Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G7HDpxSxyI0cWRo8ifG5-cxXZHk.roa
File: G7HDpxSxyI0cWRo8ifG5-cxXZHk.roa (raw, json)
Hash identifier: sXIcs3hLZg6cf52F7tNtS1jDf8/3UG+nwACVKwF0pt8=
Subject key identifier: 1B:B1:C3:A7:14:B1:C8:8D:1C:59:1A:3C:89:F1:B9:F9:CC:57:64:79
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 24B8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G7HDpxSxyI0cWRo8ifG5-cxXZHk.roa
Signing time: Mon 10 Feb 2025 14:18:55 +0000
ROA not before: Mon 10 Feb 2025 14:18:55 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24165
IP address blocks: 122.254.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9400 (0x24b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 10 14:18:55 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1BB1C3A714B1C88D1C591A3C89F1B9F9CC576479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:2f:bb:b1:12:38:ae:16:79:83:8f:14:f1:
ea:63:29:54:a6:78:54:7a:b1:27:cd:95:76:9e:5d:
7d:4b:7d:88:f5:4f:55:e2:f0:f7:f6:70:12:08:63:
6f:96:d8:ad:3b:f1:18:ae:03:6f:19:34:1f:55:4d:
fe:94:a2:1c:24:42:db:ba:b5:ef:2b:9f:95:8e:e9:
85:74:f6:ed:41:c3:71:28:09:04:0c:8f:e3:16:52:
77:5d:4f:ed:d4:65:c0:0b:6d:30:d8:24:42:b7:e0:
e6:39:90:ee:7d:13:cb:02:8b:28:d8:cc:3a:5d:9a:
54:77:e3:05:28:d5:a9:a9:7c:d9:80:ca:a0:20:b3:
40:18:c9:d3:f6:33:44:89:ed:60:b3:5f:a2:ab:ca:
02:ae:46:f0:d7:17:42:21:43:77:2f:c5:49:99:46:
e9:a1:a3:d9:ff:c5:ff:4b:a6:ab:cc:a1:ea:02:57:
ae:d3:49:9d:92:62:ce:d8:4f:d5:c7:3c:f8:e7:60:
54:51:54:f8:e4:6e:f2:b7:78:2f:22:c9:64:05:4a:
18:c0:27:79:f9:ef:08:13:4a:b1:92:c6:35:21:cd:
f0:62:cd:43:a1:2a:c4:16:47:5d:86:f7:99:1f:f2:
aa:90:1c:bf:9f:1d:4f:90:eb:ba:7d:ab:2d:88:3a:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B1:C3:A7:14:B1:C8:8D:1C:59:1A:3C:89:F1:B9:F9:CC:57:64:79
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G7HDpxSxyI0cWRo8ifG5-cxXZHk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.24.0/21
Signature Algorithm: sha256WithRSAEncryption
60:d1:f0:a8:8e:2c:6c:bb:09:db:9a:42:6f:61:4c:a3:56:a3:
4a:7a:08:da:c7:95:18:7c:ed:cb:2f:c2:46:33:c7:f1:de:df:
a5:8a:00:26:03:6a:9e:34:84:26:73:6c:81:36:8c:ac:84:54:
b0:d0:79:a0:78:f9:a2:88:03:d7:91:c0:4c:4b:fd:ac:fc:72:
3c:2d:1a:fa:40:e1:38:67:b6:8a:45:01:b7:f9:28:5d:ab:a5:
ed:4f:d1:fc:a0:b0:49:d4:ac:1d:db:de:c3:e7:da:91:ce:3f:
f8:7d:66:7b:b9:84:69:2b:63:49:06:71:7f:07:50:ce:16:f8:
a7:5f:a7:01:80:20:76:d9:09:cc:5b:e1:eb:ec:bc:d3:af:0c:
10:cb:4d:b4:df:e2:14:cf:c7:04:a5:42:54:05:f1:48:2e:6e:
98:a7:38:e7:e2:de:fd:b6:42:83:1f:0e:cf:6e:89:32:60:40:
33:ed:01:f0:7b:5d:a2:4a:e4:ec:f7:35:5e:c3:3a:a5:a2:de:
22:b7:0e:c9:61:72:0b:de:9f:c7:85:3e:a4:72:c5:5b:e4:95:
0a:68:67:e0:fd:ce:e7:eb:98:f2:9a:a0:5a:6c:15:1b:70:66:
2b:de:cc:b5:f1:79:27:18:a7:63:fc:6b:7e:0d:40:15:3a:f9:
18:f3:03:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 23:21:58 2025 by rpki-client