Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tR_MAQ1y2bnEJJO9BXReMAb8jnI.roa
File: tR_MAQ1y2bnEJJO9BXReMAb8jnI.roa (raw, json)
Hash identifier: MDXjzhhokPsIKJHGPH3eOyiDJ+j68US3H/1QNGH2Gp0=
Subject key identifier: B5:1F:CC:01:0D:72:D9:B9:C4:24:93:BD:05:74:5E:30:06:FC:8E:72
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DCB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tR_MAQ1y2bnEJJO9BXReMAb8jnI.roa
Signing time: Fri 01 Sep 2023 10:15:18 +0000
ROA not before: Fri 01 Sep 2023 10:15:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7627 (0x1dcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B51FCC010D72D9B9C42493BD05745E3006FC8E72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:68:47:ed:aa:39:87:5f:2b:4e:54:3f:54:
f6:8d:c5:5d:37:b9:0a:39:1b:17:bf:ee:60:1b:d7:
df:4a:3b:35:6f:09:0b:19:60:09:5d:08:07:9a:c3:
16:50:8f:8d:50:3c:48:fb:f4:58:b0:be:2c:c5:f5:
68:22:df:a9:0c:93:b4:fd:23:f0:77:46:78:d6:f0:
a5:fe:62:e8:90:84:52:40:13:56:44:d9:c4:30:ae:
f5:ce:59:dc:52:95:04:a0:1f:ff:2a:06:d5:20:25:
24:98:f0:23:2a:75:f3:00:c0:86:51:fb:98:bc:0a:
4a:b6:c3:4a:94:6f:37:04:c8:c1:74:4d:06:6e:38:
ed:48:2e:90:70:18:39:cc:6c:e2:c5:80:5a:fa:77:
26:29:5f:7d:9a:c0:94:40:35:42:2a:fc:a8:05:80:
c0:da:62:ff:18:ff:a6:50:cf:b0:26:e2:9e:69:97:
90:08:e8:8c:51:02:9f:30:03:09:3f:05:2d:64:09:
5a:e5:8e:10:e6:f6:85:5d:b1:51:23:ef:32:20:12:
26:d4:cd:9f:b9:7c:cf:41:2b:65:54:50:86:ba:fe:
ac:94:54:d5:cd:00:f1:7e:dc:6a:14:93:93:99:14:
ca:d2:bb:60:10:e8:42:f1:49:75:43:2e:5d:20:87:
5d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1F:CC:01:0D:72:D9:B9:C4:24:93:BD:05:74:5E:30:06:FC:8E:72
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tR_MAQ1y2bnEJJO9BXReMAb8jnI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.144.0/24
Signature Algorithm: sha256WithRSAEncryption
45:23:ca:c2:a0:e2:e9:7d:eb:03:05:69:0d:d7:9a:cf:d3:dc:
c2:ef:30:f2:a3:95:48:22:b1:2b:65:b4:db:ca:3b:0a:ae:93:
c6:7d:e4:ec:f6:9a:26:68:d9:33:47:14:2d:44:27:20:f3:1d:
e2:a2:d4:42:28:46:41:89:ae:2b:ba:38:fe:1f:39:a4:d6:1f:
96:e0:7c:0a:78:05:db:7b:36:1f:3f:96:10:74:a8:35:01:5a:
6b:17:dd:26:75:e2:fc:5c:d3:20:73:a2:6f:82:a3:bd:67:e3:
d7:6c:11:4b:9c:cb:18:a3:45:4d:c7:93:01:65:1f:ad:fe:d3:
d1:c3:a7:c0:b1:b0:34:5e:3d:0e:13:90:e7:c9:f4:d0:af:5b:
4c:4f:87:69:9f:9c:ec:4e:34:bf:d5:05:02:19:1b:3e:47:3c:
6c:01:87:27:3f:ef:3a:68:d7:1d:33:58:3e:2a:79:23:3e:64:
34:7e:fa:9e:8f:41:e7:ee:b6:a9:c2:f1:81:f7:2f:21:1a:14:
81:f1:5f:bd:29:3c:dd:1a:c3:84:7b:92:d1:65:41:8d:37:46:
48:bd:8c:c1:2a:b1:21:b9:9a:bb:e7:5b:52:b9:2c:9b:d5:17:
c6:d2:67:8e:3e:0a:1f:e9:ae:37:4f:b7:f2:08:d5:ab:1b:b3:
d5:82:ab:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org