Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PADpbIsRUwukCfs7XUP2_uV02l4.roa
File: PADpbIsRUwukCfs7XUP2_uV02l4.roa (raw, json)
Hash identifier: a1Yq2tFN9paPD7F8ALthozEUplSLFXlvcxAsI7gkqvU=
Subject key identifier: 3C:00:E9:6C:8B:11:53:0B:A4:09:FB:3B:5D:43:F6:FE:E5:74:DA:5E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2352
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PADpbIsRUwukCfs7XUP2_uV02l4.roa
Signing time: Mon 10 Feb 2025 14:17:28 +0000
ROA not before: Mon 10 Feb 2025 14:17:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 180.218.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9042 (0x2352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 10 14:17:28 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3C00E96C8B11530BA409FB3B5D43F6FEE574DA5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c5:f9:c5:6b:9c:08:df:06:d2:da:fd:5c:2b:
d6:99:d3:36:67:69:87:3b:e0:38:5b:76:26:7e:5c:
a4:98:82:e4:17:e0:e0:c8:ec:8b:98:d2:3f:03:d2:
51:17:82:3a:e0:cb:d6:fc:15:4f:15:f7:f1:c8:00:
73:bf:ce:b0:84:85:c2:c1:39:a6:76:4f:da:88:49:
fa:79:8a:71:e1:85:a5:7e:73:17:51:6d:d7:df:7b:
0b:67:d0:00:af:51:4e:05:a9:52:3f:e1:ad:ae:3e:
6c:e0:90:91:d2:08:30:c2:98:53:39:b9:11:cd:8d:
ad:8c:07:ee:b5:67:8a:20:19:06:3e:4b:6f:65:0d:
60:eb:23:26:35:87:79:3e:c6:8c:43:13:84:cd:68:
aa:fe:b2:a1:db:77:2d:09:86:80:da:0d:29:0e:ca:
a5:85:3f:2d:23:37:e9:21:04:e4:ba:f3:95:a6:c0:
d6:fd:fa:1e:21:34:e5:36:b9:e9:65:86:f3:aa:a1:
e0:d6:a0:3a:d6:33:f9:86:a5:7b:c6:b0:04:7c:d1:
6a:b8:a7:96:a8:64:bd:98:21:0d:8e:62:aa:41:66:
43:4c:1c:b8:d3:42:7f:40:3e:98:b9:de:1d:b7:8f:
82:71:18:b8:9d:37:1e:35:d1:47:06:ef:0e:2b:7d:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:00:E9:6C:8B:11:53:0B:A4:09:FB:3B:5D:43:F6:FE:E5:74:DA:5E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PADpbIsRUwukCfs7XUP2_uV02l4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.135.0/24
Signature Algorithm: sha256WithRSAEncryption
03:04:5a:a8:d7:fe:e0:5f:42:e1:d9:16:6c:b6:bb:05:33:7b:
c7:7a:51:b0:bd:9b:32:b9:35:1d:ed:f8:fe:cc:92:fb:f9:f7:
a3:77:f4:25:a4:47:9a:51:2a:cd:11:5b:d5:91:fe:f3:cc:4b:
e0:64:a5:fe:61:ad:d8:a7:15:69:ff:b3:17:36:59:8a:23:38:
2d:55:68:fb:b3:81:63:01:2f:ca:3f:33:86:38:9e:46:14:77:
21:e7:9f:48:91:b0:97:40:18:6a:95:11:37:a0:99:23:50:b0:
6c:e8:c4:da:32:86:d1:c7:54:75:66:7b:75:ac:bb:94:df:81:
ac:a5:d9:d0:1a:26:d0:d0:df:58:d2:35:33:84:e0:e2:56:96:
cb:cc:5f:ab:52:3a:b9:dd:7e:3c:a9:51:12:75:eb:e6:70:87:
38:e4:e4:63:9a:53:26:ee:0c:87:d5:b8:c6:43:cb:73:0f:08:
9f:ac:b9:04:db:f9:57:6d:ca:62:b7:9f:f6:da:72:d0:57:7b:
99:95:79:86:72:9c:94:96:c4:f9:12:30:d5:cf:8f:9a:8f:73:
e2:90:4d:46:b5:f1:23:69:e8:84:ef:30:9d:dc:8e:6e:9b:5c:
02:91:a2:40:57:19:89:bc:f6:6b:e6:4e:07:46:ad:b9:b0:a2:
03:cf:91:eb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICI1IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE3MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNDMDBFOTZDOEIxMTUz
MEJBNDA5RkIzQjVENDNGNkZFRTU3NERBNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnxfnFa5wI3wbS2v1cK9aZ0zZnaYc74DhbdiZ+XKSYguQX4ODI
7IuY0j8D0lEXgjrgy9b8FU8V9/HIAHO/zrCEhcLBOaZ2T9qISfp5inHhhaV+cxdR
bdffewtn0ACvUU4FqVI/4a2uPmzgkJHSCDDCmFM5uRHNja2MB+61Z4ogGQY+S29l
DWDrIyY1h3k+xoxDE4TNaKr+sqHbdy0JhoDaDSkOyqWFPy0jN+khBOS685WmwNb9
+h4hNOU2uellhvOqoeDWoDrWM/mGpXvGsAR80Wq4p5aoZL2YIQ2OYqpBZkNMHLjT
Qn9APpi53h23j4JxGLidNx410UcG7w4rfQ/3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPADpbIsRUwukCfs7XUP2/uV02l4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1BBRHBiSXNSVXd1a0NmczdY
VVAyX3VWMDJsNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2ocwDQYJKoZIhvcNAQELBQADggEBAAMEWqjX/uBfQuHZFmy2uwUze8d6UbC9mzK5
NR3t+P7Mkvv596N39CWkR5pRKs0RW9WR/vPMS+Bkpf5hrdinFWn/sxc2WYojOC1V
aPuzgWMBL8o/M4Y4nkYUdyHnn0iRsJdAGGqVETegmSNQsGzoxNoyhtHHVHVme3Ws
u5Tfgayl2dAaJtDQ31jSNTOE4OJWlsvMX6tSOrndfjypURJ16+Zwhzjk5GOaUybu
DIfVuMZDy3MPCJ+suQTb+VdtymK3n/bactBXe5mVeYZynJSWxPkSMNXPj5qPc+KQ
TUa18SNp6ITvMJ3cjm6bXAKRokBXGYm89mvmTgdGrbmwogPPkes=
-----END CERTIFICATE-----
Generated at Thu Jul 24 12:15:21 2025 by rpki-client