Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/b4RDp8oyvXQuBslDHT1IrEkr5Nk.roa
File: b4RDp8oyvXQuBslDHT1IrEkr5Nk.roa (raw, json)
Hash identifier: BX5ezr3cgbn1mNhIBY0QB3SKPqUvKNmDsvCUIOs02c0=
Subject key identifier: 6F:84:43:A7:CA:32:BD:74:2E:06:C9:43:1D:3D:48:AC:49:2B:E4:D9
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 1410
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/b4RDp8oyvXQuBslDHT1IrEkr5Nk.roa
Signing time: Fri 22 Aug 2025 08:57:31 +0000
ROA not before: Fri 22 Aug 2025 08:57:31 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18419
IP address blocks: 118.150.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5136 (0x1410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 22 08:57:31 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=6F8443A7CA32BD742E06C9431D3D48AC492BE4D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:45:19:ac:54:de:3e:c5:2f:8e:e0:0e:d5:cf:
fd:6e:23:47:a8:b5:79:a2:ca:8b:59:ef:b3:5f:da:
8b:00:5f:f0:6e:98:75:7b:c9:24:cf:23:5f:7c:ea:
d4:e2:81:4b:89:d0:21:e7:79:fe:db:8f:74:b6:1b:
57:02:33:51:ff:54:c6:6f:ba:5e:d5:18:5a:00:b2:
82:d9:d7:4f:5d:fd:c0:94:fd:45:08:cc:4e:f7:c4:
ba:21:63:a2:77:66:2d:41:59:7b:0a:ba:9c:ab:b7:
f1:05:0e:fb:fd:4d:0f:1a:89:ab:90:9e:01:9b:68:
a1:de:6e:a1:b7:4b:72:b5:84:1c:4e:5d:91:8e:41:
28:7d:4c:3b:01:68:5b:a9:f2:41:5d:66:2c:70:95:
fd:ff:32:7a:f9:67:f6:44:fc:1b:3f:bb:26:ea:9e:
3a:77:82:9e:42:00:66:f1:ab:ec:a7:a3:16:90:ff:
0f:e1:3e:3a:00:6a:77:85:3e:bb:bd:e9:22:d8:49:
3b:20:a4:72:23:f0:ee:db:2e:a5:04:5f:dd:42:f3:
6c:7d:d5:0a:99:00:08:8e:4a:c8:0f:28:4e:9f:3e:
76:35:1a:65:67:11:98:5f:97:43:81:a0:d4:fd:96:
55:55:44:cf:2c:a3:f3:86:3c:f5:f9:37:6e:52:52:
04:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:84:43:A7:CA:32:BD:74:2E:06:C9:43:1D:3D:48:AC:49:2B:E4:D9
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/b4RDp8oyvXQuBslDHT1IrEkr5Nk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.252.0/22
Signature Algorithm: sha256WithRSAEncryption
90:0f:26:7b:4c:86:2f:1c:d3:71:59:77:86:9e:df:2b:95:e7:
59:d1:0b:00:d6:07:b2:a5:c3:0a:7a:49:91:83:6c:7f:2e:fc:
ae:62:e1:1a:31:48:29:21:2b:2e:68:5e:21:d4:e3:13:19:3c:
06:d2:e8:ce:24:cf:0e:f8:90:73:ba:97:8d:5a:74:df:19:b9:
be:21:dc:ab:70:9f:d8:73:e5:88:0a:b6:51:f6:b4:3e:19:72:
00:88:29:2f:c0:e2:b4:d7:3d:2f:e2:2f:fb:c8:0f:02:44:93:
d6:8b:6b:9d:05:28:d3:56:77:d5:e4:c2:51:bd:87:56:8c:0e:
b2:e3:de:c7:25:3d:f6:9d:b9:cc:01:46:f8:f6:ed:16:dd:7d:
48:ae:00:ab:dc:92:5d:0a:fe:c1:ba:1b:eb:dc:0d:8d:32:76:
ab:3c:f9:a6:1a:fc:ba:76:31:8b:ed:24:51:4b:61:95:99:7d:
80:80:5f:45:51:4c:3d:8a:f9:4a:08:b5:da:d6:c9:1e:74:f6:
19:55:bf:86:50:62:a5:ad:d7:c2:a9:5c:2a:31:93:0d:8a:9b:
2e:d2:c8:a7:17:05:b4:a4:d8:ee:dd:9e:d5:de:a1:09:39:19:
96:91:97:88:9e:1b:97:4e:46:ff:0f:8b:b5:f4:82:9b:7a:34:
ef:98:14:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:51:10 2025 by rpki-client