Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/uraxH9xjm7jxTO_7nX8dTBAwZfo.roa
File: uraxH9xjm7jxTO_7nX8dTBAwZfo.roa (raw, json)
Hash identifier: upqsyOY/01e7DyP3vBaEyIGHhjzN69Ce+LIajMVTzWU=
Subject key identifier: BA:B6:B1:1F:DC:63:9B:B8:F1:4C:EF:FB:9D:7F:1D:4C:10:30:65:FA
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 0CCA
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/uraxH9xjm7jxTO_7nX8dTBAwZfo.roa
Signing time: Mon 10 Feb 2025 13:58:29 +0000
ROA not before: Mon 10 Feb 2025 13:58:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17420
IP address blocks: 203.65.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3274 (0xcca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Feb 10 13:58:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BAB6B11FDC639BB8F14CEFFB9D7F1D4C103065FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:7b:0a:81:b5:af:9c:00:05:d2:98:5c:49:
ff:e2:62:1e:3d:7a:44:56:4b:c2:db:63:a9:d6:65:
d2:d3:af:51:f0:3f:0b:33:88:a3:e4:90:89:64:f9:
57:88:eb:76:8f:f6:c1:5f:f2:b0:f0:f9:42:52:2b:
d4:be:95:b3:d0:a0:5a:7f:95:49:f7:40:6a:00:9e:
ea:2f:a5:96:92:3d:28:46:23:40:74:fc:4c:cb:c6:
83:1b:df:cf:02:99:e1:27:ca:e2:ad:c3:01:c1:50:
b5:82:13:b8:7a:70:15:4b:81:af:c1:2f:0f:76:fc:
f2:3d:fb:ff:1c:c6:6d:24:42:31:e9:b8:08:10:70:
9a:43:ba:ab:a6:cc:d3:e9:d0:7e:9e:8b:35:bd:f7:
9c:80:94:5e:11:e2:9c:c8:cd:22:34:b9:72:d8:fc:
24:c4:9e:c1:6c:8f:95:7c:4b:6f:11:bf:35:f7:b1:
f8:1e:fd:bf:44:e1:0f:20:b8:66:17:ff:0b:1b:73:
0f:54:ad:19:43:41:5b:be:3f:d0:66:73:e9:96:32:
c6:52:e9:11:b9:b4:57:24:e0:ef:e5:5e:ba:8e:7f:
3d:69:74:c6:d5:20:9d:14:08:f0:ca:b6:ac:59:1f:
a3:e0:b0:c5:ed:0c:c0:90:6c:fe:f3:fc:7c:4b:12:
5d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B6:B1:1F:DC:63:9B:B8:F1:4C:EF:FB:9D:7F:1D:4C:10:30:65:FA
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/uraxH9xjm7jxTO_7nX8dTBAwZfo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.65.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:6f:f7:a4:ba:0d:28:83:0a:30:cd:02:08:40:bf:8d:ab:aa:
48:57:29:b3:6f:63:e7:00:2f:5c:ac:6f:51:bd:31:11:04:74:
78:dd:08:09:ed:76:bf:00:60:26:3a:6e:c0:a6:05:73:d1:5b:
39:c2:56:49:88:38:18:4b:5d:05:ff:04:e2:06:69:14:b9:48:
bc:28:cf:08:c8:1f:d3:43:a3:37:93:48:bd:20:8b:67:17:8e:
d0:85:a2:0b:62:d6:f9:9f:cc:c3:f6:1f:f5:53:a6:0e:34:a6:
05:db:b4:67:c0:dd:81:3d:d3:ac:28:7f:20:e5:73:26:90:1d:
2f:11:f3:f1:45:3c:db:d0:46:d2:ea:f7:e7:d8:cd:b0:b5:65:
95:a7:88:e5:c2:ec:6c:21:f0:e5:1d:23:f4:c4:c4:19:b9:b4:
16:a9:c9:70:ba:72:80:7b:9e:dd:a6:eb:7b:15:14:90:e8:6c:
d1:6e:1a:56:04:16:f0:2c:2e:54:69:c3:af:74:fd:11:2f:a2:
ad:5c:e7:e9:2e:f9:94:cd:8e:b4:a8:83:65:b9:47:fe:de:0e:
8f:15:6f:79:6f:c7:1e:12:a0:ae:96:c8:7e:13:ca:7e:93:af:
13:4f:1b:c8:d4:b9:4d:ea:13:e4:34:08:97:9f:96:6a:85:60:
da:75:0e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:11:39 2025 by rpki-client