Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/siPYvxGrVTvB2yzxTVkRt7qm9bw.roa
File: siPYvxGrVTvB2yzxTVkRt7qm9bw.roa (raw, json)
Hash identifier: NzYkjhypHsxM9h8yXKq1cUekYG+zDe510SMmfyUCPwA=
Subject key identifier: B2:23:D8:BF:11:AB:55:3B:C1:DB:2C:F1:4D:59:11:B7:BA:A6:F5:BC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D64
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/siPYvxGrVTvB2yzxTVkRt7qm9bw.roa
Signing time: Fri 01 Sep 2023 10:14:45 +0000
ROA not before: Fri 01 Sep 2023 10:14:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 180.218.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7524 (0x1d64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:45 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B223D8BF11AB553BC1DB2CF14D5911B7BAA6F5BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:e5:28:9f:5f:3d:85:84:58:22:ab:9f:0d:
e5:3e:67:df:0d:0e:17:28:04:88:ac:7a:ac:4a:7d:
01:29:65:3b:4a:d2:04:81:00:75:f0:cc:30:bb:a7:
b5:e5:a2:d0:90:2e:e8:97:00:a6:62:bd:47:38:f7:
d0:10:7d:03:38:d2:2f:37:6f:7f:ac:6e:de:ec:5d:
89:7a:cc:4b:0b:4e:16:71:9e:eb:bb:c5:0c:89:d2:
ee:e7:6a:86:38:09:33:50:51:36:6e:b1:d6:3a:37:
2e:98:de:c6:ed:70:5c:1f:03:d2:fc:3e:14:aa:14:
b7:92:63:83:51:99:40:23:1f:f9:e9:90:9c:fb:97:
fb:de:8e:d6:62:b2:ac:5c:94:47:9e:bb:39:81:a1:
e0:ef:8e:c2:f5:db:68:45:0e:05:58:40:a8:dc:ca:
9a:29:d0:aa:9e:5b:e0:cb:96:8d:5b:77:a0:03:ea:
4b:66:92:ec:0f:ab:a6:90:e8:cc:78:8f:7a:ea:4b:
db:88:72:74:31:25:2c:f5:ac:93:8f:76:52:f7:c3:
ab:df:02:a6:25:cd:a5:7e:7f:fd:7f:d8:57:ee:31:
9e:55:e8:1a:b3:6e:70:19:ab:f9:1f:5c:41:c1:be:
04:bd:82:3f:23:64:43:ca:74:7b:32:79:17:37:a5:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:23:D8:BF:11:AB:55:3B:C1:DB:2C:F1:4D:59:11:B7:BA:A6:F5:BC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/siPYvxGrVTvB2yzxTVkRt7qm9bw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.208.0/21
Signature Algorithm: sha256WithRSAEncryption
01:22:f6:02:ae:1f:dc:9d:ba:ec:33:b5:68:4f:0f:24:56:ac:
7b:a6:17:17:06:02:7b:9b:c8:52:34:d0:f4:8e:0d:c2:bc:cf:
ed:61:8b:16:05:23:45:82:c0:78:58:c9:12:75:79:fe:f9:83:
d2:fb:2b:aa:b9:9d:9f:29:46:2b:f4:8f:d0:b2:df:01:f4:3b:
c9:64:99:02:96:0c:a8:41:27:94:5f:b8:66:68:64:62:a9:8f:
f2:59:5a:90:51:97:4e:73:d5:3e:c2:91:96:e5:20:9e:e0:f7:
81:8f:d4:94:33:dd:64:2d:5c:a7:43:e4:33:bd:89:bc:61:e4:
66:a5:d9:94:62:10:19:11:3d:6a:43:65:5b:c1:f5:a7:dc:a6:
78:a0:ed:96:d6:96:b9:84:bb:f9:b5:ec:c7:42:53:26:25:84:
8d:9a:79:89:41:a7:70:7f:4f:2b:93:47:65:4e:6d:f3:00:3b:
4d:67:15:29:20:dc:74:3f:42:6c:d0:d9:b4:80:0b:ec:b8:65:
f5:3a:a6:59:ea:81:a4:c1:81:6e:37:68:f8:99:0d:a1:c9:ce:
8b:0b:d6:7f:15:76:91:2f:b1:f2:5d:97:55:63:1c:95:6b:7d:
f6:41:cb:76:a0:56:c7:71:de:00:68:56:69:c2:b3:92:f0:8b:
c2:90:a8:fb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE0NDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEIyMjNEOEJGMTFBQjU1
M0JDMURCMkNGMTRENTkxMUI3QkFBNkY1QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvjOUon189hYRYIqufDeU+Z98NDhcoBIiseqxKfQEpZTtK0gSB
AHXwzDC7p7XlotCQLuiXAKZivUc499AQfQM40i83b3+sbt7sXYl6zEsLThZxnuu7
xQyJ0u7naoY4CTNQUTZusdY6Ny6Y3sbtcFwfA9L8PhSqFLeSY4NRmUAjH/npkJz7
l/vejtZisqxclEeeuzmBoeDvjsL122hFDgVYQKjcypop0KqeW+DLlo1bd6AD6ktm
kuwPq6aQ6Mx4j3rqS9uIcnQxJSz1rJOPdlL3w6vfAqYlzaV+f/1/2FfuMZ5V6Bqz
bnAZq/kfXEHBvgS9gj8jZEPKdHsyeRc3peQFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUsiPYvxGrVTvB2yzxTVkRt7qm9bwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3NpUFl2eEdyVlR2QjJ5enhU
VmtSdDdxbTlidy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2tAwDQYJKoZIhvcNAQELBQADggEBAAEi9gKuH9yduuwztWhPDyRWrHumFxcGAnub
yFI00PSODcK8z+1hixYFI0WCwHhYyRJ1ef75g9L7K6q5nZ8pRiv0j9Cy3wH0O8lk
mQKWDKhBJ5RfuGZoZGKpj/JZWpBRl05z1T7CkZblIJ7g94GP1JQz3WQtXKdD5DO9
ibxh5Gal2ZRiEBkRPWpDZVvB9afcpnig7ZbWlrmEu/m17MdCUyYlhI2aeYlBp3B/
TyuTR2VObfMAO01nFSkg3HQ/QmzQ2bSAC+y4ZfU6plnqgaTBgW43aPiZDaHJzosL
1n8VdpEvsfJdl1VjHJVrffZBy3agVsdx3gBoVmnCs5Lwi8KQqPs=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org