Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jtt8p7sK738_XAoBbBN3k24m9HQ.roa
File: Jtt8p7sK738_XAoBbBN3k24m9HQ.roa (raw, json)
Hash identifier: vNvyVLARCq2pdG/fb9vQP00cSGSFk3yHEk3GS6NJKT8=
Subject key identifier: 26:DB:7C:A7:BB:0A:EF:7F:3F:5C:0A:01:6C:13:77:93:6E:26:F4:74
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 22AE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jtt8p7sK738_XAoBbBN3k24m9HQ.roa
Signing time: Mon 26 Aug 2024 05:34:15 +0000
ROA not before: Mon 26 Aug 2024 05:34:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 114.198.176.0/20 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8878 (0x22ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:15 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=26DB7CA7BB0AEF7F3F5C0A016C1377936E26F474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:14:7d:2e:1d:2b:32:fb:c8:73:a3:c6:d4:
96:e8:e2:30:67:62:4b:40:fb:70:2b:a2:e2:1c:1e:
b0:33:7d:55:d8:9d:a3:d7:16:60:e1:07:fb:43:17:
7d:38:09:ee:8c:47:6b:94:d2:a8:49:bb:c2:57:b5:
43:03:40:9a:71:60:fd:9f:fa:24:30:5b:7f:4a:5e:
c8:ed:3e:a2:56:34:39:8a:52:05:39:fc:3c:25:b2:
8a:17:55:b4:2f:11:16:c1:d7:97:88:f6:f3:d9:d6:
7a:53:b0:54:7d:c5:76:00:8c:80:89:68:45:0f:4a:
cd:a1:e5:f5:d4:cd:f2:87:46:eb:b0:38:2b:af:58:
ea:40:ac:19:9f:d0:fd:a4:0b:0a:16:11:3b:73:92:
84:f0:d6:e7:83:b1:38:67:db:1b:75:c1:f6:f3:a0:
9d:14:17:b3:76:01:03:27:fd:56:c7:10:98:d7:8b:
d5:6f:fb:c0:6d:fc:74:31:f9:e0:e2:35:9e:4d:2d:
c4:55:6b:5a:02:57:9f:c3:5d:05:50:39:0a:a8:c3:
9b:33:60:da:a4:ba:69:10:2a:20:16:c3:1a:85:b4:
89:96:08:b7:b5:33:1e:b7:c1:93:9c:12:8d:0f:bb:
98:0d:ce:61:49:40:04:17:10:34:64:b2:6f:ab:02:
18:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DB:7C:A7:BB:0A:EF:7F:3F:5C:0A:01:6C:13:77:93:6E:26:F4:74
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jtt8p7sK738_XAoBbBN3k24m9HQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.176.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:f5:64:8f:1f:b4:5f:a7:2e:88:dc:ae:00:ad:a5:ef:a6:79:
ad:62:b0:f8:95:da:28:4b:5c:f5:81:0c:35:ff:62:86:14:8f:
52:d6:6a:8d:36:c0:6a:ab:3e:64:ad:8d:54:82:a2:16:66:f6:
2f:6b:3c:c8:88:b8:a8:18:e1:2f:28:12:b3:66:ae:fc:cd:0a:
a2:55:1d:e8:37:9f:85:04:71:45:76:58:00:bc:17:8b:dc:43:
01:82:73:1d:4c:50:d0:18:6a:d9:a9:2f:d0:e2:6c:20:c9:1d:
7e:b2:46:9b:ee:57:b2:22:2e:4e:bd:91:b6:f4:d0:d8:d8:42:
23:27:f9:9f:30:d2:fe:a5:33:c9:f6:ae:92:86:ce:d9:95:aa:
eb:8b:d7:e8:49:08:cb:43:8f:99:6a:38:9d:0a:0f:26:61:fa:
df:1c:59:93:e9:ce:bf:a3:27:64:c9:27:1d:e5:52:8e:cb:48:
33:26:2d:11:db:96:b1:09:74:da:4f:2e:81:e9:0c:49:72:95:
3b:88:6e:65:95:6b:63:62:c9:6a:d4:28:37:04:bd:9a:ba:b7:
9c:6e:ab:2c:0d:1d:f8:f1:0e:cf:b1:f2:e2:52:d8:5d:d9:92:
1f:f0:79:72:5e:d5:9f:8d:63:e8:fe:9e:30:64:26:ce:4e:5a:
71:51:77:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:56:43 2025 by rpki-client