Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0BVg14OBro4uNUTCwbetcE7Akc0.roa
File: 0BVg14OBro4uNUTCwbetcE7Akc0.roa (raw, json)
Hash identifier: sYID9y+WsSSXAA06X4K2ZhT+/MtMt6VnlTUzmAA2ma4=
Subject key identifier: D0:15:60:D7:83:81:AE:8E:2E:35:44:C2:C1:B7:AD:70:4E:C0:91:CD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2422
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0BVg14OBro4uNUTCwbetcE7Akc0.roa
Signing time: Mon 10 Feb 2025 14:18:18 +0000
ROA not before: Mon 10 Feb 2025 14:18:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24165
IP address blocks: 61.64.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9250 (0x2422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 10 14:18:18 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D01560D78381AE8E2E3544C2C1B7AD704EC091CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fa:d1:e1:10:bc:f9:ce:0f:80:74:51:77:25:
62:fa:4b:7d:53:f3:7f:34:6f:72:a9:d0:98:2e:30:
1e:d4:39:c1:fe:5f:19:93:65:a1:e8:0f:89:7a:2c:
0e:27:61:1b:74:67:27:6b:9c:4a:54:89:d7:e1:fa:
d2:20:20:58:bc:96:75:69:50:12:13:36:78:bf:61:
81:f1:23:fd:e7:3c:3c:e5:45:4d:18:0b:8f:96:fe:
8a:5d:28:84:8c:a0:5b:d4:5c:ad:a7:ff:52:ba:61:
e7:55:40:ff:70:a5:15:00:f0:c1:4a:95:3c:a9:e7:
1b:98:0a:08:8c:f9:ce:25:46:b7:12:54:95:65:eb:
b8:cb:43:87:84:59:5a:81:99:c7:4f:5b:3e:20:41:
19:30:f8:2e:b5:d2:14:b2:5d:45:80:87:34:8c:53:
fa:ff:e6:ea:89:f5:c5:b2:88:16:97:1a:f6:8b:2e:
4d:58:aa:7b:77:69:8a:1b:de:aa:4a:db:13:32:0f:
ad:e2:17:bd:a2:57:87:42:8f:58:ba:43:89:13:67:
ee:fe:81:6e:9b:b5:a9:f7:55:a4:b1:1d:4b:82:8e:
4a:a3:ac:1c:6e:7c:49:e3:29:19:a0:e6:65:af:fe:
fa:27:46:a6:cb:17:ad:fc:9f:b1:f5:0d:98:d5:a7:
0a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:15:60:D7:83:81:AE:8E:2E:35:44:C2:C1:B7:AD:70:4E:C0:91:CD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0BVg14OBro4uNUTCwbetcE7Akc0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.8.0/21
Signature Algorithm: sha256WithRSAEncryption
17:64:f6:33:cc:74:be:61:9d:2a:d3:40:39:05:90:51:4b:7a:
6c:29:0a:38:4f:9e:cc:73:fa:6c:50:88:94:2a:26:aa:1b:c4:
ac:1a:8d:d3:aa:11:1c:c6:ab:b4:ed:31:89:ec:2a:ff:8e:5e:
d5:77:43:2a:ac:23:f3:33:2a:30:3e:b9:ba:75:3d:7f:ae:1b:
77:b4:aa:e5:1e:d8:f3:f0:e0:ec:43:4e:da:4d:4b:e9:95:63:
e0:e8:ff:c1:6f:b0:c7:25:2c:32:11:0e:d0:e9:3e:05:e1:63:
ee:bb:c5:74:c6:f4:32:f6:07:7e:2a:c8:5d:5f:75:79:4d:67:
6a:93:dd:0b:11:f1:1c:ea:05:75:48:73:ef:0f:18:30:bb:2f:
24:1f:a7:dd:0b:c2:5c:54:5a:a0:fc:e8:c8:a1:fe:d3:b7:6b:
2f:e3:9e:98:60:e8:24:f7:87:db:4c:87:02:d6:68:37:95:76:
81:0b:c8:80:e1:66:0f:2f:e4:35:06:c5:26:88:d9:e5:6b:ac:
27:f7:64:83:ef:88:f6:2c:cd:3d:ff:62:2b:f9:b7:ad:7a:45:
78:56:ca:a4:d6:2d:a2:30:bb:f7:5d:9d:00:2b:ec:f0:81:79:
4a:c2:b3:1a:70:6a:30:0b:c0:17:d8:e2:04:c8:98:4f:f9:dd:
69:83:2b:9f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJCIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE4MThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQwMTU2MEQ3ODM4MUFF
OEUyRTM1NDRDMkMxQjdBRDcwNEVDMDkxQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDt+tHhELz5zg+AdFF3JWL6S31T8380b3Kp0JguMB7UOcH+XxmT
ZaHoD4l6LA4nYRt0ZydrnEpUidfh+tIgIFi8lnVpUBITNni/YYHxI/3nPDzlRU0Y
C4+W/opdKISMoFvUXK2n/1K6YedVQP9wpRUA8MFKlTyp5xuYCgiM+c4lRrcSVJVl
67jLQ4eEWVqBmcdPWz4gQRkw+C610hSyXUWAhzSMU/r/5uqJ9cWyiBaXGvaLLk1Y
qnt3aYob3qpK2xMyD63iF72iV4dCj1i6Q4kTZ+7+gW6btan3VaSxHUuCjkqjrBxu
fEnjKRmg5mWv/vonRqbLF638n7H1DZjVpwrPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU0BVg14OBro4uNUTCwbetcE7Akc0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzBCVmcxNE9Ccm80dU5VVEN3
YmV0Y0U3QWtjMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9
QAgwDQYJKoZIhvcNAQELBQADggEBABdk9jPMdL5hnSrTQDkFkFFLemwpCjhPnsxz
+mxQiJQqJqobxKwajdOqERzGq7TtMYnsKv+OXtV3QyqsI/MzKjA+ubp1PX+uG3e0
quUe2PPw4OxDTtpNS+mVY+Do/8FvsMclLDIRDtDpPgXhY+67xXTG9DL2B34qyF1f
dXlNZ2qT3QsR8RzqBXVIc+8PGDC7LyQfp90LwlxUWqD86Mih/tO3ay/jnphg6CT3
h9tMhwLWaDeVdoELyIDhZg8v5DUGxSaI2eVrrCf3ZIPviPYszT3/Yiv5t616RXhW
yqTWLaIwu/ddnQAr7PCBeUrCsxpwajALwBfY4gTImE/53WmDK58=
-----END CERTIFICATE-----
Generated at Sun Jun 22 09:02:02 2025 by rpki-client