Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XNUCAYiITmyVQPf1E6sSPFl69AE.roa
File: XNUCAYiITmyVQPf1E6sSPFl69AE.roa (raw, json)
Hash identifier: KWbyY0Sf8j3ySNty7S6VMJre4PPQxrOj49mEK4tznS8=
Subject key identifier: 5C:D5:02:01:88:88:4E:6C:95:40:F7:F5:13:AB:12:3C:59:7A:F4:01
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 23FC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XNUCAYiITmyVQPf1E6sSPFl69AE.roa
Signing time: Mon 10 Feb 2025 14:18:09 +0000
ROA not before: Mon 10 Feb 2025 14:18:09 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.158.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9212 (0x23fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 10 14:18:09 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5CD5020188884E6C9540F7F513AB123C597AF401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:05:8c:e7:5b:47:8e:8e:13:8a:03:62:ea:cc:
bf:4c:a7:12:0c:32:bc:f5:cf:7c:ba:8c:3c:50:73:
2f:43:14:b8:43:a6:3c:2b:66:12:b3:fc:6c:2d:41:
be:05:94:b3:fc:a0:21:99:fa:19:6b:23:7d:29:3e:
78:23:d9:76:dd:9e:b5:35:cb:fc:c1:44:06:97:f9:
d6:12:52:3c:f6:78:0b:09:99:b1:43:18:3f:a9:d7:
4a:5b:16:eb:16:d4:5c:0a:23:86:88:b2:f1:6e:4f:
f8:f2:9b:44:dd:5a:6f:65:4e:8d:97:51:94:ac:05:
c9:c5:c3:0e:b9:ad:7f:4f:f2:ad:72:0e:22:83:40:
7c:51:88:91:33:c9:f6:4e:0a:ad:62:11:7b:bf:d0:
46:9c:00:38:8b:53:82:bc:03:72:64:67:14:f1:32:
93:5b:ce:1d:f9:96:f8:89:85:7a:83:10:ef:73:e4:
89:7d:2c:a8:88:65:1f:79:f7:07:f9:90:bc:32:9f:
ea:fe:08:98:cf:0b:87:58:59:1a:7a:0f:98:78:03:
be:37:7b:39:f7:7e:d4:e1:af:0d:08:dc:bb:c8:74:
16:1b:a3:9a:e4:1b:a6:9c:65:d3:9d:c7:af:e2:5c:
2d:5f:12:77:06:a5:32:c4:38:fa:7e:a8:cb:49:f3:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D5:02:01:88:88:4E:6C:95:40:F7:F5:13:AB:12:3C:59:7A:F4:01
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XNUCAYiITmyVQPf1E6sSPFl69AE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.64.0/20
Signature Algorithm: sha256WithRSAEncryption
47:a1:e6:17:49:95:89:03:06:02:88:06:39:d7:81:2b:1f:4b:
5f:b4:10:8e:7f:e9:2d:14:22:99:74:20:15:5e:4e:5a:24:91:
80:68:b7:e5:90:f3:08:87:b0:a4:fb:cf:03:d8:88:00:d3:7b:
cd:62:16:62:65:0a:34:cc:08:21:fc:26:89:95:61:ca:16:10:
c8:f9:af:ef:da:9c:27:d1:29:89:e5:43:8f:90:af:ef:0b:d8:
0c:ca:13:a1:43:23:24:ea:be:9c:3c:e7:a8:19:7f:3b:cf:2b:
20:67:29:e7:e8:cb:86:ff:3c:27:b1:c7:01:91:e0:8f:2a:f7:
1a:0d:e0:85:b3:01:56:5c:2d:47:e0:10:0f:71:db:7b:48:d5:
72:c4:b8:de:43:34:80:e8:90:c6:75:39:ae:8f:67:7a:cd:a7:
09:33:35:59:d3:80:52:8a:ae:71:1b:58:54:40:9a:08:0f:15:
28:f0:2c:32:ea:01:41:4c:04:34:ba:fa:7a:a7:e5:30:35:97:
04:d2:59:d5:9e:3b:f2:e5:c9:37:ed:d9:64:ff:e8:90:b6:1a:
cc:37:5c:bf:a2:5a:49:db:e3:48:9c:d5:eb:a6:1b:15:1f:a0:
16:18:a5:f6:00:48:a2:e6:6c:e7:b7:ed:6d:01:e2:f8:c7:1a:
03:82:a4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 19:00:03 2025 by rpki-client