Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QtcAeoXiNbXIiCKBAHlERpRsIuE.roa
File: QtcAeoXiNbXIiCKBAHlERpRsIuE.roa (raw, json)
Hash identifier: IPwKUssV3wAEkCm0gvH5XsJsi2DkbIELz9b0PUV/Y9E=
Subject key identifier: 42:D7:00:7A:85:E2:35:B5:C8:88:22:81:00:79:44:46:94:6C:22:E1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 220A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QtcAeoXiNbXIiCKBAHlERpRsIuE.roa
Signing time: Mon 26 Aug 2024 05:33:36 +0000
ROA not before: Mon 26 Aug 2024 05:33:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 122.100.88.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8714 (0x220a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 26 05:33:36 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=42D7007A85E235B5C888228100794446946C22E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:46:04:3e:11:32:60:a1:cf:c6:c3:f4:cc:
73:b4:6f:47:61:db:2d:aa:38:54:58:38:02:aa:22:
82:cf:13:c8:38:45:c9:e9:e5:dd:07:19:49:15:43:
00:63:a5:f2:69:23:77:49:38:1f:91:42:dc:2c:21:
64:40:91:c2:7c:0b:0b:31:c1:b6:77:0d:25:9a:ac:
3c:52:8c:4e:97:09:d4:a8:a4:89:79:a7:33:44:87:
2a:1a:38:db:ab:fd:04:50:6a:e2:0b:c6:15:9a:fc:
44:c8:ea:b7:24:c3:af:1c:f9:c0:0f:10:cc:d8:7b:
fb:0e:68:9b:92:f0:aa:8d:04:4f:ab:ba:04:26:ad:
ce:18:f9:36:cd:ce:8f:da:23:ed:1e:1f:5b:0d:8b:
ad:08:2a:11:82:05:09:25:1d:ed:98:91:ca:43:ea:
76:41:ab:75:30:cb:8d:e7:f8:81:d6:41:08:33:d7:
64:96:69:5b:33:24:bb:d1:b8:73:a4:5d:82:6f:8e:
93:34:16:e2:81:76:55:7e:18:de:1f:6f:f1:2f:e2:
30:69:a7:f8:38:1b:0c:3f:9f:de:45:57:db:96:db:
26:4a:bb:90:a0:29:dd:1e:5f:72:9d:d8:86:d8:f8:
98:4a:5d:4b:9e:a6:45:4c:db:16:2e:9f:ab:f3:b6:
f7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D7:00:7A:85:E2:35:B5:C8:88:22:81:00:79:44:46:94:6C:22:E1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QtcAeoXiNbXIiCKBAHlERpRsIuE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.88.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:6b:64:55:c4:c5:52:28:f5:35:28:d6:9d:0e:85:78:00:dc:
8c:45:d3:ed:3e:32:77:d8:bd:65:87:de:fb:42:e5:a3:bf:2f:
18:2b:51:72:96:55:7d:ac:8a:fe:45:d5:db:f5:60:e1:48:48:
a4:7c:f1:cf:70:9b:0f:84:90:c8:03:45:92:8e:ce:64:d0:e1:
b4:91:38:b1:97:76:3f:57:23:70:09:14:ff:bd:ed:e5:d1:e5:
a7:59:0a:df:81:78:3f:f8:dc:81:9f:1f:23:57:93:4c:d0:8a:
00:ec:62:fa:52:06:2c:09:cb:e4:f1:91:73:b6:10:d7:b6:3c:
9d:0f:0f:32:26:16:7e:fa:65:01:89:cb:00:c4:59:3b:8b:fe:
63:68:63:1f:e2:04:32:08:da:29:e3:75:5d:c2:9a:77:ad:79:
e9:93:69:83:4e:ac:58:a6:41:c7:d9:69:f6:0b:ef:7d:86:e6:
21:24:7b:c5:a8:87:20:4b:63:00:35:bb:d0:b1:f1:a3:72:9d:
cf:b3:73:fd:3e:95:a0:1f:96:52:68:29:14:cf:2e:3b:82:ca:
61:ad:a3:8d:77:44:15:80:cb:e0:42:bb:fb:9d:9c:8c:dd:cb:
5e:11:57:27:ba:dd:26:68:e1:a6:d3:b7:ab:ae:43:c7:41:2e:
bc:3e:7f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:08:29 2025 by rpki-client