Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/UBBNET/0/AS4662.roa
File: AS4662.roa (raw, json)
Hash identifier: l5YT6HkB93vM2G/iP6se4DxzXKxSOnbgp5YjONj14kg=
Subject key identifier: F2:27:6E:18:8E:AB:CA:52:A8:97:01:19:2D:83:60:90:1C:62:43:30
Certificate issuer: /CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E
Certificate serial: 6AD2CA96251156642FD6C697E8B29A75BFBAC31B
Authority key identifier: 70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/UBBNET/0/AS4662.roa
Signing time: Tue 12 May 2026 01:46:47 +0000
ROA not before: Tue 12 May 2026 01:41:47 +0000
ROA not after: Tue 11 May 2027 01:46:47 +0000
asID: 4662
IP address blocks: 61.56.160.0/19 maxlen: 19
61.58.96.0/20 maxlen: 20
61.58.112.0/20 maxlen: 20
61.60.208.0/20 maxlen: 20
61.61.208.0/20 maxlen: 20
61.61.224.0/20 maxlen: 20
61.64.0.0/19 maxlen: 19
122.100.64.0/18 maxlen: 18
122.254.0.0/18 maxlen: 18
123.0.32.0/19 maxlen: 19
124.6.0.0/19 maxlen: 19
211.76.32.0/19 maxlen: 19
211.76.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:d2:ca:96:25:11:56:64:2f:d6:c6:97:e8:b2:9a:75:bf:ba:c3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E
Validity
Not Before: May 12 01:41:47 2026 GMT
Not After : May 11 01:46:47 2027 GMT
Subject: CN=F2276E188EABCA52A89701192D8360901C624330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:23:1a:14:6f:fc:67:b6:7d:49:e1:c9:a0:58:
bf:4a:8a:79:c0:23:5b:a6:41:af:d8:f2:67:76:d1:
f0:e6:4e:93:f7:70:52:b1:71:a3:aa:07:80:fc:d0:
a0:dc:5e:42:ed:58:df:1f:b5:74:2f:9c:85:ea:12:
69:97:a7:e2:33:10:84:c7:75:7f:17:24:8c:01:7e:
17:48:32:2e:96:df:8f:b0:b5:4b:4d:10:13:99:40:
c8:3f:f0:76:4c:b9:ea:e0:44:43:8a:8e:e5:37:0f:
56:a0:51:a5:5b:a4:a7:e5:40:15:d5:67:5b:94:ea:
fd:16:33:bc:42:b5:96:bf:f4:2f:a1:63:21:3f:b5:
ae:0a:11:c2:de:14:ed:7d:f5:99:76:cd:a9:27:dc:
2f:de:3f:8a:3a:12:bd:16:e5:68:7a:01:26:93:d0:
e5:99:3c:95:1e:55:a9:31:2b:81:aa:78:43:46:a0:
23:8d:b0:1a:a8:d5:d7:e1:a2:8a:eb:15:f3:31:d6:
68:9a:3a:86:bd:46:ab:0f:80:fd:63:d8:fc:f5:3d:
c6:05:67:2a:ba:b5:df:98:92:77:7a:50:9f:4a:7e:
b3:79:5e:b4:e7:d9:c1:73:aa:88:5f:82:d3:75:c8:
33:3d:26:4b:15:5e:8e:57:a0:3f:bc:a6:34:f4:d5:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:27:6E:18:8E:AB:CA:52:A8:97:01:19:2D:83:60:90:1C:62:43:30
X509v3 Authority Key Identifier:
keyid:70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/AS4662.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.56.160.0/19
61.58.96.0/19
61.60.208.0/20
61.61.208.0-61.61.239.255
61.64.0.0/19
122.100.64.0/18
122.254.0.0/18
123.0.32.0/19
124.6.0.0/19
211.76.32.0-211.76.79.255
Signature Algorithm: sha256WithRSAEncryption
01:58:e6:20:9b:bb:9b:e0:96:fc:f2:84:50:b4:dd:40:6d:14:
a9:c6:ff:1c:0f:2b:2d:60:7f:f5:fa:5c:88:1d:3b:9d:2c:b3:
e0:76:13:7f:95:21:c5:82:33:a0:ed:a8:a7:f2:de:75:1e:cd:
a4:57:04:1a:03:81:cd:77:97:0a:26:0c:12:28:7f:13:e2:96:
ab:03:67:11:b6:0f:6d:cd:4a:b1:fc:39:c1:0f:28:22:54:28:
88:24:62:98:e0:c1:a6:5b:f6:4d:bd:19:49:cc:e9:aa:a8:60:
c9:c0:d6:e9:f7:e7:2d:df:e8:1b:3e:bd:e6:ee:ff:a0:22:67:
73:e7:a6:99:ff:e2:3e:4d:d8:7a:59:91:c6:2a:3e:ae:f0:89:
dd:3d:28:d7:83:ca:57:b6:b7:ed:75:e1:94:55:99:86:21:48:
95:26:07:34:e5:8e:57:d2:e2:c8:a5:64:70:52:6e:a7:7e:dd:
73:4b:96:33:1f:a0:b6:60:c2:0b:cd:4d:9f:67:98:ac:36:18:
6d:b5:5c:7e:32:d3:cd:fa:86:32:f8:b1:81:ee:e8:05:03:34:
68:40:31:c8:c5:00:8f:09:3f:b5:7b:3a:bd:4d:f5:8e:35:8a:
39:cf:ce:e2:07:60:2f:0c:ed:93:49:55:9b:ed:4e:52:cf:b3:
13:82:64:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:33 2026 by rpki-client