Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8pyJJ6mddtQ-iXX-jqYdyrNwRhY.roa
File: 8pyJJ6mddtQ-iXX-jqYdyrNwRhY.roa (raw, json)
Hash identifier: QLXPQkwArwtpCGY/bKqF/TWj8FLkRT1Ig+RCdfrMTZo=
Subject key identifier: F2:9C:89:27:A9:9D:76:D4:3E:89:75:FE:8E:A6:1D:CA:B3:70:46:16
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2361
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8pyJJ6mddtQ-iXX-jqYdyrNwRhY.roa
Signing time: Mon 10 Feb 2025 14:17:32 +0000
ROA not before: Mon 10 Feb 2025 14:17:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 61.60.215.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9057 (0x2361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 10 14:17:32 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F29C8927A99D76D43E8975FE8EA61DCAB3704616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e5:47:68:33:25:3b:ef:89:91:51:9b:8e:d6:
2d:09:cd:63:a2:68:a9:8b:ff:8e:22:1e:db:db:e8:
57:fb:d6:cd:8f:1b:9d:a7:bb:63:2d:b3:c2:79:93:
99:ba:2b:0a:ab:70:1e:67:49:d4:09:57:aa:f1:72:
41:f2:46:cf:98:c4:e8:d6:d1:80:f2:22:14:77:8e:
d7:c1:da:8f:2d:73:64:8c:12:3f:b5:e5:d4:5c:76:
9c:42:08:bd:6a:08:5e:e8:3a:61:db:5c:62:42:ce:
59:f6:22:a9:b8:7c:ee:f5:ae:0e:7e:cf:b3:93:84:
21:5b:b7:2d:6e:a1:f9:68:eb:9b:06:ec:b0:bc:5b:
03:3b:88:1a:5f:44:87:7b:41:01:5e:51:49:b8:be:
b9:35:57:20:f8:f5:d6:2b:96:a3:c7:1b:0c:d0:c0:
d5:2a:88:b0:e3:f3:ed:e1:59:d5:d1:cb:80:98:84:
9e:6c:17:5a:d9:3e:ba:44:2b:13:5b:fb:5e:a3:4c:
21:71:f9:d3:c5:b1:e3:b9:6d:c0:22:e2:e4:af:18:
66:6f:fe:23:41:c4:b1:9d:c4:a5:6c:6b:d6:42:59:
7a:a2:51:55:68:33:ac:85:2a:d2:75:a2:15:49:65:
9a:4b:62:35:81:5a:4f:79:66:83:da:79:c5:d0:9c:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9C:89:27:A9:9D:76:D4:3E:89:75:FE:8E:A6:1D:CA:B3:70:46:16
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8pyJJ6mddtQ-iXX-jqYdyrNwRhY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.215.128/25
Signature Algorithm: sha256WithRSAEncryption
5a:44:8a:6e:ae:6e:b6:f2:7f:d2:b6:48:dc:c3:f5:b4:21:60:
9f:6e:b1:17:b4:ed:aa:3b:e1:3f:60:ce:d1:c9:0b:0a:f6:70:
c7:38:6e:65:ea:05:55:6d:4d:56:4f:2d:91:fc:47:aa:70:a2:
16:ba:66:eb:14:96:e3:e9:84:9e:47:6a:6f:75:c6:f3:d7:92:
f7:3c:d8:92:c9:c9:3a:61:83:6c:9a:7b:d2:ff:e9:0f:6e:13:
bb:c2:eb:7a:51:e9:67:8d:9a:43:9e:17:4c:01:33:3a:3e:4a:
0f:b7:92:fa:7f:01:9e:4c:b1:a8:f6:85:47:9e:f3:a0:7d:af:
4e:cc:d3:6e:84:73:89:1f:1d:ad:dc:7f:55:13:02:3d:fb:73:
80:2c:e2:5c:bd:19:16:71:5e:f7:e7:99:b1:18:13:34:6f:26:
18:65:55:cd:43:f4:1a:70:27:94:32:e9:b2:fa:c5:ad:c1:94:
f2:3e:76:04:70:d6:e8:c9:2c:13:b4:4a:c9:a0:3f:50:5d:f5:
fc:29:d5:db:84:bd:f6:75:c0:63:60:73:56:18:d0:4a:a7:68:
7f:ee:6f:c7:4b:54:5c:37:03:23:48:7f:cc:9b:8e:c9:78:4d:
80:de:53:fb:15:38:88:b5:29:d5:df:a5:e2:8f:0d:23:c2:15:
b9:18:36:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 14:27:56 2025 by rpki-client