Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SKIPTECH/1/3136302e32352e3232312e302f32342d3234203d3e2039303032.roa
File: 3136302e32352e3232312e302f32342d3234203d3e2039303032.roa (raw, json)
Hash identifier: gW+pn5qU90RDUm4ONMCv1Ozmw5AmvSTZSeKQrZoYYHY=
Subject key identifier: EF:97:32:75:44:B9:90:F2:90:04:71:85:A7:0D:63:8C:4D:24:F1:73
Certificate issuer: /CN=18D1FE81C173554ED00687499D810AFDA7832B87
Certificate serial: 21126CBA04851D19CB249351A36884ED44FDCE8A
Authority key identifier: 18:D1:FE:81:C1:73:55:4E:D0:06:87:49:9D:81:0A:FD:A7:83:2B:87
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/18D1FE81C173554ED00687499D810AFDA7832B87.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SKIPTECH/1/3136302e32352e3232312e302f32342d3234203d3e2039303032.roa
Signing time: Mon 11 May 2026 17:44:48 +0000
ROA not before: Mon 11 May 2026 17:39:48 +0000
ROA not after: Mon 10 May 2027 17:44:48 +0000
asID: 9002
IP address blocks: 160.25.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:12:6c:ba:04:85:1d:19:cb:24:93:51:a3:68:84:ed:44:fd:ce:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18D1FE81C173554ED00687499D810AFDA7832B87
Validity
Not Before: May 11 17:39:48 2026 GMT
Not After : May 10 17:44:48 2027 GMT
Subject: CN=EF97327544B990F290047185A70D638C4D24F173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:3f:17:b8:89:58:b5:c0:03:6a:3b:35:07:
d9:5f:ca:b1:ae:9a:72:5f:17:e7:76:b8:85:29:11:
85:94:be:20:1d:4a:8d:15:86:5b:66:51:7f:07:dd:
a7:39:16:8b:96:56:36:85:f0:e4:ba:66:10:d1:ff:
58:c7:94:30:d2:65:a6:8f:d0:a8:53:89:66:bb:69:
ee:2a:14:ff:88:56:6b:9e:48:ac:25:5e:44:56:a4:
0c:77:24:07:e9:b1:d0:c5:be:01:91:57:5f:15:4e:
4d:c1:51:a4:ee:a4:fb:76:a9:75:23:b1:ce:dd:11:
b8:fd:93:12:bf:bd:1c:07:b5:cc:9b:5b:a3:95:03:
5e:df:48:28:fc:81:20:4c:8e:f6:9c:bf:57:91:84:
d1:e4:8f:d2:fc:94:45:20:27:f8:4c:d0:37:ea:67:
d6:9f:6e:dd:99:f2:51:ea:67:a0:4c:ca:ff:80:e2:
95:7a:0b:57:b1:bb:e6:6a:17:6e:76:36:37:cf:72:
02:5a:ad:43:2a:26:fc:82:e6:76:87:16:49:dc:9f:
b2:60:27:19:f6:4a:76:12:8d:79:01:d1:e1:9e:f4:
0b:eb:1a:5e:8b:45:d5:05:3f:73:19:2f:f4:25:b5:
6c:b5:3d:03:74:a6:c0:b9:fc:ff:cc:d3:3f:77:a8:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:97:32:75:44:B9:90:F2:90:04:71:85:A7:0D:63:8C:4D:24:F1:73
X509v3 Authority Key Identifier:
keyid:18:D1:FE:81:C1:73:55:4E:D0:06:87:49:9D:81:0A:FD:A7:83:2B:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SKIPTECH/1/18D1FE81C173554ED00687499D810AFDA7832B87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/18D1FE81C173554ED00687499D810AFDA7832B87.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKIPTECH/1/3136302e32352e3232312e302f32342d3234203d3e2039303032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.221.0/24
Signature Algorithm: sha256WithRSAEncryption
12:94:1a:cc:79:63:a4:64:62:22:d6:c2:a9:3d:26:e2:bd:d4:
70:bc:98:b9:f5:90:60:7e:7f:48:9c:ea:39:1f:53:ee:bf:b4:
20:d0:54:9c:b8:3b:f6:a4:ea:46:ba:d0:ba:32:28:72:41:1e:
a4:ab:d6:4b:d7:9a:ad:ee:24:4f:98:c1:76:9c:7f:84:52:3e:
dd:d3:cb:63:12:8e:1c:79:79:b6:0a:79:8f:75:ad:16:68:22:
57:9e:dd:ef:e2:1f:95:9c:4c:fb:d2:5f:6b:59:9b:f9:05:70:
1a:d6:3d:01:d5:1d:96:cd:57:de:53:b8:81:d5:6b:a7:5b:12:
93:95:2a:29:07:ea:52:42:ee:1c:bd:b4:17:85:7a:f9:7a:82:
ab:75:a1:e7:c0:5a:6d:11:93:99:ce:23:36:15:d2:07:01:36:
cb:ce:2e:59:83:10:f0:c4:40:ec:e5:60:a4:a1:81:94:ea:61:
ad:54:a5:31:ce:98:50:2b:1c:ce:b5:3b:32:0c:04:5d:8f:b3:
c1:c1:f1:32:dd:4b:a9:47:e6:00:84:5b:f6:33:e5:2e:5e:7a:
0a:a9:78:ac:f9:b4:05:40:a8:0d:fb:65:fd:00:5b:ad:35:94:
68:4e:02:1c:e7:7a:db:18:6c:ff:d6:3e:4e:cb:4a:36:d8:b2:
bf:27:42:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:25:38 2026 by rpki-client