Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v7Ere2HmKy_VWjVZHCb9llC1AAY.roa
File: v7Ere2HmKy_VWjVZHCb9llC1AAY.roa (raw, json)
Hash identifier: WlVWpfa/H0DfCsL7QJbwGe4//BZAE7blsHLcFG0knH0=
Subject key identifier: BF:B1:2B:7B:61:E6:2B:2F:D5:5A:35:59:1C:26:FD:96:50:B5:00:06
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2496
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v7Ere2HmKy_VWjVZHCb9llC1AAY.roa
Signing time: Mon 10 Feb 2025 14:18:48 +0000
ROA not before: Mon 10 Feb 2025 14:18:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.159.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9366 (0x2496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 10 14:18:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BFB12B7B61E62B2FD55A35591C26FD9650B50006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:63:9e:3f:cc:da:84:e8:3b:05:37:b1:de:b2:
34:ee:00:91:9e:be:29:de:b2:0f:77:8b:48:21:f9:
6d:22:be:c3:15:0b:ef:d9:8a:a5:dd:48:27:8e:8d:
78:0b:d0:c0:55:63:98:df:22:17:da:80:6d:f1:c0:
f7:a4:ed:e1:76:9e:bc:29:d1:01:55:16:43:86:de:
49:85:4f:58:16:d7:b0:f9:3f:d5:b9:9a:fe:2f:9d:
93:06:6d:45:b2:e0:8c:87:1b:53:2f:61:5b:a0:57:
8f:6a:ff:0d:27:32:bc:5c:3e:35:56:67:be:bd:55:
b2:58:41:28:d5:3d:7d:c8:9b:77:7d:e8:45:7b:35:
45:a9:04:e3:fb:ef:0b:16:a3:7e:37:b3:70:0c:20:
f9:ac:3e:0b:07:aa:a3:6a:84:5e:f4:30:c9:a2:23:
90:2d:68:c1:de:57:4d:20:f7:54:0c:a3:7a:65:45:
9f:d5:93:d9:aa:45:23:e7:33:c4:c6:46:56:e6:06:
1b:f7:2e:ac:93:f5:5a:4d:f8:84:b5:55:3a:d2:14:
61:ae:7f:81:61:97:fc:86:92:e6:ec:20:df:a0:2a:
68:23:59:82:51:04:b0:12:42:d2:cb:78:b9:ef:c6:
6b:f2:21:1f:bb:c9:e2:49:2a:ab:5c:c3:1c:40:ad:
5a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B1:2B:7B:61:E6:2B:2F:D5:5A:35:59:1C:26:FD:96:50:B5:00:06
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v7Ere2HmKy_VWjVZHCb9llC1AAY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.96.0/21
Signature Algorithm: sha256WithRSAEncryption
92:e6:bb:70:a7:31:fb:60:ab:29:30:0b:a5:e1:d6:fa:11:c3:
64:0d:fa:ac:fb:ae:99:59:42:11:72:b8:10:f4:72:c6:a0:43:
e8:bf:09:ff:dd:3d:59:f1:8a:dd:cb:a1:c3:85:77:a1:20:78:
e7:47:92:1f:63:5b:30:01:bc:13:33:7c:6a:0e:75:3b:dd:01:
8c:f8:c6:a3:fb:b3:aa:3b:e0:c4:7e:c4:53:b3:88:c6:72:b7:
6c:91:b1:13:17:50:57:0c:1a:fc:ea:ca:5f:58:a4:7d:29:1b:
51:95:62:cd:41:59:b3:10:82:e3:b3:44:c8:ea:76:c1:95:39:
af:5e:d5:1e:3c:0d:76:c7:06:fd:19:87:85:c0:d9:ae:54:e5:
f7:c3:1a:93:31:31:2c:f9:c4:ad:a5:60:13:56:3e:86:1c:0c:
74:ab:a1:c5:88:3c:d1:01:60:6e:2b:98:79:5d:0e:1c:fa:0c:
bc:e9:8d:da:fa:d9:a4:bc:db:70:fb:34:08:b6:c2:65:f3:dd:
22:ce:91:06:a5:37:d3:07:ef:0d:c1:c5:b8:58:f0:e1:67:e6:
29:ba:31:db:17:ab:50:b5:1f:70:c2:9e:d4:62:d5:9c:9b:d9:
3a:0e:ec:c3:d7:4c:3f:d6:cf:d2:b9:b8:51:a6:b0:97:db:9d:
1b:e7:8a:8c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJJYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE4NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJGQjEyQjdCNjFFNjJC
MkZENTVBMzU1OTFDMjZGRDk2NTBCNTAwMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhY54/zNqE6DsFN7HesjTuAJGevinesg93i0gh+W0ivsMVC+/Z
iqXdSCeOjXgL0MBVY5jfIhfagG3xwPek7eF2nrwp0QFVFkOG3kmFT1gW17D5P9W5
mv4vnZMGbUWy4IyHG1MvYVugV49q/w0nMrxcPjVWZ769VbJYQSjVPX3Im3d96EV7
NUWpBOP77wsWo343s3AMIPmsPgsHqqNqhF70MMmiI5AtaMHeV00g91QMo3plRZ/V
k9mqRSPnM8TGRlbmBhv3LqyT9VpN+IS1VTrSFGGuf4Fhl/yGkubsIN+gKmgjWYJR
BLASQtLLeLnvxmvyIR+7yeJJKqtcwxxArVpbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUv7Ere2HmKy/VWjVZHCb9llC1AAYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3Y3RXJlMkhtS3lfVldqVlpI
Q2I5bGxDMUFBWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
n2AwDQYJKoZIhvcNAQELBQADggEBAJLmu3CnMftgqykwC6Xh1voRw2QN+qz7rplZ
QhFyuBD0csagQ+i/Cf/dPVnxit3LocOFd6EgeOdHkh9jWzABvBMzfGoOdTvdAYz4
xqP7s6o74MR+xFOziMZyt2yRsRMXUFcMGvzqyl9YpH0pG1GVYs1BWbMQguOzRMjq
dsGVOa9e1R48DXbHBv0Zh4XA2a5U5ffDGpMxMSz5xK2lYBNWPoYcDHSrocWIPNEB
YG4rmHldDhz6DLzpjdr62aS823D7NAi2wmXz3SLOkQalN9MH7w3BxbhY8OFn5im6
MdsXq1C1H3DCntRi1Zyb2ToO7MPXTD/Wz9K5uFGmsJfbnRvniow=
-----END CERTIFICATE-----
Generated at Sun Jun 22 09:05:41 2025 by rpki-client