Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jBNXDBuqnoTwHBQg-2RdFK6GbJQ.roa
File: jBNXDBuqnoTwHBQg-2RdFK6GbJQ.roa (raw, json)
Hash identifier: y1LvF/wtAFfpXK0ul1MnGxcM7m7A39YXi8bQ8KpCXs4=
Subject key identifier: 8C:13:57:0C:1B:AA:9E:84:F0:1C:14:20:FB:64:5D:14:AE:86:6C:94
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2439
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jBNXDBuqnoTwHBQg-2RdFK6GbJQ.roa
Signing time: Mon 10 Feb 2025 14:18:24 +0000
ROA not before: Mon 10 Feb 2025 14:18:24 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 211.76.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9273 (0x2439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 10 14:18:24 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8C13570C1BAA9E84F01C1420FB645D14AE866C94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:da:69:74:7a:2c:f5:41:e9:bf:12:e6:35:
f9:4e:bd:b3:63:9a:f1:7e:4e:b2:3d:7f:de:0f:f8:
12:c8:f3:2d:47:ef:90:65:9d:c6:65:7e:b3:75:26:
a0:af:c4:4e:f2:7f:69:20:0d:e4:86:a2:1e:89:d5:
bf:78:83:5b:06:03:ac:56:db:e5:c1:4c:55:a7:c8:
2c:f4:0d:13:49:ed:ec:01:51:47:a2:cb:12:72:69:
6e:bb:0d:2f:dd:8c:f3:5a:00:5a:15:2a:d3:cf:2e:
b6:06:eb:22:fe:4d:bd:07:36:07:e6:25:84:22:81:
26:54:11:07:ba:1f:87:94:df:3c:73:c1:2c:5e:ca:
b7:2b:38:28:b9:d0:21:ad:31:a5:88:7e:92:95:f6:
1f:c6:07:c9:af:4f:4e:0b:27:fc:eb:a5:6a:b0:83:
15:0e:1e:fd:96:cb:fe:09:73:53:88:52:58:41:c0:
81:15:77:7b:cc:6b:d5:c8:e7:ac:07:c7:cf:f7:9c:
6d:c4:b1:e5:37:50:72:c6:ec:d6:d6:6f:ac:09:17:
f8:fe:e6:eb:dc:ac:ed:16:4c:78:8b:37:42:53:64:
c9:ef:8c:9a:a5:fa:31:8f:a8:99:f1:9e:3f:a5:1f:
74:be:ff:1c:d9:e7:59:58:2c:e5:b4:b4:a4:29:a8:
56:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:13:57:0C:1B:AA:9E:84:F0:1C:14:20:FB:64:5D:14:AE:86:6C:94
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jBNXDBuqnoTwHBQg-2RdFK6GbJQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.76.0/24
Signature Algorithm: sha256WithRSAEncryption
82:86:bf:f9:01:c4:a4:0d:51:89:6e:1c:5d:29:19:c6:bd:33:
39:de:bb:d5:e0:a1:a7:a8:07:7f:d8:1b:cd:6c:9d:49:2e:0c:
41:61:f0:ed:9b:48:1f:44:0c:f5:a9:d7:e5:dd:9f:8a:52:0d:
e3:98:3b:03:af:82:ff:f8:aa:0f:23:ed:5d:35:67:69:3d:ce:
af:19:b4:60:b2:ba:9d:60:4e:ee:73:38:01:c6:41:cc:e3:c1:
31:6d:40:23:21:fd:c8:cf:4a:f9:74:9a:f4:c7:dc:eb:91:cc:
2e:c7:78:5e:33:e8:7f:f6:2f:08:c5:84:62:25:7a:da:3d:f9:
95:f8:25:8e:20:46:cf:04:ae:f6:62:35:e5:19:b1:af:5a:34:
d1:31:b8:c1:2e:ff:4b:01:e2:fa:c2:d2:c3:66:14:77:4d:89:
44:c1:5d:db:22:5a:ab:76:b9:f9:49:27:cc:de:27:1c:b9:6b:
d5:ed:a6:18:f9:be:eb:68:6c:1e:87:d6:ab:8c:48:b1:10:f4:
91:82:d2:0c:f8:13:a7:f8:ee:00:be:53:d0:2a:59:95:e5:e8:
80:a4:ce:c5:6b:3a:b7:58:da:31:f3:7a:75:b3:42:f3:40:de:
70:50:d2:e1:e7:15:03:fd:d8:b0:f5:c8:ba:ba:af:80:75:51:
32:95:a7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 09:01:50 2025 by rpki-client