Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/jLielrwY7K23zu4SkX4C3HUui3k.roa
File: jLielrwY7K23zu4SkX4C3HUui3k.roa (raw, json)
Hash identifier: aD9XeVmBEt2oFztOqWTZGK+cwrd+bi5eG4VVkIIEwTQ=
Subject key identifier: 8C:B8:9E:96:BC:18:EC:AD:B7:CE:EE:12:91:7E:02:DC:75:2E:8B:79
Certificate issuer: /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Certificate serial: 04DC
Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/jLielrwY7K23zu4SkX4C3HUui3k.roa
Signing time: Fri 22 Aug 2025 08:50:41 +0000
ROA not before: Fri 22 Aug 2025 08:50:41 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 6939
IP address blocks: 160.30.78.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1244 (0x4dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Validity
Not Before: Aug 22 08:50:41 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=8CB89E96BC18ECADB7CEEE12917E02DC752E8B79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:f2:20:df:a5:19:6f:54:4a:62:19:33:ba:
80:f7:d5:ea:63:1c:a3:be:58:21:b2:cc:b1:6f:bd:
83:65:c9:ed:c9:ac:8e:40:5f:d5:1d:60:ec:74:a1:
a6:6a:a9:bd:05:f8:96:89:33:d5:00:2c:ee:4a:c5:
28:20:80:f9:e7:74:18:0a:30:21:c3:54:58:f4:51:
09:d8:dc:ca:bc:a0:f9:f0:fa:0d:d9:86:ea:83:a6:
1c:9d:27:0e:e1:65:63:84:60:a3:32:b8:39:d5:d1:
74:82:de:a6:5f:a9:de:8c:76:b2:46:5c:08:7b:49:
d5:8b:56:c3:5e:cf:3c:93:c0:53:14:4c:23:25:b2:
f4:7c:57:14:9e:c9:cc:cf:f1:5a:33:54:21:4e:66:
94:ef:68:fb:8e:ed:aa:df:f2:25:71:95:6b:14:a4:
5e:5f:8c:3d:07:bb:75:7c:ce:0e:bb:22:53:11:3c:
b7:e5:d4:ca:12:43:9d:52:da:a1:52:07:01:cb:2a:
2a:70:ba:fd:39:5b:a9:fa:a0:2c:20:ad:18:11:ea:
af:f6:75:df:ce:19:bc:bc:79:9c:3c:40:b2:89:b5:
37:3a:d1:61:54:b6:b8:c1:a8:69:73:13:ec:64:82:
66:da:ce:65:46:38:fc:55:16:ef:0a:62:14:69:85:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B8:9E:96:BC:18:EC:AD:B7:CE:EE:12:91:7E:02:DC:75:2E:8B:79
X509v3 Authority Key Identifier:
keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/jLielrwY7K23zu4SkX4C3HUui3k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.78.0/23
Signature Algorithm: sha256WithRSAEncryption
32:b5:4c:f1:73:6f:33:b8:a1:e4:5a:97:6c:77:b4:c7:72:1f:
45:1b:5d:7e:e7:27:44:a3:b3:5d:25:4d:41:2a:28:13:77:14:
e6:2b:19:36:cf:e6:6f:82:bb:bd:9b:d1:2d:0f:91:db:fe:cf:
0d:5c:e8:db:75:41:1d:a0:f7:8c:76:32:3c:bd:4d:b4:db:ae:
9a:ae:bb:84:eb:5e:03:4b:dc:41:5e:dd:40:7c:67:cb:8d:a4:
c8:41:d4:53:d6:a4:f2:d7:18:e3:47:84:81:17:fb:30:6b:bf:
c6:2f:9c:e7:a0:9c:bf:24:58:54:6e:59:10:63:81:96:1a:39:
ee:09:6b:c0:f7:21:b2:6e:75:9a:6d:83:cc:72:9e:4e:0a:9c:
fc:1a:2a:95:1f:64:42:e1:2f:33:da:83:1c:60:78:d4:66:aa:
a8:b8:b6:6a:d0:a3:2e:a6:f8:1c:2b:1e:ec:9f:a6:b3:ee:66:
a8:e6:af:4f:44:55:15:e3:81:65:4e:d8:87:cd:57:0d:9e:ec:
a6:20:66:4d:95:3f:30:93:2a:d4:d4:8b:e2:fe:24:ba:04:c9:
53:cc:57:e0:7f:87:6e:26:68:23:92:7d:9b:9b:48:da:cc:79:
e6:ab:90:8e:a8:36:61:5a:88:48:cf:13:bd:9c:7a:24:fb:46:
da:a1:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:40:21 2025 by rpki-client