Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/87dczooJAGMJZZM6oHBan9vON0c.roa
File: 87dczooJAGMJZZM6oHBan9vON0c.roa (raw, json)
Hash identifier: LC1vYwvYCdrHh7T0uJ7fdMCqt8kKQBwuVLiXiZXrBf0=
Subject key identifier: F3:B7:5C:CE:8A:09:00:63:09:65:93:3A:A0:70:5A:9F:DB:CE:37:47
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 23CE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/87dczooJAGMJZZM6oHBan9vON0c.roa
Signing time: Mon 10 Feb 2025 14:17:56 +0000
ROA not before: Mon 10 Feb 2025 14:17:56 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.158.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9166 (0x23ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 10 14:17:56 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F3B75CCE8A0900630965933AA0705A9FDBCE3747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:8e:1f:b5:70:14:c5:c2:2a:ad:b5:f5:be:
cc:f5:7a:15:be:da:da:a0:26:60:77:a9:c0:10:7e:
2a:08:1c:1c:19:48:57:fe:ff:b6:47:20:8e:d2:09:
14:f8:7b:c9:fa:89:3e:58:6d:2e:b9:b8:67:73:15:
89:54:a9:4c:cc:30:fd:a8:54:3b:b9:aa:1e:e0:f7:
20:be:5b:c0:4c:f7:be:71:b6:e8:8b:73:51:a3:b7:
12:3a:39:1f:65:20:38:e9:0d:18:1c:d4:3b:1b:12:
22:33:c3:0e:97:c2:10:02:79:9e:f3:61:f2:cc:0d:
a9:87:90:4e:b6:be:24:9c:2e:a1:68:70:b5:7d:93:
90:be:de:90:55:61:36:fc:2f:1d:74:7f:cc:be:98:
6f:48:c1:ea:95:b6:50:61:27:71:df:d2:8c:5e:bf:
11:98:0b:a4:db:9d:5e:0f:5a:8e:e0:50:a0:db:f1:
97:49:fd:2c:7d:7b:14:58:b4:28:72:f9:3c:4e:63:
05:f8:7d:94:09:84:b0:62:77:63:93:cb:2f:bf:14:
b1:88:4c:24:d5:e3:ab:c8:e3:59:99:97:0a:49:fe:
fd:38:78:f7:4e:d6:c3:4d:5a:b6:64:ac:83:25:c4:
70:ef:a9:4a:de:09:71:f1:03:00:b2:43:95:6c:31:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B7:5C:CE:8A:09:00:63:09:65:93:3A:A0:70:5A:9F:DB:CE:37:47
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/87dczooJAGMJZZM6oHBan9vON0c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.32.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:d1:4a:d1:74:ad:a0:1d:2c:f4:51:f9:d8:ed:2f:1f:65:ff:
e2:4e:95:69:5a:ec:37:f3:2b:40:11:ad:d2:9d:93:47:c5:09:
4e:60:b7:d2:d2:e3:06:9f:77:50:a4:46:be:14:44:80:29:24:
3e:5d:f2:b7:84:d4:19:b9:f3:3c:a9:ad:a0:41:56:49:a0:95:
19:41:da:9c:df:1c:b9:98:93:36:16:2d:12:cd:18:bf:ad:f7:
f4:05:af:39:6a:12:10:df:dd:c7:b5:c7:84:93:6a:31:50:1b:
27:f0:ad:44:2a:bd:54:9e:6b:2e:50:33:be:d4:3a:2c:4a:c6:
86:44:02:4f:bd:83:73:a0:b4:a3:22:47:89:b8:48:c4:1f:6e:
e2:61:be:c9:3c:6e:cb:e8:59:a3:f4:57:17:c5:70:68:9a:94:
86:5e:50:fc:30:a5:51:e2:c7:47:04:01:22:89:db:c7:ca:69:
ad:70:14:cc:03:76:4c:27:97:e5:4c:c3:b0:d9:59:7c:2c:a8:
a0:1e:e9:ad:b9:b7:59:19:4b:e3:79:17:0d:13:15:22:63:94:
22:40:1f:02:6b:f0:7b:2e:d1:ab:0a:f4:c1:cd:22:c2:ca:1e:
a5:ca:7b:28:02:4c:d9:d8:f8:72:f7:60:b8:57:1f:a7:d4:aa:
95:4c:e8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 23:20:42 2025 by rpki-client