Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATHDD/s9tu_pDnJrSyKspE2pwZIYBI6D0.roa
File: s9tu_pDnJrSyKspE2pwZIYBI6D0.roa (raw, json)
Hash identifier: 77p9GLnmkRIDPz0ypfQ8Zc8Oh+HTvViv2j8ygqdj+Pg=
Subject key identifier: B3:DB:6E:FE:90:E7:26:B4:B2:2A:CA:44:DA:9C:19:21:80:48:E8:3D
Certificate issuer: /CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE
Certificate serial: 0384
Authority key identifier: 20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/s9tu_pDnJrSyKspE2pwZIYBI6D0.roa
Signing time: Wed 01 Oct 2025 15:51:12 +0000
ROA not before: Wed 01 Oct 2025 15:51:12 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 150766
IP address blocks: 160.191.9.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900 (0x384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE
Validity
Not Before: Oct 1 15:51:12 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=B3DB6EFE90E726B4B22ACA44DA9C19218048E83D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:85:fe:8f:5e:29:86:53:e2:23:fd:ea:08:81:
1e:04:ce:12:34:94:82:1b:0a:54:52:83:e3:4f:c4:
26:5b:3b:1e:3c:e9:69:67:af:99:b0:cb:2a:79:d7:
61:c1:1b:9e:43:02:8d:e0:93:ef:f9:9e:09:3d:32:
0d:71:f3:4b:0b:d1:ec:cc:11:4c:a4:3f:da:0b:a4:
52:be:f1:ad:c8:5c:18:b9:68:eb:b9:3b:09:df:48:
6c:68:4e:b0:07:7d:19:f1:c8:6b:10:58:63:35:fb:
95:b7:43:a3:84:87:5a:6d:15:13:7f:ec:0a:4e:17:
09:00:e4:94:3b:22:29:15:86:df:2d:62:88:06:a5:
1b:09:05:f0:a8:c5:03:f5:ae:93:5f:7b:6c:2b:55:
b9:ad:90:5f:d5:9f:68:57:5f:46:89:23:14:f8:de:
93:81:9a:89:5a:75:3d:65:f3:76:97:9e:7d:7b:fe:
2a:32:dc:bc:89:4d:94:c1:ad:a3:c2:9c:b8:c4:1d:
0b:7c:d4:88:d0:f5:61:f1:ff:4b:06:7c:d0:24:cb:
3e:ca:17:a7:74:b4:a0:8b:0b:e5:1b:96:c0:a6:c8:
2b:62:b8:1e:b0:e8:1a:32:e5:47:b0:d8:de:8d:43:
f7:dc:0a:aa:4a:41:fa:52:b1:b8:aa:27:16:f1:23:
f6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DB:6E:FE:90:E7:26:B4:B2:2A:CA:44:DA:9C:19:21:80:48:E8:3D
X509v3 Authority Key Identifier:
keyid:20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/s9tu_pDnJrSyKspE2pwZIYBI6D0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.9.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:22:e3:2f:dc:c6:8b:59:e9:e2:3d:6b:2f:0a:71:1e:d7:b4:
a5:d2:00:64:a0:5a:74:d9:05:a7:f0:44:1d:f0:ec:43:b6:70:
b6:c8:75:98:9b:69:e0:a0:30:41:dc:c4:07:09:be:9d:b0:92:
59:3c:82:c9:2f:33:28:5f:66:03:df:bb:5d:83:d2:28:10:0b:
48:07:15:7c:e4:2b:e9:b1:33:db:c1:93:d3:42:99:fb:3b:ba:
7c:0e:ab:ba:1b:ec:df:9e:39:d9:b4:ed:d5:1b:19:b1:9a:cf:
bd:3d:0a:10:ce:96:d6:58:bb:62:75:79:60:8b:35:89:6f:9f:
76:d6:99:19:b7:46:3b:57:3b:c9:1c:e1:14:b3:13:7f:c9:94:
93:86:24:21:e1:86:a8:38:62:46:cd:0a:e2:aa:d5:37:6a:6a:
5b:13:9a:d8:dc:b8:7d:eb:6a:10:69:03:d8:fb:d9:2d:5e:43:
26:72:a9:b4:72:ac:87:34:84:7b:df:37:85:33:cf:40:cd:63:
ef:a3:87:86:78:82:01:16:fd:51:06:eb:60:56:4a:13:0a:03:
2f:dd:73:09:f4:ec:ff:39:20:88:d3:34:c7:a7:94:40:92:42:
bd:51:8f:e8:40:ac:b4:a7:99:f7:b1:e0:c7:3d:4b:27:81:04:
40:b7:03:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:35:33 2025 by rpki-client