Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/aZ7pfLXhdC4Pvlir_4p30mSMGrM.roa
File: aZ7pfLXhdC4Pvlir_4p30mSMGrM.roa (raw, json)
Hash identifier: jYS7ky5PhCJcGSEDIptWz/zw8a0pdnj4a2l7l0ujkSg=
Subject key identifier: 69:9E:E9:7C:B5:E1:74:2E:0F:BE:58:AB:FF:8A:77:D2:64:8C:1A:B3
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 1422
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/aZ7pfLXhdC4Pvlir_4p30mSMGrM.roa
Signing time: Fri 22 Aug 2025 08:57:35 +0000
ROA not before: Fri 22 Aug 2025 08:57:35 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131607
IP address blocks: 150.117.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5154 (0x1422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 22 08:57:35 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=699EE97CB5E1742E0FBE58ABFF8A77D2648C1AB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:3d:a7:2d:a4:1b:6e:45:58:81:a6:4c:8a:
71:8c:30:0d:c6:ea:ce:9e:07:31:90:e5:62:d8:a3:
9b:13:73:d6:74:4a:12:90:8e:49:ff:85:01:71:21:
a7:53:28:1c:b5:0d:df:b7:31:04:77:3b:c3:ec:72:
99:77:9d:6a:dc:ac:93:7e:da:2a:2e:a4:0d:43:5e:
2d:d6:bf:91:d7:18:3d:52:15:67:d8:1e:f8:26:68:
40:e3:ed:ee:04:7e:cd:f2:69:9e:4c:54:31:e8:fc:
7d:17:5d:a7:3c:e4:b6:1f:72:43:29:71:1b:6e:39:
9e:29:98:c9:94:97:55:5a:38:a1:4f:93:5c:33:c6:
9f:36:08:fd:41:16:76:e6:b0:2f:88:4e:0e:88:8e:
84:eb:62:7e:79:e5:36:74:f1:b4:e8:5b:af:a1:45:
d9:06:72:e6:df:91:95:32:f8:fa:76:45:b6:73:44:
e0:e9:32:8d:5d:83:ad:32:e9:f7:26:7d:08:e4:04:
de:3c:a5:ac:a4:81:a1:12:26:c6:fd:bb:29:e7:8a:
ed:5e:67:db:ab:02:b4:87:c8:c0:20:62:6d:9c:fb:
9e:eb:e7:18:64:df:2e:95:ec:ed:1f:10:76:4f:35:
99:25:e9:83:03:d9:5b:d1:1c:c3:6d:4b:99:ae:5b:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9E:E9:7C:B5:E1:74:2E:0F:BE:58:AB:FF:8A:77:D2:64:8C:1A:B3
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/aZ7pfLXhdC4Pvlir_4p30mSMGrM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.64.0/20
Signature Algorithm: sha256WithRSAEncryption
82:a1:ea:a4:78:26:43:f6:dc:82:af:cd:fd:ba:06:a9:26:ab:
a1:ca:2d:9c:04:77:5c:a0:3c:d6:25:49:59:7a:cb:1f:1b:2d:
f3:11:4a:73:e8:79:72:4b:bd:c8:fe:e8:cc:6b:a9:c4:21:75:
7a:fc:32:a2:6b:c7:10:70:7b:cc:da:b0:3e:dd:78:7d:ae:5c:
0a:c6:3c:21:95:ad:6c:5e:e3:54:77:cf:88:5e:30:fd:da:ba:
a6:6f:35:17:df:e8:4b:af:d1:f5:ec:9a:ad:0e:62:2b:70:af:
ee:63:43:4c:69:40:d8:69:10:31:df:42:0f:56:49:70:48:ff:
80:d2:88:27:8b:97:b6:8e:d3:ca:b3:6b:57:c6:a8:12:06:32:
ab:97:b8:4e:0e:07:7c:c4:a2:5a:e0:59:4b:19:15:bf:8b:cd:
36:28:35:8f:5e:b5:f1:76:9c:97:92:27:60:e6:63:28:27:84:
97:bb:14:6b:67:7b:db:a4:31:25:47:54:c8:6a:d0:d5:12:9c:
70:85:23:c0:44:a3:73:6d:9e:65:62:94:b1:4e:e2:ef:10:bc:
b4:67:ec:ea:58:4d:ab:1e:23:0f:ee:44:85:2e:aa:9b:f0:bb:
29:dc:de:7c:33:94:f9:21:15:1b:c5:df:be:7a:c4:39:ef:ee:
9a:e8:f6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:50:38 2025 by rpki-client