0:75:96:e7:
a3:81:2a:51:cf:6a:e3:dc:79:1c:b6:84:b0:55:7a:
e8:78:e2:11:96:cd:2b:dd:b7:5a:6c:1c:0d:94:21:
0e:54:b7:91:3c:e0:21:88:85:5d:53:c7:7d:52:93:
6c:6c:86:41:de:58:60:b4:f8:bf:ab:12:b2:4e:70:
54:ae:02:c1:9b:c7:a7:aa:b3:08:96:f5:3b:aa:66:
4d:5a:44:3e:cf:60:26:91:5e:70:b6:2e:db:ab:f9:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:81:E0:26:7C:E2:78:90:8A:12:B2:90:0E:B8:CE:69:4A:14:8B:59
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o4HgJnzieJCKErKQDrjOaUoUi1k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.232.0/21
Signature Algorithm: sha256WithRSAEncryption
47:de:9e:c3:30:7d:65:89:35:20:f6:11:46:8f:ee:af:9c:da:
ee:25:fc:fc:94:a8:9c:7f:15:f3:85:95:ec:11:54:12:21:ca:
08:2e:f0:02:48:35:99:00:56:1c:2f:34:06:27:b9:24:8f:ec:
16:dd:89:7e:1d:b7:5d:f1:bc:ac:8d:ba:81:fd:4a:34:8f:c6:
43:41:1d:e7:ea:b4:69:c2:79:e6:04:d7:7a:3d:50:01:ff:fb:
2d:b6:32:95:4e:12:2c:54:38:75:fd:c6:36:da:bc:42:0f:1f:
ac:11:12:5d:2a:d9:dd:a0:56:c8:52:82:03:f2:65:36:ed:a2:
59:1b:f9:c1:32:bf:40:ec:bb:c5:74:1d:80:77:2b:b2:7d:1f:
5c:e8:0c:55:f2:a4:7a:10:a9:68:08:4f:62:14:75:5e:48:f9:
69:bd:69:e4:1f:14:2e:45:a9:39:95:73:12:dc:92:f3:71:00:
2d:f4:1b:a3:91:b6:37:d4:9b:76:f0:1c:ff:6b:08:b1:de:61:
81:f9:ae:1f:50:50:0f:0e:5f:84:00:f7:4e:77:57:c2:87:c4:
07:02:d5:02:57:d0:24:3b:d8:91:0d:b2:ab:fb:78:81:1b:46:
49:bc:a6:56:37:b2:bb:ab:54:3a:0a:e0:20:df:65:b8:62:7a:
bc:a0:86:eb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE0NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEEzODFFMDI2N0NFMjc4
OTA4QTEyQjI5MDBFQjhDRTY5NEExNDhCNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDR3cYg4fjnCR8qWMmrPQUu3rrV7mVFumLTVwI9/ghxVkuRuLYu
JGSYbZUkqHj0O2vf/isuA3A7IlTISaz7/4/WAmtGvWdRj153l3isfkhg8VSMQhll
0TOQkNmYk+k6spOsHmKNmMRlFinBwuJU9/eREM8LOhuiHHYeXO3zBoH5BVCjNtWi
Ug56O+scABfH3EQUJ8c1cdrxO/WvrBxltvuEwHWW56OBKlHPauPceRy2hLBVeuh4
4hGWzSvdt1psHA2UIQ5Ut5E84CGIhV1Tx31Sk2xshkHeWGC0+L+rErJOcFSuAsGb
x6eqswiW9TuqZk1aRD7PYCaRXnC2Ltur+VqJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUo4HgJnzieJCKErKQDrjOaUoUi1kwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL280SGdKbnppZUpDS0VyS1FE
cmpPYVVvVWkxay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
n+gwDQYJKoZIhvcNAQELBQADggEBAEfensMwfWWJNSD2EUaP7q+c2u4l/PyUqJx/
FfOFlewRVBIhyggu8AJINZkAVhwvNAYnuSSP7BbdiX4dt13xvKyNuoH9SjSPxkNB
HefqtGnCeeYE13o9UAH/+y22MpVOEixUOHX9xjbavEIPH6wREl0q2d2gVshSggPy
ZTbtolkb+cEyv0Dsu8V0HYB3K7J9H1zoDFXypHoQqWgIT2IUdV5I+Wm9aeQfFC5F
qTmVcxLckvNxAC30G6ORtjfUm3bwHP9rCLHeYYH5rh9QUA8OX4QA9053V8KHxAcC
1QJX0CQ72JENsqv7eIEbRkm8plY3srurVDoK4CDfZbhieryghus=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org