Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uId1xSEWeoXAKT9qZdwO8R761lU.roa
File: uId1xSEWeoXAKT9qZdwO8R761lU.roa (raw, json)
Hash identifier: UA06BSMob0jYfPvjHEjfjUmvd1CLENHICOJgfSgkz40=
Subject key identifier: B8:87:75:C5:21:16:7A:85:C0:29:3F:6A:65:DC:0E:F1:1E:FA:D6:55
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 247D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uId1xSEWeoXAKT9qZdwO8R761lU.roa
Signing time: Mon 10 Feb 2025 14:18:42 +0000
ROA not before: Mon 10 Feb 2025 14:18:42 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.158.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9341 (0x247d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 10 14:18:42 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B88775C521167A85C0293F6A65DC0EF11EFAD655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f4:d8:b3:c6:12:0a:42:54:f2:46:50:df:e9:
8e:a0:27:c4:3d:86:b4:0c:d1:42:74:99:bc:dd:b2:
c0:7b:a2:c5:28:f0:5d:47:c4:69:f6:6b:90:75:bc:
33:17:be:c1:7e:cb:39:0e:1b:c0:6e:32:08:78:29:
60:ff:4b:dc:8e:2b:df:5b:98:1b:13:22:99:8f:f1:
ed:91:cf:74:ee:6a:ef:26:68:ef:e9:77:6f:87:71:
4b:23:0b:cf:48:8d:a5:1c:d2:d5:a3:83:c7:55:68:
84:d8:62:fd:0d:c8:ef:d3:0e:6b:e3:92:52:64:4e:
bb:5a:1e:cc:99:78:c6:f1:75:af:54:a7:99:42:fd:
a1:72:84:71:ce:45:a7:c8:78:98:c3:aa:87:f5:44:
58:5d:ae:39:3a:d7:85:84:fd:53:e2:7a:dd:b0:1d:
1f:53:0c:1e:16:a6:69:14:e2:73:41:32:80:44:f4:
d1:6a:3f:b1:45:c7:29:94:d1:30:e8:8a:8a:e0:cb:
e2:a3:75:7e:f2:18:58:90:d0:0f:a9:db:7f:1e:c7:
00:0e:75:15:ae:f5:ac:4e:f0:4d:41:f3:7a:9f:9f:
d0:91:1f:98:b0:16:94:c1:48:d3:f5:f9:80:9a:e0:
12:13:31:18:49:0c:42:d2:14:9e:a1:55:4e:e6:74:
40:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:87:75:C5:21:16:7A:85:C0:29:3F:6A:65:DC:0E:F1:1E:FA:D6:55
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uId1xSEWeoXAKT9qZdwO8R761lU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.76.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:a9:f7:a3:d0:03:64:d8:15:af:c9:32:6c:fc:3a:3d:91:0d:
26:1d:4e:be:2b:69:4f:88:65:c6:ab:a3:0a:13:5b:4c:e1:aa:
ad:ba:8b:c9:a4:62:79:98:f9:bf:8f:2e:81:c4:a8:27:f0:80:
25:e9:20:9c:53:3f:16:27:8c:d5:07:d0:a6:af:b3:c0:b8:e5:
4f:f5:51:30:7b:c1:9f:1c:69:7c:5b:ad:d5:66:83:22:51:a6:
77:46:6e:2c:96:5b:a2:13:7e:6b:1b:25:f3:03:e1:94:2a:b8:
47:ac:5d:d3:21:62:90:b0:13:fa:39:89:0c:af:8a:48:1e:a5:
3f:26:00:b5:a6:8c:e5:e2:01:6e:6f:30:e3:3e:a8:4c:05:dd:
68:2e:73:d4:2c:08:80:6a:55:af:b4:e2:19:b2:fb:34:8e:a7:
20:e1:0f:36:54:38:e4:22:a4:f8:36:dc:7b:03:a4:56:b8:13:
4e:e9:60:ba:de:7e:d6:64:16:ff:4d:46:6a:2d:ca:6b:92:9d:
c0:3b:d6:cb:b9:76:6e:ad:4f:97:55:9f:b9:9e:69:11:0d:5e:
bf:86:b7:39:dc:49:48:95:97:6d:d7:10:07:de:11:5f:99:5f:
c6:4a:90:14:b4:1e:44:9f:03:09:a8:61:cd:d1:97:59:35:98:
75:dd:44:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 13:38:45 2025 by rpki-client