Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3ZcrXBZKR0M3lOP5o8r2EHNie5A.roa
File: 3ZcrXBZKR0M3lOP5o8r2EHNie5A.roa (raw, json)
Hash identifier: Gxrx6GsSOUHUbsfxWaRC3OV0/6kDQbvBt0jeqm2hisY=
Subject key identifier: DD:97:2B:5C:16:4A:47:43:37:94:E3:F9:A3:CA:F6:10:73:62:7B:90
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 21E3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3ZcrXBZKR0M3lOP5o8r2EHNie5A.roa
Signing time: Mon 26 Aug 2024 05:33:26 +0000
ROA not before: Mon 26 Aug 2024 05:33:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 61.58.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8675 (0x21e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:26 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DD972B5C164A47433794E3F9A3CAF61073627B90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:5e:38:7d:4d:18:57:8d:24:fe:e2:e2:d0:
74:d3:9a:4f:b2:1a:98:b8:36:83:ed:97:f7:1c:2c:
a3:a7:96:d9:4b:01:b7:a1:2b:84:d1:71:64:e7:5d:
d2:c5:49:59:c2:12:49:52:a8:b0:c1:0c:98:af:fd:
4c:4a:94:8d:d7:71:08:57:72:e8:28:56:3d:87:79:
f9:ee:94:b0:51:99:55:3e:48:80:e1:3c:7d:60:74:
79:cc:ea:fd:a5:68:b8:2b:c3:3a:59:b5:ce:1e:ed:
a8:99:d7:ac:5a:26:71:83:e7:4a:8a:6d:dc:56:df:
8f:71:8c:b6:48:46:cc:6f:c1:a8:68:1c:bd:5c:90:
c7:1a:6d:74:94:66:f1:09:3a:5c:ed:a0:cf:90:cd:
6d:03:45:d1:af:98:f3:5a:14:4e:d3:de:d1:86:da:
fd:3d:dd:b3:d1:73:cc:83:d6:60:73:f4:ca:b0:f6:
e1:a0:f6:2d:67:40:57:17:d7:8e:25:bc:d5:1d:c9:
17:63:f2:a3:bf:54:77:3c:2f:8c:6c:27:fb:ca:b1:
c0:aa:1a:da:68:91:96:01:cd:59:e8:17:1a:a5:03:
dd:43:6d:b3:49:5d:2e:6b:cd:db:5e:69:2c:9d:f7:
ab:2a:3f:ba:c1:6c:b8:05:5e:d0:a9:8f:a9:40:43:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:97:2B:5C:16:4A:47:43:37:94:E3:F9:A3:CA:F6:10:73:62:7B:90
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3ZcrXBZKR0M3lOP5o8r2EHNie5A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.96.0/20
Signature Algorithm: sha256WithRSAEncryption
51:2f:7b:11:5e:b5:db:45:3c:03:44:83:84:23:44:96:3f:8b:
61:de:a1:8e:85:78:6c:32:f5:3e:6c:ba:c1:09:57:d1:ce:e2:
69:62:a6:1a:a7:25:5e:e6:24:4a:87:1f:d5:2d:4e:e2:66:07:
c8:0b:40:ac:0f:16:9c:93:a2:51:ab:fd:a8:8c:9b:fb:39:d4:
0b:a6:0d:19:59:f4:f4:3a:85:b5:47:5b:97:dc:2c:6c:92:1a:
f7:ab:16:f3:17:5e:f6:68:fd:7b:aa:46:9a:1b:06:e4:00:57:
41:86:90:fb:4a:fb:1a:26:9f:16:e1:84:4c:2b:47:f6:84:82:
6c:0c:10:7f:bc:28:81:72:0f:ea:66:22:ba:2d:70:d7:d4:c1:
d0:9d:d8:d4:f0:54:ec:8b:b0:0b:bf:60:85:2d:5c:95:a8:3a:
af:39:c8:aa:2e:36:c7:e8:27:84:02:18:11:01:aa:19:89:87:
94:0f:34:04:ea:fd:f8:75:9e:37:1f:a4:1a:07:84:79:46:d7:
20:38:b2:f3:64:cc:84:ab:03:2a:4d:af:d7:b3:24:bb:89:a3:
9f:e3:5f:bd:ab:c1:56:73:8c:d3:c1:5e:a4:e1:a4:22:ce:6d:
3a:73:50:6d:e0:cc:40:4a:17:ec:d4:36:21:45:54:89:26:b9:
a0:14:17:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:50:09 2025 by rpki-client