Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/R98OHS3cQVPe9-rpOqIewF2QnJA.roa
File: R98OHS3cQVPe9-rpOqIewF2QnJA.roa (raw, json)
Hash identifier: hKiSI8Q2IgsIN99gNu/aj6lzpTlN+ihBfsEzXDXrxFo=
Subject key identifier: 47:DF:0E:1D:2D:DC:41:53:DE:F7:EA:E9:3A:A2:1E:C0:5D:90:9C:90
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 13F4
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/R98OHS3cQVPe9-rpOqIewF2QnJA.roa
Signing time: Fri 22 Aug 2025 08:57:26 +0000
ROA not before: Fri 22 Aug 2025 08:57:25 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131607
IP address blocks: 150.117.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5108 (0x13f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 22 08:57:25 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=47DF0E1D2DDC4153DEF7EAE93AA21EC05D909C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:95:e8:66:80:8f:15:56:e8:8e:f2:ad:5c:
4a:db:a5:0e:6a:59:70:11:c8:d0:e5:ce:00:af:7e:
d2:77:ab:3e:21:45:ac:63:ba:19:68:83:d9:9b:81:
9b:1c:98:4e:4f:1a:c5:75:f6:c0:b4:35:ca:a7:b0:
8a:75:db:59:40:49:87:0f:c8:57:c3:f8:f8:07:f3:
00:f8:9d:34:3f:53:c1:eb:61:f9:9c:25:71:16:e5:
f4:32:6f:09:e6:32:72:57:23:d2:e0:8f:f8:e0:a5:
7b:76:d1:a3:a3:91:89:0c:8e:ea:e2:b1:af:6d:ef:
fb:25:96:30:eb:0c:b4:59:6d:c1:fd:27:99:9a:57:
96:e7:35:a2:15:da:81:1a:3e:d6:e9:c7:18:f2:34:
73:49:f0:2a:3f:2e:3c:18:98:40:3b:f8:5c:12:35:
18:7e:12:73:2e:0f:2c:f2:90:32:63:af:64:98:cf:
e6:81:97:03:db:6b:17:13:d1:c9:1c:3f:6b:15:b9:
ff:f8:9b:52:9a:57:3a:ef:e1:f6:58:cb:a7:4a:0b:
11:9d:10:71:9f:35:77:49:5f:d4:16:ea:ad:4f:53:
b8:2f:13:f7:87:4a:bf:55:58:8c:a9:66:92:68:db:
14:b1:65:03:65:2f:f2:da:6d:75:d9:f4:0b:a0:6e:
b7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DF:0E:1D:2D:DC:41:53:DE:F7:EA:E9:3A:A2:1E:C0:5D:90:9C:90
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/R98OHS3cQVPe9-rpOqIewF2QnJA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.176.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:f3:96:d1:d6:b2:35:af:26:c6:01:ef:72:82:21:78:6e:64:
79:89:b2:4c:66:12:37:9f:0c:db:42:d0:e7:b3:3d:ea:5f:c6:
95:a3:7d:12:a0:29:47:2d:2d:6f:15:03:58:41:44:b8:b7:8b:
f0:fb:63:2d:e3:d2:73:35:89:02:2e:d4:a2:e8:04:03:4f:f0:
be:32:2b:8a:69:e1:3c:a3:68:b7:a4:19:d3:ac:c7:c4:94:0a:
90:6b:96:4b:0a:db:d8:1e:c8:72:cf:a1:1b:a8:6e:90:6b:36:
0b:8b:4a:49:ff:8c:8a:d9:e2:47:ab:18:0f:f6:20:03:b2:3b:
c0:57:1f:05:7f:09:eb:22:bc:55:ad:ce:a8:87:04:c3:a9:29:
4f:c9:0e:92:4a:76:1e:da:18:51:d1:ee:d0:89:9e:55:5b:cb:
ea:0f:2c:66:e3:bc:9c:dd:85:af:07:f1:a6:6e:10:71:a8:70:
91:cd:bc:86:7a:1f:a1:02:bd:26:3f:d1:9a:a4:e7:bb:6d:31:
97:eb:17:f3:bd:6f:b1:38:38:b2:ab:af:c8:a1:71:66:5a:05:
e6:81:35:8e:5d:9e:bf:46:eb:f1:8f:ff:92:29:11:ec:57:b3:
85:7f:de:4d:97:32:bb:61:21:93:76:9a:a3:c8:f5:f2:86:49:
d2:e5:1c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:50:45 2025 by rpki-client