Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wvMed5q9Q08jbYhp_E38IBogZSQ.roa
File: wvMed5q9Q08jbYhp_E38IBogZSQ.roa (raw, json)
Hash identifier: uySuhInRnUu1Ief6yFu+NHI8nUuY1dspyJ2XR74ukhY=
Subject key identifier: C2:F3:1E:77:9A:BD:43:4F:23:6D:88:69:FC:4D:FC:20:1A:20:65:24
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1EA7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wvMed5q9Q08jbYhp_E38IBogZSQ.roa
Signing time: Fri 01 Sep 2023 10:16:19 +0000
ROA not before: Fri 01 Sep 2023 10:16:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 49.158.152.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7847 (0x1ea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C2F31E779ABD434F236D8869FC4DFC201A206524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:64:29:78:8e:48:42:99:9a:78:72:d3:76:69:
c1:6c:cc:e7:67:5d:73:a9:c4:ab:b5:e9:c7:aa:19:
03:2b:70:c4:34:56:f5:2f:7b:f4:16:70:43:69:0e:
26:96:ca:32:f6:97:39:dd:bd:bc:e0:7c:ef:ab:6f:
78:e2:1e:64:bf:b1:1f:57:e1:58:cf:be:5b:eb:65:
9b:3b:ef:fe:9e:9b:7f:b9:7f:ec:9a:2a:74:83:84:
09:dd:a1:05:b8:b9:d5:0b:24:da:78:6e:54:f4:1a:
14:99:54:7a:2d:9e:87:a1:e2:25:76:47:58:d2:ed:
9b:ba:52:9f:1b:0a:e0:58:90:5d:7f:4b:e3:db:51:
a5:16:b8:8b:8a:e4:4e:44:63:be:fa:66:4c:b9:d7:
41:17:30:52:b4:51:86:af:80:74:2e:c3:e3:7a:cb:
06:07:d8:3b:65:6a:a0:0e:89:19:e9:28:a2:14:70:
7f:81:00:77:2f:35:d0:06:3d:92:86:5e:c4:2b:9d:
c0:81:43:2e:2f:2e:16:e4:de:2a:07:f0:0c:52:34:
63:8a:89:a3:36:51:38:4c:7a:fb:96:a1:34:1d:43:
30:df:a1:7b:31:35:9e:eb:09:d3:12:19:39:45:94:
61:33:1e:4b:1d:f4:c7:cf:0b:95:c3:c1:06:00:24:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F3:1E:77:9A:BD:43:4F:23:6D:88:69:FC:4D:FC:20:1A:20:65:24
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wvMed5q9Q08jbYhp_E38IBogZSQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.152.0/21
Signature Algorithm: sha256WithRSAEncryption
88:c4:eb:bd:62:9d:eb:34:88:73:8a:09:92:c3:50:90:40:c5:
42:6c:ab:ea:40:6b:3a:12:ef:0e:d0:d1:d3:95:2d:b0:c8:a6:
ed:62:42:31:41:bc:fb:72:03:6d:3b:2d:5a:84:80:8f:44:b5:
24:a3:5f:ac:18:9c:36:1a:42:9e:c3:19:b2:94:91:1e:99:10:
03:2b:7c:09:5f:fa:fc:3c:41:26:04:cd:07:e1:ec:ca:40:62:
f0:e3:71:e4:62:87:73:b5:10:cc:72:be:06:78:a2:32:b1:ce:
01:37:f5:85:5c:8a:36:11:30:ae:57:26:61:52:a3:10:06:79:
b3:a3:75:67:4e:f6:d9:9e:92:27:07:e6:9f:27:25:da:60:98:
55:0e:66:d6:9b:a3:c6:2b:43:23:9f:9e:f6:4f:d6:79:01:98:
45:b0:56:54:95:5f:50:b7:3c:c2:72:55:fa:b2:dd:37:cd:27:
d3:27:5e:04:f2:55:88:02:30:b1:ac:bb:06:78:f8:fb:dd:cc:
db:e1:ae:52:b8:71:37:8a:e7:58:71:d4:27:f9:2b:90:15:93:
e4:62:a1:6e:65:d3:d9:b7:1d:10:36:05:72:1f:23:07:68:c2:
f3:a6:aa:80:09:75:9b:6d:19:32:5e:31:96:57:86:66:be:28:
47:07:1c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org