Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xVZH3wBGpSwALurBbQwMyCX0qWo.roa
File: xVZH3wBGpSwALurBbQwMyCX0qWo.roa (raw, json)
Hash identifier: cFNzg6gqxet45p1fV5KjtJR4QbIdC5m/TK3ljZF5jfg=
Subject key identifier: C5:56:47:DF:00:46:A5:2C:00:2E:EA:C1:6D:0C:0C:C8:25:F4:A9:6A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E8B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xVZH3wBGpSwALurBbQwMyCX0qWo.roa
Signing time: Fri 01 Sep 2023 10:16:11 +0000
ROA not before: Fri 01 Sep 2023 10:16:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24165
IP address blocks: 49.159.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7819 (0x1e8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C55647DF0046A52C002EEAC16D0C0CC825F4A96A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:4d:40:62:d4:38:5b:83:1b:a1:6b:49:08:
88:a0:f9:9c:53:55:fd:2b:a3:22:64:2b:d3:e2:a6:
58:c5:ec:e9:97:78:ce:da:19:42:62:c8:c3:ef:bd:
c0:e2:e8:ef:f1:b3:87:0c:94:9d:14:c5:b6:21:c1:
35:08:ea:b7:61:d9:54:ed:6c:a5:1d:5f:fe:52:e1:
e9:8a:63:7c:10:39:8e:09:93:b8:8a:a5:d4:f7:22:
53:4b:32:42:8f:59:ea:fb:b6:6c:98:9e:09:d9:7a:
9a:98:28:03:79:ca:ad:69:d1:7e:41:06:1a:25:71:
31:00:ea:ba:6a:42:97:cc:74:9c:55:0b:6b:90:c0:
40:37:e8:21:13:d8:7e:4d:a3:04:74:eb:37:ec:08:
cd:3f:f3:63:95:47:85:fe:84:ff:ae:de:98:4d:6e:
ee:1b:6c:27:f3:e8:94:13:c9:59:3a:21:75:0e:28:
da:e4:8a:f1:01:b2:e6:48:a8:66:1f:ad:d7:63:9a:
25:50:41:cc:66:0d:44:9b:6d:cd:94:52:2f:8f:64:
59:aa:ae:1f:a8:38:73:ae:f4:5a:cf:e0:be:66:8a:
d9:ac:ac:bb:9a:35:d8:53:c7:3a:b1:2f:1c:ee:ef:
47:9f:83:e5:14:5c:75:cb:f5:ef:c1:c8:e9:f6:c1:
79:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:56:47:DF:00:46:A5:2C:00:2E:EA:C1:6D:0C:0C:C8:25:F4:A9:6A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xVZH3wBGpSwALurBbQwMyCX0qWo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.248.0/22
Signature Algorithm: sha256WithRSAEncryption
26:17:90:67:0d:46:80:19:c1:b6:82:3e:c3:8d:63:7f:62:c0:
4a:4c:09:f4:18:e4:b2:7c:ff:20:85:c5:6f:4d:e9:54:be:09:
4d:d2:5a:34:e9:67:d2:17:e8:3c:c0:40:1d:9a:ea:81:fa:0e:
ef:05:ed:a6:d7:02:1b:9b:58:0f:f8:cf:65:87:50:38:0a:0e:
a4:bd:1d:36:38:f0:28:8d:de:12:f3:3c:ae:e3:ae:27:f5:76:
34:b9:c1:08:63:32:59:32:f2:b0:c8:ce:d0:b6:9c:5a:91:81:
62:92:8e:ca:04:57:c6:0f:76:06:0f:2a:68:86:5f:ae:9a:4f:
13:0a:5f:e8:52:9a:07:2f:4f:8d:6c:00:b8:ab:68:78:30:e0:
c6:2a:ce:e4:1c:7a:f4:33:9c:6f:80:26:5f:26:e9:7a:6e:7e:
e7:f6:77:a3:58:82:d3:f9:8b:11:b7:63:97:49:93:27:e7:c2:
09:01:0e:a9:5f:e4:eb:7b:08:3b:43:cf:65:e8:15:3a:29:11:
5b:a6:9e:0f:31:f6:59:87:63:cd:15:da:34:31:ad:bb:90:7a:
69:10:5d:29:02:1b:2e:7c:29:73:2b:96:b0:aa:87:e3:ef:57:
ab:79:a7:2e:54:21:40:a2:83:96:ae:3a:5e:e8:01:c1:73:2b:
b9:5c:f2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org