Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tx_yb7ZkGREv_4WYTrTF3t9w2eI.roa
File: tx_yb7ZkGREv_4WYTrTF3t9w2eI.roa (raw, json)
Hash identifier: 1Z/t3CU30uTwoa6aqkcTjF5k/IugGxJctVT2qerj8nA=
Subject key identifier: B7:1F:F2:6F:B6:64:19:11:2F:FF:85:98:4E:B4:C5:DE:DF:70:D9:E2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DCE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tx_yb7ZkGREv_4WYTrTF3t9w2eI.roa
Signing time: Fri 01 Sep 2023 10:15:19 +0000
ROA not before: Fri 01 Sep 2023 10:15:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 49.159.218.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7630 (0x1dce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B71FF26FB66419112FFF85984EB4C5DEDF70D9E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:8a:ac:cc:6f:d3:47:ad:fa:8c:bc:6f:dc:
f1:3e:cc:d7:12:8e:72:1c:d9:54:d3:98:41:d4:80:
63:17:3b:29:1b:6d:a6:e1:13:7d:da:0a:3d:0d:1f:
db:de:38:0d:c9:6c:5f:e8:99:14:94:4a:2a:1a:93:
05:37:99:a6:e0:ea:42:fb:e4:7c:86:2a:1f:65:64:
df:2f:b0:43:2c:22:ce:a6:09:89:b7:0a:23:19:00:
eb:a7:0b:5a:e2:93:3f:97:f5:38:58:08:eb:f5:2f:
79:cf:db:30:33:0b:bc:a1:e6:c4:b0:af:09:a7:35:
fe:a7:8c:b3:57:c9:ee:e1:78:af:95:00:a7:3a:48:
21:3a:a7:3a:61:96:79:a1:5a:83:7f:b3:4a:33:ad:
77:bb:b7:96:75:f2:85:99:66:f2:62:ce:cc:a6:bc:
68:2e:dd:ea:ff:e5:13:e0:48:9b:64:b3:8d:9f:4e:
e8:09:37:46:24:dd:df:aa:29:0d:34:23:b5:69:ec:
58:43:f9:a8:db:47:a5:92:f6:19:d1:f9:e8:b1:bf:
0f:16:a9:81:14:55:61:a8:43:e3:46:ab:eb:c9:c7:
5a:77:53:01:29:73:c0:8b:73:aa:d9:89:90:c0:53:
7b:9a:c3:6a:45:1d:77:72:09:02:0a:dd:32:e4:e1:
33:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1F:F2:6F:B6:64:19:11:2F:FF:85:98:4E:B4:C5:DE:DF:70:D9:E2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tx_yb7ZkGREv_4WYTrTF3t9w2eI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.218.0/23
Signature Algorithm: sha256WithRSAEncryption
20:0a:8c:f9:05:52:a0:ce:1e:28:50:fc:90:35:17:8a:e1:01:
f8:cf:72:fa:a4:4f:0c:9d:58:ab:91:68:1d:45:9d:24:ad:ee:
d7:2f:91:3e:28:3f:cd:6d:a3:20:e2:dd:f2:3a:40:43:f4:0b:
22:60:0d:e7:dc:56:f6:11:57:25:d6:1b:49:3b:a2:2d:57:4e:
b9:ca:ec:b7:8b:ba:2b:07:00:0d:20:b7:7f:bb:93:fa:d4:2d:
78:76:ed:b8:55:a8:e4:c2:b1:26:8d:27:88:b6:b6:89:92:07:
d6:e9:81:24:22:fb:95:88:44:3d:a9:00:e9:0b:02:3a:81:03:
f4:20:a0:d5:88:31:7d:19:2a:61:3e:47:82:20:54:52:be:8b:
ce:71:f5:5e:83:9c:48:15:7b:d5:34:27:5f:5f:cd:f3:3e:b3:
b8:8b:d3:5a:b6:5a:d9:cd:ac:24:da:cd:f1:28:9c:c3:20:01:
e2:cc:fa:e7:a5:60:f8:a8:43:0f:4b:c0:a6:99:16:a3:b1:60:
5e:43:69:98:65:ea:81:7a:48:04:dc:98:dd:6b:95:ec:9f:86:
49:be:09:0b:b7:d3:f4:b0:a3:12:19:e9:29:7c:0f:9e:e8:b7:
fa:bd:34:33:da:df:d2:50:5a:4c:b6:14:47:89:c3:04:01:25:
5d:20:db:28
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI3MUZGMjZGQjY2NDE5
MTEyRkZGODU5ODRFQjRDNURFREY3MEQ5RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6JIqszG/TR636jLxv3PE+zNcSjnIc2VTTmEHUgGMXOykbbabh
E33aCj0NH9veOA3JbF/omRSUSioakwU3mabg6kL75HyGKh9lZN8vsEMsIs6mCYm3
CiMZAOunC1rikz+X9ThYCOv1L3nP2zAzC7yh5sSwrwmnNf6njLNXye7heK+VAKc6
SCE6pzphlnmhWoN/s0ozrXe7t5Z18oWZZvJizsymvGgu3er/5RPgSJtks42fTugJ
N0Yk3d+qKQ00I7Vp7FhD+ajbR6WS9hnR+eixvw8WqYEUVWGoQ+NGq+vJx1p3UwEp
c8CLc6rZiZDAU3uaw2pFHXdyCQIK3TLk4TOPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUtx/yb7ZkGREv/4WYTrTF3t9w2eIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3R4X3liN1prR1JFdl80V1lU
clRGM3Q5dzJlSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEx
n9owDQYJKoZIhvcNAQELBQADggEBACAKjPkFUqDOHihQ/JA1F4rhAfjPcvqkTwyd
WKuRaB1FnSSt7tcvkT4oP81toyDi3fI6QEP0CyJgDefcVvYRVyXWG0k7oi1XTrnK
7LeLuisHAA0gt3+7k/rULXh27bhVqOTCsSaNJ4i2tomSB9bpgSQi+5WIRD2pAOkL
AjqBA/QgoNWIMX0ZKmE+R4IgVFK+i85x9V6DnEgVe9U0J19fzfM+s7iL01q2WtnN
rCTazfEonMMgAeLM+uelYPioQw9LwKaZFqOxYF5DaZhl6oF6SATcmN1rleyfhkm+
CQu30/SwoxIZ6Sl8D57ot/q9NDPa39JQWky2FEeJwwQBJV0g2yg=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org