Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/y_za9ZBHJiB1J9Hg-TUFAVPLY2k.roa
File: y_za9ZBHJiB1J9Hg-TUFAVPLY2k.roa (raw, json)
Hash identifier: 0xpEbFgVDPzsJxafE5Twvo5m+V4djkXdF9ElzL4kp/A=
Subject key identifier: CB:FC:DA:F5:90:47:26:20:75:27:D1:E0:F9:35:05:01:53:CB:63:69
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 24B2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/y_za9ZBHJiB1J9Hg-TUFAVPLY2k.roa
Signing time: Mon 10 Feb 2025 14:18:54 +0000
ROA not before: Mon 10 Feb 2025 14:18:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 49.158.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9394 (0x24b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 10 14:18:54 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CBFCDAF5904726207527D1E0F935050153CB6369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:2f:09:08:f8:b3:55:a9:e1:f9:72:ca:1e:
92:66:19:0e:a6:4b:8c:61:5a:6e:e8:20:56:de:98:
a4:d9:22:54:23:e7:21:b1:ef:71:45:83:08:8d:1e:
9a:6a:4d:62:d4:7d:5c:0b:5b:a7:27:21:8d:69:c1:
c6:3e:d8:09:f8:c2:54:7e:81:d4:45:12:16:4a:7d:
f3:a3:1d:81:c8:81:3b:3c:ba:67:bc:15:c4:53:7f:
40:c9:8d:4b:f1:14:04:c6:79:76:fe:64:80:39:62:
c7:2c:09:5d:a9:52:a0:7a:62:ea:15:60:36:31:5a:
79:e0:d9:f9:8c:e1:7d:ba:94:3e:85:82:3c:d1:6d:
06:e3:d3:25:8a:c5:77:11:d6:59:c4:09:55:fe:37:
fd:dc:ae:b4:c4:c0:8b:d1:c6:cc:fb:d4:fa:d1:b6:
26:53:d6:fc:bc:ae:4c:c4:13:fd:c0:00:80:81:29:
a8:7d:a4:c3:ea:b5:bb:2e:bb:ce:64:85:51:d6:77:
50:7a:88:f3:34:a6:83:56:dc:d4:41:bb:c9:35:0b:
d0:d7:a2:ce:57:f0:84:1c:8f:fd:0a:de:f9:63:8b:
eb:59:7f:af:a9:26:34:7d:91:f9:4f:6e:b3:9b:f7:
5d:c4:2c:1f:92:d3:ac:6e:55:c7:fa:e3:c0:64:59:
f8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FC:DA:F5:90:47:26:20:75:27:D1:E0:F9:35:05:01:53:CB:63:69
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/y_za9ZBHJiB1J9Hg-TUFAVPLY2k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.136.0/24
Signature Algorithm: sha256WithRSAEncryption
93:96:d4:9f:b7:25:b3:18:70:24:1c:e2:0a:bb:db:3f:b3:20:
b3:25:9d:09:11:e6:d5:de:ce:25:cf:3c:24:ee:0d:47:ef:eb:
5e:cc:96:79:0d:44:51:68:37:cd:6d:33:26:ef:d1:e1:20:59:
f6:9e:48:28:f6:d8:6b:7e:f7:c0:dd:01:9c:7f:8e:26:a2:00:
b1:a1:2d:17:6a:cb:5a:67:cf:ab:96:12:98:4f:2d:e8:f5:6c:
06:b0:5c:1a:39:5f:70:32:4d:49:a1:11:97:e0:de:6c:31:c9:
5a:8b:5f:c5:e1:27:e9:e3:d6:83:5e:4d:2d:80:70:7a:cf:c6:
fc:f1:65:10:a5:06:d4:a0:3b:30:54:d5:79:e5:32:af:15:9f:
63:9b:31:13:9d:da:73:0f:51:55:e0:eb:4a:66:53:eb:90:6e:
1e:b4:db:4e:fa:3b:3a:56:0c:04:a3:05:08:f0:aa:dd:a3:f1:
58:bd:a6:de:25:e2:91:eb:bf:ab:db:00:41:9e:21:27:3d:8b:
31:fa:8a:50:e7:d8:32:37:68:9e:cc:a6:ae:50:a3:73:6a:98:
f4:13:9e:e5:97:b9:c6:b9:12:f5:66:25:b9:fb:40:46:ab:f6:
a9:ef:48:c9:e9:f0:bf:c3:ad:8c:e1:69:29:96:cb:40:29:97:
94:5d:0b:db
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJLIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE4NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENCRkNEQUY1OTA0NzI2
MjA3NTI3RDFFMEY5MzUwNTAxNTNDQjYzNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBly8JCPizVanh+XLKHpJmGQ6mS4xhWm7oIFbemKTZIlQj5yGx
73FFgwiNHppqTWLUfVwLW6cnIY1pwcY+2An4wlR+gdRFEhZKffOjHYHIgTs8ume8
FcRTf0DJjUvxFATGeXb+ZIA5YscsCV2pUqB6YuoVYDYxWnng2fmM4X26lD6FgjzR
bQbj0yWKxXcR1lnECVX+N/3crrTEwIvRxsz71PrRtiZT1vy8rkzEE/3AAICBKah9
pMPqtbsuu85khVHWd1B6iPM0poNW3NRBu8k1C9DXos5X8IQcj/0K3vlji+tZf6+p
JjR9kflPbrOb913ELB+S06xuVcf648BkWfiPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUy/za9ZBHJiB1J9Hg+TUFAVPLY2kwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3lfemE5WkJISmlCMUo5SGct
VFVGQVZQTFkyay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx
nogwDQYJKoZIhvcNAQELBQADggEBAJOW1J+3JbMYcCQc4gq72z+zILMlnQkR5tXe
ziXPPCTuDUfv617MlnkNRFFoN81tMybv0eEgWfaeSCj22Gt+98DdAZx/jiaiALGh
LRdqy1pnz6uWEphPLej1bAawXBo5X3AyTUmhEZfg3mwxyVqLX8XhJ+nj1oNeTS2A
cHrPxvzxZRClBtSgOzBU1XnlMq8Vn2ObMROd2nMPUVXg60pmU+uQbh602076OzpW
DASjBQjwqt2j8Vi9pt4l4pHrv6vbAEGeISc9izH6ilDn2DI3aJ7Mpq5Qo3NqmPQT
nuWXuca5EvVmJbn7QEar9qnvSMnp8L/DrYzhaSmWy0Apl5RdC9s=
-----END CERTIFICATE-----
Generated at Thu Jul 24 12:12:42 2025 by rpki-client