Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xJJfZkucJKpjIhKMP11235kanH8.roa
File: xJJfZkucJKpjIhKMP11235kanH8.roa (raw, json)
Hash identifier: d1ZkvwAf87o86yz6uETQqbB1UQkXka7Dia7/LdZD3GQ=
Subject key identifier: C4:92:5F:66:4B:9C:24:AA:63:22:12:8C:3F:5D:76:DF:99:1A:9C:7F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2295
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xJJfZkucJKpjIhKMP11235kanH8.roa
Signing time: Mon 26 Aug 2024 05:34:09 +0000
ROA not before: Mon 26 Aug 2024 05:34:09 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 61.64.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8853 (0x2295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:34:09 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C4925F664B9C24AA6322128C3F5D76DF991A9C7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ce:69:e9:93:24:e9:f3:56:83:9e:a6:e6:b4:
df:1d:b6:93:c3:9a:26:47:a4:25:bd:58:ac:33:e0:
a6:6e:8f:07:90:a4:2f:9c:6d:54:a1:b6:c0:44:42:
4b:24:89:07:04:d5:6d:30:25:ca:37:19:44:32:7c:
17:92:e3:0e:7e:74:c9:df:e9:e4:fb:d8:02:7c:88:
a4:56:91:a0:58:34:99:cb:d8:95:82:4c:7f:86:e3:
5e:d8:2f:3f:3a:90:79:ce:ad:ec:d0:d4:86:ee:0a:
cc:36:2e:56:f3:1d:83:3d:07:63:42:16:60:15:54:
c6:51:8b:b5:e2:29:2e:7e:98:8c:78:2e:ce:cf:db:
98:58:c3:8a:e5:36:a0:4d:c8:7d:41:3b:d1:9f:50:
0f:ad:4e:1a:c3:80:cf:83:54:aa:67:f8:82:ce:96:
03:4c:fe:aa:31:af:04:26:ff:cc:c9:5c:db:ab:a9:
69:b4:0b:55:61:7c:58:38:fc:6b:fe:85:fe:7e:fc:
a8:1e:f5:66:bd:25:83:a0:9c:4b:72:98:74:dd:74:
0a:3c:af:b1:02:18:7e:4e:f1:a1:24:8d:47:51:6d:
0b:79:95:fb:04:ab:d9:4b:16:06:54:b8:a3:70:a2:
a4:ab:d2:e7:29:5a:4f:cd:41:b1:06:3d:08:79:fb:
64:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:92:5F:66:4B:9C:24:AA:63:22:12:8C:3F:5D:76:DF:99:1A:9C:7F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xJJfZkucJKpjIhKMP11235kanH8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.24.0/22
Signature Algorithm: sha256WithRSAEncryption
31:6d:d2:66:1d:1f:38:47:33:48:b2:f1:68:c4:a3:53:3f:4a:
f1:5c:4c:65:76:44:a8:83:e2:b5:7e:7d:64:1c:63:e8:f3:80:
f7:49:2e:74:49:b2:94:b3:fb:f6:fc:47:8d:dc:d8:be:94:e0:
82:ae:6e:db:02:5d:c7:87:17:2d:9a:a7:77:71:88:17:28:1a:
6c:30:db:0d:83:2e:7a:73:49:05:65:99:bd:4e:9e:91:06:38:
a1:f2:75:4d:1c:04:78:49:bd:4d:53:71:9d:d6:2f:b7:d8:88:
ab:5b:37:6b:54:97:31:6b:1a:74:a3:87:50:c0:be:7d:3f:13:
4f:37:f2:c1:2f:4c:12:d6:a6:9f:b2:6d:2b:c0:f7:2f:5c:1d:
11:8a:95:6d:3f:64:b3:d6:52:05:e2:d8:2f:82:21:a1:22:46:
13:0a:1f:70:d5:bd:7b:d2:13:d2:6b:14:01:1b:3f:05:29:52:
ad:a5:7c:e6:46:26:f9:9f:49:79:78:6d:9c:21:c7:58:f2:6a:
66:7c:a6:db:0e:34:ff:b8:8c:43:10:94:12:0b:53:e0:c1:34:
ce:32:16:ec:cc:59:60:07:b2:5a:6d:5b:c5:f0:ee:29:8a:ce:
3b:87:23:4d:58:49:a8:43:a9:15:b1:31:5e:68:1f:ab:44:c9:
10:86:d7:1e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIpUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw
NTM0MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM0OTI1RjY2NEI5QzI0
QUE2MzIyMTI4QzNGNUQ3NkRGOTkxQTlDN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDuzmnpkyTp81aDnqbmtN8dtpPDmiZHpCW9WKwz4KZujweQpC+c
bVShtsBEQkskiQcE1W0wJco3GUQyfBeS4w5+dMnf6eT72AJ8iKRWkaBYNJnL2JWC
TH+G417YLz86kHnOrezQ1IbuCsw2LlbzHYM9B2NCFmAVVMZRi7XiKS5+mIx4Ls7P
25hYw4rlNqBNyH1BO9GfUA+tThrDgM+DVKpn+ILOlgNM/qoxrwQm/8zJXNurqWm0
C1VhfFg4/Gv+hf5+/Kge9Wa9JYOgnEtymHTddAo8r7ECGH5O8aEkjUdRbQt5lfsE
q9lLFgZUuKNwoqSr0ucpWk/NQbEGPQh5+2THAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUxJJfZkucJKpjIhKMP11235kanH8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3hKSmZaa3VjSktwakloS01Q
MTEyMzVrYW5IOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
QBgwDQYJKoZIhvcNAQELBQADggEBADFt0mYdHzhHM0iy8WjEo1M/SvFcTGV2RKiD
4rV+fWQcY+jzgPdJLnRJspSz+/b8R43c2L6U4IKubtsCXceHFy2ap3dxiBcoGmww
2w2DLnpzSQVlmb1OnpEGOKHydU0cBHhJvU1TcZ3WL7fYiKtbN2tUlzFrGnSjh1DA
vn0/E0838sEvTBLWpp+ybSvA9y9cHRGKlW0/ZLPWUgXi2C+CIaEiRhMKH3DVvXvS
E9JrFAEbPwUpUq2lfOZGJvmfSXl4bZwhx1jyamZ8ptsONP+4jEMQlBILU+DBNM4y
FuzMWWAHslptW8Xw7imKzjuHI01YSahDqRWxMV5oH6tEyRCG1x4=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:57:06 2025 by rpki-client