Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YmoqFlzNrcUQET8gUiIekQFcfUQ.roa
File: YmoqFlzNrcUQET8gUiIekQFcfUQ.roa (raw, json)
Hash identifier: ytWyf50bm4SBYXTyjp1yBwpqCkuAj+2S0xe1VJgjgCY=
Subject key identifier: 62:6A:2A:16:5C:CD:AD:C5:10:11:3F:20:52:22:1E:91:01:5C:7D:44
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 24D0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YmoqFlzNrcUQET8gUiIekQFcfUQ.roa
Signing time: Mon 10 Feb 2025 14:19:02 +0000
ROA not before: Mon 10 Feb 2025 14:19:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24165
IP address blocks: 61.64.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9424 (0x24d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 10 14:19:02 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=626A2A165CCDADC510113F2052221E91015C7D44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:1e:9d:4e:26:76:7b:d8:33:d6:03:3b:41:
5f:f4:a6:d6:e2:60:47:34:7e:04:56:da:15:c8:31:
1c:a8:a0:62:c1:a3:12:ba:5f:21:8b:2a:2e:ad:48:
81:04:81:6a:1c:75:3d:47:bc:79:c4:ae:eb:84:54:
18:d6:dd:fe:f3:96:1b:9a:f7:3e:fa:7c:3f:7d:38:
e3:ba:c3:cb:5d:af:c2:46:3c:11:69:ce:34:0d:c7:
7e:b9:cd:ea:7a:03:e1:74:80:32:e2:55:4c:0b:45:
cc:8a:e4:cf:5a:86:f9:98:b3:f5:44:45:4a:de:33:
c3:16:60:95:1a:99:f8:4a:7c:51:e1:30:9f:70:39:
d9:7e:c3:37:51:bb:32:9c:d4:d7:7c:23:94:d7:2d:
f1:e3:4f:23:03:15:f9:72:9d:73:ec:d0:56:08:3d:
59:26:e5:f4:0a:0d:50:68:00:a3:00:0d:4a:2b:58:
47:77:2d:ae:d9:bd:e1:5a:94:6b:93:59:6d:1c:7a:
a4:9c:3f:62:1d:c1:79:2f:0d:75:51:2a:b6:cb:26:
2d:63:8d:42:eb:86:64:ac:d6:9b:6d:82:63:21:b4:
6a:54:a6:8a:95:af:fd:9e:2f:0b:61:82:41:a5:f2:
a7:8f:1a:03:9d:dc:45:85:42:33:ca:73:82:ae:c8:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6A:2A:16:5C:CD:AD:C5:10:11:3F:20:52:22:1E:91:01:5C:7D:44
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YmoqFlzNrcUQET8gUiIekQFcfUQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.16.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:2b:15:38:d2:83:ec:2c:e5:7b:ab:9e:c4:89:aa:dc:ff:00:
60:fd:b8:19:48:59:ab:82:67:28:92:a1:1d:52:b3:31:67:8e:
31:4f:1a:d6:4b:1e:2a:73:1a:77:64:d8:00:5c:d9:0e:9d:34:
b4:f9:01:25:a8:dd:be:a9:12:2d:e8:98:35:9d:19:bf:84:91:
58:c0:81:a1:35:cb:7e:52:51:5f:d6:09:47:68:c0:3b:0a:d2:
fc:1b:65:2d:a3:af:6f:d2:58:ac:30:85:12:37:b6:11:15:c2:
9e:94:bd:75:b6:ca:61:84:ab:1b:99:0a:04:08:83:b9:f7:08:
c9:28:29:56:11:28:c1:51:8e:01:a3:06:39:2f:33:12:0c:62:
0f:ae:67:03:36:8d:fd:7b:15:ac:87:81:e8:61:4d:af:c7:ac:
ff:c7:ae:c8:1d:24:9f:06:82:9e:b0:61:2e:b4:ae:99:62:76:
46:25:e9:8e:27:e3:67:9d:c2:ae:02:c9:da:8a:20:52:6e:a4:
75:e0:ca:60:f0:bc:6d:05:20:98:51:8c:54:ce:49:b2:4d:fa:
5e:33:f8:e4:cb:a3:63:50:7d:33:e8:ef:2e:9b:5e:42:a1:fb:
1c:e0:e5:f6:5c:71:6b:f7:f3:c2:01:f8:5f:b8:0c:61:d3:2d:
2f:ca:53:8b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJNAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE5MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYyNkEyQTE2NUNDREFE
QzUxMDExM0YyMDUyMjIxRTkxMDE1QzdENDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMah6dTiZ2e9gz1gM7QV/0ptbiYEc0fgRW2hXIMRyooGLBoxK6
XyGLKi6tSIEEgWocdT1HvHnEruuEVBjW3f7zlhua9z76fD99OOO6w8tdr8JGPBFp
zjQNx365zep6A+F0gDLiVUwLRcyK5M9ahvmYs/VERUreM8MWYJUamfhKfFHhMJ9w
Odl+wzdRuzKc1Nd8I5TXLfHjTyMDFflynXPs0FYIPVkm5fQKDVBoAKMADUorWEd3
La7ZveFalGuTWW0ceqScP2IdwXkvDXVRKrbLJi1jjULrhmSs1pttgmMhtGpUpoqV
r/2eLwthgkGl8qePGgOd3EWFQjPKc4KuyMMnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYmoqFlzNrcUQET8gUiIekQFcfUQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1ltb3FGbHpOcmNVUUVUOGdV
aUlla1FGY2ZVUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9
QBAwDQYJKoZIhvcNAQELBQADggEBAA4rFTjSg+ws5XurnsSJqtz/AGD9uBlIWauC
ZyiSoR1SszFnjjFPGtZLHipzGndk2ABc2Q6dNLT5ASWo3b6pEi3omDWdGb+EkVjA
gaE1y35SUV/WCUdowDsK0vwbZS2jr2/SWKwwhRI3thEVwp6UvXW2ymGEqxuZCgQI
g7n3CMkoKVYRKMFRjgGjBjkvMxIMYg+uZwM2jf17FayHgehhTa/HrP/HrsgdJJ8G
gp6wYS60rplidkYl6Y4n42edwq4CydqKIFJupHXgymDwvG0FIJhRjFTOSbJN+l4z
+OTLo2NQfTPo7y6bXkKh+xzg5fZccWv388IB+F+4DGHTLS/KU4s=
-----END CERTIFICATE-----
Generated at Sun Jun 22 23:18:11 2025 by rpki-client