Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCETECH/jFvLfPC02_ndHiHFt2mAldtwwZk.roa
File: jFvLfPC02_ndHiHFt2mAldtwwZk.roa (raw, json)
Hash identifier: Kw7ZynrZ7I7k68tbzP6vE3jEm/LjvzArRoedzDlVi8g=
Subject key identifier: 8C:5B:CB:7C:F0:B4:DB:F9:DD:1E:21:C5:B7:69:80:95:DB:70:C1:99
Certificate issuer: /CN=7E9CEF27C8DED13506B3399D992ECFF626B57951
Certificate serial: 0570
Authority key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/jFvLfPC02_ndHiHFt2mAldtwwZk.roa
Signing time: Fri 22 Aug 2025 08:49:01 +0000
ROA not before: Fri 22 Aug 2025 08:49:01 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 208223
IP address blocks: 160.25.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1392 (0x570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951
Validity
Not Before: Aug 22 08:49:01 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=8C5BCB7CF0B4DBF9DD1E21C5B7698095DB70C199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:b2:b9:02:19:f2:f0:fb:d3:36:e8:7b:bb:
42:85:4f:f5:fe:dd:e9:c3:7a:e1:2a:e3:a9:75:76:
8a:2c:bb:11:cb:27:cf:b1:e1:b9:35:c5:db:2b:8e:
cf:a5:58:06:2f:6b:db:0b:9a:df:d2:a3:91:16:4c:
82:d9:41:bf:90:bd:82:6c:ff:0e:a9:04:03:1b:dd:
2c:d8:e0:3f:06:a9:05:41:ad:17:ed:4c:54:87:a7:
84:e3:45:9c:12:b5:82:75:02:73:33:a1:82:bb:9f:
c2:a6:dc:12:0b:d5:13:b0:a6:94:0d:1f:a5:a7:ba:
18:15:15:9f:41:6d:87:0c:3e:89:75:ba:bd:8e:ae:
2d:1b:de:d2:e4:c6:1f:48:20:a0:29:86:98:68:b6:
a4:fe:42:49:ae:56:e7:13:80:4a:80:32:7b:15:58:
80:b1:34:4a:27:5f:ae:6d:30:fd:58:e3:c0:cb:56:
32:0a:94:84:12:5d:d4:b0:52:6e:b8:d8:70:91:f1:
31:36:d3:4a:4c:54:d6:0a:1c:8e:07:2e:88:ff:0b:
36:ea:6a:ce:be:16:f7:10:7b:8c:f0:b2:89:37:fc:
92:68:ff:83:e2:f4:24:f1:17:b3:9d:e4:de:30:11:
2d:e1:a4:98:83:60:01:c6:27:61:3f:9d:e6:38:cb:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5B:CB:7C:F0:B4:DB:F9:DD:1E:21:C5:B7:69:80:95:DB:70:C1:99
X509v3 Authority Key Identifier:
keyid:7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/jFvLfPC02_ndHiHFt2mAldtwwZk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.104.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:24:79:3b:78:c4:b6:2e:08:46:8c:ca:fe:4a:06:01:5f:ec:
ef:2b:2f:fc:cc:6b:68:28:a7:be:42:eb:26:1f:17:f4:48:22:
51:7b:98:6d:2c:ef:ea:10:b7:7f:80:97:a1:3c:63:66:75:c2:
0e:b0:12:3d:d9:7e:e3:c5:a5:bb:7b:3c:54:b3:c8:82:a6:19:
bd:59:a7:b1:ec:e3:62:89:d4:3c:e5:9c:49:a8:34:11:ed:f0:
7e:4f:31:54:e7:3e:40:1e:64:a0:c2:cb:cb:cc:a4:0b:b0:6c:
14:25:73:6a:62:b3:fc:66:6d:97:96:c7:66:0e:ad:fc:8c:d1:
4d:1c:9f:08:81:4a:df:e2:54:27:ea:b2:23:4c:44:ac:5f:80:
0e:57:c6:de:a7:2e:48:e1:3d:07:f0:c8:75:4c:42:b8:37:08:
ec:d1:73:7a:2c:56:9c:ea:ae:10:0a:8c:f1:39:e9:09:98:9a:
57:2b:cb:9f:65:12:49:f6:8c:ea:db:c7:39:a7:75:df:10:4c:
0c:fe:54:b9:a5:76:a9:92:2b:33:97:a2:b4:a6:a8:4b:9b:5b:
e2:a9:1c:99:8f:e4:bb:7e:c3:85:2d:ce:2a:cf:ad:a3:5b:80:
2d:bc:20:a9:d3:c2:09:c4:a8:82:b4:b1:f6:41:6b:de:5d:fc:
04:27:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:50:28 2025 by rpki-client