Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DBxGlSiVHNN543wCo1-tA9xSxpM.roa
File: DBxGlSiVHNN543wCo1-tA9xSxpM.roa (raw, json)
Hash identifier: O+tSy6hIUl5C3dTFhwv1LLBaeYWU34MvKhqnV+iuiwk=
Subject key identifier: 0C:1C:46:95:28:95:1C:D3:79:E3:7C:02:A3:5F:AD:03:DC:52:C6:93
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 242E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DBxGlSiVHNN543wCo1-tA9xSxpM.roa
Signing time: Mon 10 Feb 2025 14:18:22 +0000
ROA not before: Mon 10 Feb 2025 14:18:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 122.100.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9262 (0x242e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 10 14:18:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0C1C469528951CD379E37C02A35FAD03DC52C693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4b:f7:95:43:05:88:ab:97:48:a8:fa:91:89:
03:75:33:0f:df:e6:6e:ab:40:e9:e3:34:64:9b:eb:
32:6b:44:dc:67:aa:1d:d6:e7:2f:a6:a3:a3:22:c1:
48:ea:e1:77:eb:25:de:93:88:39:ef:dd:15:85:9b:
4c:d9:1f:a7:f3:d3:f9:bf:32:7b:a9:79:5c:db:26:
4b:0b:f5:e9:85:5b:c2:12:5f:99:68:82:4a:28:2b:
7c:60:e7:2b:4e:aa:02:57:08:05:4d:6b:0a:dc:17:
4a:da:d9:1f:be:29:90:03:7b:7e:77:16:71:af:f1:
0a:f9:9f:2e:bb:15:fe:e9:a6:f9:b8:7b:cc:62:ad:
80:e5:4f:0e:2e:03:62:e0:01:57:e6:56:6d:e3:5d:
c7:db:d0:38:15:e5:1e:c3:6b:ed:69:29:5f:80:3f:
86:55:63:d2:c4:e6:f5:71:7f:63:42:fc:17:01:17:
53:53:e3:24:3e:e2:5a:b7:e5:7a:5d:89:c7:25:80:
d8:ac:0f:74:2e:d6:53:72:26:fc:8f:1d:5b:de:9e:
97:72:62:b9:45:e6:9b:cd:be:f8:29:92:53:e6:73:
02:0d:75:d9:88:e1:d7:7b:b7:0a:a1:b1:2a:c2:3b:
ab:b7:bb:7c:f9:cf:99:b7:79:7a:77:2f:9e:13:9c:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1C:46:95:28:95:1C:D3:79:E3:7C:02:A3:5F:AD:03:DC:52:C6:93
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DBxGlSiVHNN543wCo1-tA9xSxpM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.68.0/22
Signature Algorithm: sha256WithRSAEncryption
54:01:0a:77:ad:64:21:01:5b:68:32:fc:73:c0:5a:b5:b5:d8:
f1:23:49:bc:5b:4b:86:27:d6:27:a5:a4:d9:8c:84:4d:46:2f:
db:81:ba:1a:65:19:40:7b:14:67:ee:ac:c9:4b:6f:10:a6:4e:
fc:c3:9f:76:f0:e1:16:81:b8:3a:40:52:74:20:06:2f:c6:1d:
e4:5f:9b:fe:59:df:05:3e:a9:e9:fd:50:58:7f:fd:88:b5:f1:
23:5e:59:b3:70:18:ce:50:b0:f8:a7:93:d4:fa:70:5a:58:a4:
6a:fa:30:5b:d2:68:c3:58:20:ac:76:a5:6d:6e:b0:81:68:f5:
12:a8:1e:d3:25:0e:02:57:9d:a3:eb:fd:e7:b4:49:59:3b:f9:
d5:fd:f1:00:7c:ab:f9:93:d9:15:5a:a9:be:e8:b2:53:1e:de:
56:c1:9e:cb:8c:cc:3e:52:7e:d4:5e:78:6c:db:99:2d:ad:d9:
77:63:ab:06:ec:8b:63:01:b8:4c:e4:80:77:cc:94:e1:24:a1:
3e:cc:02:42:c3:c3:fb:69:58:7f:f1:c5:81:f0:75:81:f6:9f:
06:8e:5b:53:48:08:4d:ac:65:89:61:aa:e0:14:6d:a4:a0:36:
95:e8:58:3c:c4:11:c5:1b:ec:3c:92:73:55:cf:33:0f:17:55:
a2:c8:00:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 09:05:35 2025 by rpki-client