Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oqCiYA0OHCD9ek2BVD97_5gw_VY.roa
File: oqCiYA0OHCD9ek2BVD97_5gw_VY.roa (raw, json)
Hash identifier: wptTGawh9i16vmt/y0Y7rnWtVzkXNCs4CiSvbcMJEhM=
Subject key identifier: A2:A0:A2:60:0D:0E:1C:20:FD:7A:4D:81:54:3F:7B:FF:98:30:FD:56
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D75
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oqCiYA0OHCD9ek2BVD97_5gw_VY.roa
Signing time: Fri 01 Sep 2023 10:14:50 +0000
ROA not before: Fri 01 Sep 2023 10:14:50 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 61.60.208.0/20 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7541 (0x1d75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:50 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A2A0A2600D0E1C20FD7A4D81543F7BFF9830FD56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4a:23:35:9d:e7:0f:af:22:44:94:26:93:1f:
9c:72:c8:58:ca:c2:87:be:73:8e:15:00:9e:b3:a4:
df:cf:8d:39:aa:fa:86:f3:d5:0d:95:6f:65:a3:f8:
9d:83:f9:de:cd:58:cc:e1:f9:27:0f:8a:2c:a7:ea:
ea:2d:cd:61:b4:6b:18:29:1b:17:9a:15:91:aa:50:
59:06:9d:4b:98:96:a8:34:eb:18:17:5f:41:00:b7:
f8:d2:83:8f:3e:5c:b7:da:e3:ee:c1:62:88:75:e2:
95:46:e5:f1:fa:68:f6:c9:7c:1b:ee:14:fe:4a:6b:
4b:02:5c:1f:c8:cf:1b:94:86:06:da:c6:b1:1d:cd:
5c:49:06:b1:0b:64:52:52:1c:36:44:c6:90:92:1f:
5b:8d:f4:2d:3f:1c:51:21:7f:29:c8:a7:43:0f:7d:
e8:02:df:49:37:61:9d:9d:05:4f:da:4c:4e:c6:6b:
65:28:a4:17:00:4b:71:85:2b:ac:8d:8b:b3:fc:55:
8c:7a:fb:0f:6f:18:f8:e4:8f:db:59:ae:24:b2:57:
d5:ba:7c:d2:d5:7a:36:8b:a8:4c:7c:3a:18:b2:59:
b6:48:64:c4:40:6c:eb:d5:8e:e3:04:97:4f:49:0f:
05:5b:d2:87:c7:68:f0:4a:a0:db:14:85:6c:c5:f9:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A0:A2:60:0D:0E:1C:20:FD:7A:4D:81:54:3F:7B:FF:98:30:FD:56
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oqCiYA0OHCD9ek2BVD97_5gw_VY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.208.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:04:b6:7a:21:dd:fd:ca:ae:f7:e9:10:d8:f7:30:43:ca:90:
35:70:8b:79:bd:ed:ff:e1:b5:ef:3a:0b:22:b4:1a:2f:f7:35:
f7:99:5a:c0:23:31:ea:50:9c:30:77:e4:30:b4:e5:0c:63:27:
80:10:a0:d3:41:44:f4:4b:46:ac:0b:d9:8b:ab:c3:ab:35:a2:
0a:9b:4f:ee:f4:a8:de:29:8b:43:90:26:05:a5:fe:f0:6f:4f:
fc:4d:16:a8:0f:1b:db:e4:dd:d9:bb:c4:e0:8a:34:8e:43:73:
a4:93:d4:00:5b:a2:95:18:2d:1e:df:b5:91:a5:99:7b:7c:63:
30:3e:5c:51:96:51:6c:f4:f5:cf:24:64:cb:a5:79:a8:33:02:
d5:aa:9e:fd:aa:ee:d1:6c:ab:1d:c2:1b:43:83:ea:43:59:c4:
80:e2:49:f0:7f:6a:95:2a:f9:b2:84:dc:35:64:b8:34:14:75:
24:de:dd:20:dc:27:26:78:db:3c:51:fd:83:b4:4c:f7:dd:24:
4b:f4:28:a6:28:93:5c:b1:4b:7c:6c:6f:ca:de:ad:8e:88:97:
7a:a9:a7:1b:45:94:80:40:7a:02:b9:00:3e:c6:91:b2:e5:30:
98:ff:c1:93:59:f1:8e:33:60:8e:e3:0e:d5:14:6f:be:85:ed:
34:8b:b5:80
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHXUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE0NTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEEyQTBBMjYwMEQwRTFD
MjBGRDdBNEQ4MTU0M0Y3QkZGOTgzMEZENTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgSiM1necPryJElCaTH5xyyFjKwoe+c44VAJ6zpN/PjTmq+obz
1Q2Vb2Wj+J2D+d7NWMzh+ScPiiyn6uotzWG0axgpGxeaFZGqUFkGnUuYlqg06xgX
X0EAt/jSg48+XLfa4+7BYoh14pVG5fH6aPbJfBvuFP5Ka0sCXB/IzxuUhgbaxrEd
zVxJBrELZFJSHDZExpCSH1uN9C0/HFEhfynIp0MPfegC30k3YZ2dBU/aTE7Ga2Uo
pBcAS3GFK6yNi7P8VYx6+w9vGPjkj9tZriSyV9W6fNLVejaLqEx8OhiyWbZIZMRA
bOvVjuMEl09JDwVb0ofHaPBKoNsUhWzF+Wt1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUoqCiYA0OHCD9ek2BVD97/5gw/VYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL29xQ2lZQTBPSENEOWVrMkJW
RDk3XzVnd19WWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9
PNAwDQYJKoZIhvcNAQELBQADggEBAH4Etnoh3f3KrvfpENj3MEPKkDVwi3m97f/h
te86CyK0Gi/3NfeZWsAjMepQnDB35DC05QxjJ4AQoNNBRPRLRqwL2Yurw6s1ogqb
T+70qN4pi0OQJgWl/vBvT/xNFqgPG9vk3dm7xOCKNI5Dc6ST1ABbopUYLR7ftZGl
mXt8YzA+XFGWUWz09c8kZMuleagzAtWqnv2q7tFsqx3CG0OD6kNZxIDiSfB/apUq
+bKE3DVkuDQUdSTe3SDcJyZ42zxR/YO0TPfdJEv0KKYok1yxS3xsb8rerY6Il3qp
pxtFlIBAegK5AD7GkbLlMJj/wZNZ8Y4zYI7jDtUUb76F7TSLtYA=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org