Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/InsD7HEhbGjTtxxpw7p5Som8oGo.roa
File: InsD7HEhbGjTtxxpw7p5Som8oGo.roa (raw, json)
Hash identifier: K2vWo3nOSYAot/ixxJnQaxZwFwd9D0g0/HfFWtZoVJ8=
Subject key identifier: 22:7B:03:EC:71:21:6C:68:D3:B7:1C:69:C3:BA:79:4A:89:BC:A0:6A
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 1417
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/InsD7HEhbGjTtxxpw7p5Som8oGo.roa
Signing time: Fri 22 Aug 2025 08:57:33 +0000
ROA not before: Fri 22 Aug 2025 08:57:33 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 57976
IP address blocks: 150.116.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5143 (0x1417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 22 08:57:33 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=227B03EC71216C68D3B71C69C3BA794A89BCA06A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:d7:df:9e:f0:e7:f6:18:84:10:ec:bd:cd:
7d:67:be:84:64:88:54:97:59:a7:d1:81:58:fa:7d:
03:cf:9a:8c:ed:50:5f:bb:c8:80:38:1d:b1:ae:18:
fe:41:d5:64:05:3e:30:d0:b0:5d:14:f2:db:58:fd:
14:f8:72:e0:11:f3:31:e8:86:ac:27:c1:38:10:96:
df:63:d7:e1:6f:81:9d:11:1c:f5:98:4a:43:b4:55:
b5:83:f3:1d:88:e1:2d:06:0c:80:c6:80:42:83:60:
13:d0:95:46:60:27:74:5f:e6:c2:57:01:d8:c3:25:
32:70:b0:d1:d4:13:1c:9f:81:74:4b:51:61:65:fe:
7b:83:ee:98:13:5a:21:29:41:de:22:06:04:e5:71:
e2:e5:7d:19:be:50:b6:f4:60:62:b9:0c:94:da:87:
28:e1:af:9d:f7:d6:e3:3a:94:2d:ba:cb:59:27:9e:
5b:09:c9:c2:4c:7b:f4:46:c5:89:c2:6d:d4:d6:57:
d3:50:e9:3d:bc:84:8a:7e:74:d0:7d:42:2f:0d:37:
98:0d:00:de:1e:1a:db:8f:f1:4f:29:5f:26:a0:99:
57:ee:03:ae:62:af:8b:4e:81:17:80:40:19:7e:ba:
da:09:34:01:f2:81:40:50:54:4c:e1:8f:b2:a2:2d:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7B:03:EC:71:21:6C:68:D3:B7:1C:69:C3:BA:79:4A:89:BC:A0:6A
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/InsD7HEhbGjTtxxpw7p5Som8oGo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.9.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2c:65:3b:a2:92:a0:0d:70:51:29:5b:60:26:ca:64:30:6f:
2b:5f:99:af:95:81:1f:e9:fe:f7:e0:0f:88:99:6a:a2:f0:4d:
01:c2:ed:c8:99:c1:c6:28:83:4a:6d:43:04:05:24:9b:de:6e:
42:3d:78:d6:50:69:81:b6:af:4c:6d:da:e2:cf:b9:7a:5d:37:
f5:0b:79:2f:b4:9f:30:10:b3:28:a4:d7:76:97:37:0d:0b:ce:
45:c5:cd:bf:7c:7d:ab:4e:11:b5:cb:6c:7a:d6:ca:26:fe:9d:
db:da:f0:ff:7d:ac:54:3c:a6:de:ca:54:cc:b2:af:ff:bc:4b:
8d:5b:17:4a:a0:03:1d:9f:df:fa:a5:a3:91:db:b7:64:86:9a:
35:34:0e:66:31:93:d7:6a:17:93:18:90:c5:b7:6e:74:3f:69:
d4:6f:af:2c:ec:97:bb:f7:45:10:a7:b6:95:a7:2e:7a:7c:cf:
a1:0a:f8:07:c1:5c:fa:a3:8b:bb:55:57:d7:55:19:7c:47:e8:
3e:e8:8a:2c:74:d2:3b:9a:dc:4f:e9:4c:7c:45:20:a0:85:26:
3e:75:cf:4a:e4:37:66:9f:b4:1d:0d:56:06:3c:d3:32:ef:88:
a9:87:55:6f:f5:bb:01:53:c0:00:56:78:5d:db:c1:ea:34:27:
82:e1:c5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:54:01 2025 by rpki-client