Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OySGkG5t20bejmg4yuAJhRI4z9c.roa
File: OySGkG5t20bejmg4yuAJhRI4z9c.roa (raw, json)
Hash identifier: nR+EAamyXJmNVxuYTo8KHQUBz2GvzyGJqWadiYU92wY=
Subject key identifier: 3B:24:86:90:6E:6D:DB:46:DE:8E:68:38:CA:E0:09:85:12:38:CF:D7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2270
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OySGkG5t20bejmg4yuAJhRI4z9c.roa
Signing time: Mon 26 Aug 2024 05:34:00 +0000
ROA not before: Mon 26 Aug 2024 05:34:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.158.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8816 (0x2270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:00 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3B2486906E6DDB46DE8E6838CAE009851238CFD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:d7:c7:7a:87:8c:2c:51:8b:4e:70:a0:2b:
9d:5b:e4:dd:70:ce:57:d3:73:7c:91:8a:b9:a0:b4:
87:b2:ce:52:29:f4:4a:56:ea:79:a7:24:f2:c5:40:
bd:d8:3e:51:8e:6c:49:c0:76:c1:28:d2:9a:a3:59:
b1:c0:f6:b6:6b:df:6b:09:41:7c:87:85:2c:fb:9e:
49:13:e5:4b:c1:8b:1b:8b:47:09:84:b1:c2:80:7a:
fa:5b:11:cd:c4:2a:cc:44:62:dd:4e:b4:ea:62:c7:
09:79:12:82:06:4b:1c:44:f2:80:d8:53:a0:67:23:
74:21:12:42:02:85:95:bf:5f:82:0e:37:5c:33:4f:
6a:8e:e8:39:41:d9:1c:37:c1:0e:8f:f0:16:52:25:
12:3b:64:43:ab:f0:8b:e7:d6:bf:13:96:bf:23:62:
c2:0f:46:80:7c:da:01:89:41:2c:9c:84:f7:ae:9e:
2f:ec:79:72:71:a2:47:4a:6c:69:5c:90:43:64:f6:
99:43:c1:95:bf:15:cb:90:08:30:ed:74:b1:30:3c:
94:8b:82:c4:c1:14:21:61:6b:df:9b:54:75:e0:60:
81:1c:5e:e6:a6:05:33:bf:55:47:9b:13:a8:95:d9:
cd:0e:31:a5:2b:b7:04:bf:32:8c:40:86:3e:0f:e5:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:24:86:90:6E:6D:DB:46:DE:8E:68:38:CA:E0:09:85:12:38:CF:D7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OySGkG5t20bejmg4yuAJhRI4z9c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.176.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:69:17:e4:26:8e:16:7a:20:f7:45:10:61:84:70:65:ff:7a:
25:ea:a7:4f:ad:d5:b1:3c:82:52:94:da:d9:ff:d9:fd:51:4f:
24:af:90:ed:f9:b3:79:4b:a4:5a:69:88:99:5b:52:6a:f0:7f:
5b:34:4d:72:9c:61:22:63:6c:01:f2:eb:2e:59:e1:9e:87:4a:
3f:b5:a6:a8:68:f0:33:82:df:61:e8:b8:54:cb:17:08:77:73:
c0:f1:e8:42:e2:77:a3:e6:4f:50:a8:d8:14:0c:03:6c:f2:4d:
55:90:53:ba:56:9c:a1:e6:78:c4:8e:fb:68:e4:fa:50:36:59:
58:da:ef:4f:61:8f:99:89:d4:de:2f:73:69:99:94:dc:8b:ea:
49:21:2f:bd:c4:c2:b7:32:2c:15:2b:0c:ff:55:49:a6:b1:8d:
5f:2b:f3:fd:8a:cb:95:dc:be:f7:a9:61:88:15:c1:e6:6d:b3:
e6:f0:1d:1c:80:4f:52:a1:27:5b:6e:05:53:ca:3c:50:03:a7:
d0:38:40:3a:aa:d8:f9:0c:61:80:c6:6e:29:00:4e:95:9d:de:
b8:ee:7b:0b:75:99:59:f6:5e:43:9c:5d:c7:7c:d5:e8:03:97:
c2:40:ea:4d:6b:11:1a:ac:bd:29:f0:f3:b8:27:32:f0:01:5a:
9c:81:c2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:08:16 2025 by rpki-client