Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oAGcI0asWMyhfuseFswmB6ozk5s.roa
File: oAGcI0asWMyhfuseFswmB6ozk5s.roa (raw, json)
Hash identifier: b31HqdpKMQD6xvfW3g1btSNCHH9B7hVfYI5yHdc0ptQ=
Subject key identifier: A0:01:9C:23:46:AC:58:CC:A1:7E:EB:1E:16:CC:26:07:AA:33:93:9B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 238B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oAGcI0asWMyhfuseFswmB6ozk5s.roa
Signing time: Mon 10 Feb 2025 14:17:41 +0000
ROA not before: Mon 10 Feb 2025 14:17:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24165
IP address blocks: 180.218.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9099 (0x238b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 10 14:17:41 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A0019C2346AC58CCA17EEB1E16CC2607AA33939B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:20:fb:fd:c3:d8:c8:08:54:db:06:79:d0:1c:
d8:5d:88:fc:57:5a:3e:5b:2a:81:c4:97:b1:42:05:
1f:61:31:7e:cf:17:f8:a4:ff:01:c2:7b:80:5f:e4:
e0:d6:62:dd:4a:99:2c:2b:a7:65:ff:b7:ca:ac:b9:
a7:de:57:49:80:63:4b:a4:63:66:a0:d8:cc:15:74:
5c:59:96:86:d1:76:c2:19:26:29:92:a2:73:d1:51:
4a:48:9b:f1:67:57:93:b2:47:45:68:3f:71:45:34:
de:fe:39:8d:80:eb:5b:ad:73:ad:ea:4e:d4:e1:f5:
74:53:48:54:ef:cb:16:cd:b8:90:7e:0c:2a:7f:67:
c0:78:cb:17:ad:d1:ef:42:d8:3e:4a:af:e0:7a:33:
8c:fc:b7:e1:47:33:20:8b:8e:32:68:ec:d9:ee:ef:
e2:58:b7:63:60:4a:ee:bc:99:b8:76:b2:f7:96:a6:
f4:0d:17:68:8d:e8:f0:1d:9c:e8:04:51:9c:20:86:
f8:f1:e1:dd:f8:13:34:de:56:f5:a6:1e:c1:d0:00:
43:51:12:fe:95:98:cf:0a:6a:34:b1:a6:73:42:bb:
eb:36:c3:6b:fe:6e:05:5f:7f:11:16:23:75:33:df:
a9:61:3c:30:91:b5:3b:14:62:0b:21:f1:7b:8b:3e:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:01:9C:23:46:AC:58:CC:A1:7E:EB:1E:16:CC:26:07:AA:33:93:9B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oAGcI0asWMyhfuseFswmB6ozk5s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.44.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:c5:bb:62:0d:e5:7a:2a:b3:0a:88:1b:35:62:97:f3:42:d4:
1d:9f:f7:79:94:43:5f:e3:40:6a:77:7e:d3:09:43:7c:f8:9b:
21:ad:7e:23:fb:52:11:66:a2:e0:31:e3:9b:cb:50:c0:7e:4e:
81:ce:17:c2:0f:98:11:c5:6e:d9:da:10:d4:40:57:10:be:c0:
19:55:61:79:c0:0f:d3:70:6b:17:8b:09:49:fb:7f:d4:0c:e6:
e5:de:c7:0d:81:cb:13:96:ea:1f:60:05:a9:94:94:b2:06:2d:
bc:00:b4:15:bc:90:1d:f6:63:8c:41:2c:12:19:ab:ae:be:6a:
32:4f:63:00:fb:bd:c4:77:dd:f7:94:da:ef:b9:a1:e5:df:6f:
59:5d:98:50:6e:ae:79:6d:ce:80:93:76:f1:f2:35:76:c4:0a:
7d:b8:2e:a2:d5:01:3f:05:88:e7:d9:58:fd:87:5d:cf:3b:30:
6e:5c:b9:ba:dc:be:11:e4:02:9d:7a:39:de:d5:e4:d6:ff:9c:
83:fc:1e:45:0d:ca:35:c5:f1:ba:b8:7c:ce:f7:c9:19:1b:57:
14:1a:3e:8b:1c:6a:f9:06:7a:8d:c0:6d:25:b4:d4:c6:e0:14:
7f:b5:69:25:fe:6b:fb:f0:11:3b:2e:fe:59:5a:df:38:64:80:
e9:0a:8d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 09:02:07 2025 by rpki-client