Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NoZkJX9JN5PmgklpS2FNL5ea9GA.roa
File: NoZkJX9JN5PmgklpS2FNL5ea9GA.roa (raw, json)
Hash identifier: Q+MyuUIUn4PJSRucI+DLaaQUR6mXDWbTt+n4vY/0nek=
Subject key identifier: 36:86:64:25:7F:49:37:93:E6:82:49:69:4B:61:4D:2F:97:9A:F4:60
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 235E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NoZkJX9JN5PmgklpS2FNL5ea9GA.roa
Signing time: Mon 10 Feb 2025 14:17:31 +0000
ROA not before: Mon 10 Feb 2025 14:17:31 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.159.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9054 (0x235e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 10 14:17:31 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=368664257F493793E68249694B614D2F979AF460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:25:0c:b0:0b:f6:e3:64:55:74:e8:4f:97:
74:1b:a1:47:41:ec:e0:47:3a:7d:be:b8:d9:d2:aa:
33:5e:d6:7b:7b:4b:73:c7:48:bd:f7:ef:0c:2f:f1:
87:b2:1a:7b:50:83:4c:49:41:6d:1a:64:98:a2:1d:
cb:65:5a:23:d3:69:78:61:dd:35:42:1a:f4:6e:a8:
d4:81:25:5d:e7:d8:9b:8d:22:82:1f:ee:06:e9:c3:
04:2d:8f:a0:bb:99:d0:49:86:ad:93:d8:ba:ad:ed:
d3:4f:f3:7e:8f:69:72:fb:1d:98:05:ff:c0:95:f9:
c9:9e:0b:87:ee:01:56:73:3e:62:ba:fb:a0:f4:bf:
78:53:54:f8:f6:65:dc:a2:ad:3a:2d:2b:1b:38:43:
cf:5a:63:cc:e7:d5:65:cf:79:c3:aa:87:b4:a0:9b:
bb:66:0a:7c:81:19:8d:fb:5c:65:78:63:03:5f:c6:
21:f1:42:2f:81:b3:e8:f8:31:de:26:48:57:e0:57:
1b:ef:3f:0d:a1:e4:36:e5:8e:2a:38:02:1a:44:d5:
8c:4f:9a:29:bf:f3:d8:4e:4b:56:5c:66:1c:eb:88:
de:12:7d:f6:ac:2c:ab:03:06:27:d1:f4:69:88:08:
ca:b1:38:83:c7:e6:a8:2e:09:d7:cc:ea:3f:d7:2a:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:86:64:25:7F:49:37:93:E6:82:49:69:4B:61:4D:2F:97:9A:F4:60
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NoZkJX9JN5PmgklpS2FNL5ea9GA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.216.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:e9:73:4b:aa:29:c5:3f:8c:5a:64:47:12:65:92:76:ea:6f:
e2:8e:10:1b:a0:4c:ce:2e:03:2c:f9:99:f5:8c:ab:5e:c8:81:
51:39:2d:81:fb:98:de:56:f8:f5:11:17:55:76:02:5c:7d:48:
4d:85:e4:62:3c:96:56:05:5e:6b:63:5a:c5:5f:ce:0b:49:6c:
b9:db:00:6c:fd:91:46:b4:db:14:83:ec:9c:e5:27:81:d0:a0:
91:8e:39:67:92:80:0b:5b:ec:cf:a0:ca:51:2c:e0:b2:f7:c7:
d3:ba:fb:a0:ff:1f:03:d6:9b:75:96:9c:d4:9f:ce:08:42:39:
cd:aa:45:d0:1a:eb:02:cf:31:8b:c3:12:b5:d9:88:23:54:16:
75:94:2b:c2:fd:c4:34:0e:bb:6d:67:a6:53:07:88:4e:ea:00:
54:35:5b:c2:96:09:9d:2b:bf:b5:f4:3a:f1:2f:df:05:3a:4d:
83:d9:95:87:7f:e2:42:53:10:97:53:58:18:ff:cc:e7:65:6b:
99:81:21:52:76:4a:6d:ab:d4:f7:5c:24:81:d0:ef:02:a6:af:
d9:ba:c6:38:6a:ae:4a:a4:da:01:57:11:f6:36:bb:5c:80:c8:
7c:fe:54:82:86:e3:a6:96:44:2c:a3:32:1d:2b:6b:7a:fb:40:
72:fc:57:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 09:05:45 2025 by rpki-client