Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KXgfVv5NAgpV0wyg8qA0jf2ULoY.roa
File: KXgfVv5NAgpV0wyg8qA0jf2ULoY.roa (raw, json)
Hash identifier: eY5mdcmSc00EjcPFASp8zOvxDaD85sdkRQ5t+KEvTGQ=
Subject key identifier: 29:78:1F:56:FE:4D:02:0A:55:D3:0C:A0:F2:A0:34:8D:FD:94:2E:86
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 23F9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KXgfVv5NAgpV0wyg8qA0jf2ULoY.roa
Signing time: Mon 10 Feb 2025 14:18:08 +0000
ROA not before: Mon 10 Feb 2025 14:18:08 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 211.76.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9209 (0x23f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 10 14:18:08 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=29781F56FE4D020A55D30CA0F2A0348DFD942E86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:0f:c9:4c:58:69:4a:11:84:dc:36:75:69:
a5:a5:2b:d0:8c:cc:eb:e8:54:88:d8:be:ea:c3:7b:
5d:1a:05:d3:f5:e2:9f:2d:fa:cf:1e:99:80:4b:e3:
4f:c7:60:60:d8:b0:8a:bc:6a:89:54:dd:06:4e:43:
66:ac:12:ce:57:3c:00:5a:5b:ad:df:76:ca:cc:43:
4a:bf:77:f6:91:be:83:03:0a:6a:c4:db:52:e7:3c:
82:b5:1e:c2:cd:ac:3e:d8:c7:62:94:1b:52:42:fc:
4e:d5:f8:ed:59:7d:52:d4:ea:12:6d:fa:af:f2:df:
e7:82:fb:0a:5e:a2:c1:95:01:11:d8:31:73:e6:fc:
b4:af:42:40:43:05:8a:9e:d0:5a:4e:b2:4b:49:42:
60:56:10:2c:20:bd:dd:bc:eb:0c:f9:64:09:c0:1f:
79:54:99:2b:7b:66:4a:7d:b4:d3:f6:b1:a4:89:fd:
c2:71:88:80:a1:63:a3:6d:ef:bd:a0:6c:5b:40:58:
77:f7:64:f8:1a:41:b4:b1:a5:1c:e1:40:50:85:c2:
fe:35:45:72:9b:24:98:04:af:12:1e:d4:37:47:9d:
ab:3f:7b:28:59:e3:b4:9c:2e:60:2a:60:e7:28:ea:
eb:e3:0a:d7:b4:5b:e5:2b:49:11:27:10:b6:8a:b0:
d3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:78:1F:56:FE:4D:02:0A:55:D3:0C:A0:F2:A0:34:8D:FD:94:2E:86
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KXgfVv5NAgpV0wyg8qA0jf2ULoY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.77.0/24
Signature Algorithm: sha256WithRSAEncryption
16:bb:69:b8:f7:0c:1d:3c:44:fd:0e:4a:93:e4:da:a9:c4:ba:
d2:ff:ef:c0:ec:57:fd:b9:da:93:4a:34:c8:5a:8c:2f:d0:63:
be:d4:25:1d:ac:19:2e:ed:f9:a7:10:06:6a:39:aa:a8:a3:bd:
03:85:23:a3:e1:98:6c:50:06:7c:55:3c:71:25:13:63:75:4e:
27:b5:54:5c:87:48:f7:b6:28:8f:ab:3b:fb:38:6d:29:ab:12:
f5:b1:59:7d:a3:6e:51:cc:1f:af:aa:8e:e1:7e:23:13:48:89:
34:2d:a9:10:0f:00:08:da:c6:4d:0c:9b:01:97:2b:21:3e:a0:
07:d3:b8:c1:92:86:4a:a8:e6:ba:72:00:a5:ee:b9:2b:dd:2f:
14:6a:6d:b5:c3:2f:02:52:07:26:83:69:e2:42:5c:95:64:01:
ab:82:b8:ae:e5:36:99:4d:8a:f1:7a:c5:31:0d:39:5e:9f:b2:
2a:2e:16:e5:ed:07:d0:77:86:f4:ec:11:45:9d:44:69:99:8c:
39:e1:2b:bd:0e:5f:b5:07:1e:92:20:ed:6f:42:9e:39:0d:0f:
2e:c1:b9:b8:d7:e0:02:f6:20:20:89:68:b9:63:75:26:35:7a:
fb:8a:cc:47:de:34:78:23:bc:2a:df:fd:19:f8:2e:2f:a6:bb:
e9:5d:6f:0e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICI/kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx
NDE4MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI5NzgxRjU2RkU0RDAy
MEE1NUQzMENBMEYyQTAzNDhERkQ5NDJFODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2iw/JTFhpShGE3DZ1aaWlK9CMzOvoVIjYvurDe10aBdP14p8t
+s8emYBL40/HYGDYsIq8aolU3QZOQ2asEs5XPABaW63fdsrMQ0q/d/aRvoMDCmrE
21LnPIK1HsLNrD7Yx2KUG1JC/E7V+O1ZfVLU6hJt+q/y3+eC+wpeosGVARHYMXPm
/LSvQkBDBYqe0FpOsktJQmBWECwgvd286wz5ZAnAH3lUmSt7Zkp9tNP2saSJ/cJx
iIChY6Nt772gbFtAWHf3ZPgaQbSxpRzhQFCFwv41RXKbJJgErxIe1DdHnas/eyhZ
47ScLmAqYOco6uvjCte0W+UrSREnELaKsNPvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKXgfVv5NAgpV0wyg8qA0jf2ULoYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0tYZ2ZWdjVOQWdwVjB3eWc4
cUEwamYyVUxvWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
TE0wDQYJKoZIhvcNAQELBQADggEBABa7abj3DB08RP0OSpPk2qnEutL/78DsV/25
2pNKNMhajC/QY77UJR2sGS7t+acQBmo5qqijvQOFI6PhmGxQBnxVPHElE2N1Tie1
VFyHSPe2KI+rO/s4bSmrEvWxWX2jblHMH6+qjuF+IxNIiTQtqRAPAAjaxk0MmwGX
KyE+oAfTuMGShkqo5rpyAKXuuSvdLxRqbbXDLwJSByaDaeJCXJVkAauCuK7lNplN
ivF6xTENOV6fsiouFuXtB9B3hvTsEUWdRGmZjDnhK70OX7UHHpIg7W9CnjkNDy7B
ubjX4AL2ICCJaLljdSY1evuKzEfeNHgjvCrf/Rn4Li+mu+ldbw4=
-----END CERTIFICATE-----
Generated at Sat Jul 5 10:07:16 2025 by rpki-client