Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/p-jwzLW_Nxohm2fkv9gD8p2GjEs.roa
File: p-jwzLW_Nxohm2fkv9gD8p2GjEs.roa (raw, json)
Hash identifier: tG+8OrcRm+D4SQIezh2X1SBrh/V49EbovvHxz+80//E=
Subject key identifier: A7:E8:F0:CC:B5:BF:37:1A:21:9B:67:E4:BF:D8:03:F2:9D:86:8C:4B
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 13E9
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/p-jwzLW_Nxohm2fkv9gD8p2GjEs.roa
Signing time: Fri 22 Aug 2025 08:57:24 +0000
ROA not before: Fri 22 Aug 2025 08:57:24 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131607
IP address blocks: 150.117.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5097 (0x13e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 22 08:57:24 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=A7E8F0CCB5BF371A219B67E4BFD803F29D868C4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:73:20:bd:70:1f:37:e4:88:1c:6e:72:8e:
d4:0f:76:0a:67:56:19:ea:b8:29:b7:c8:a0:6d:55:
ba:96:60:51:93:56:83:2c:79:c2:09:61:09:bb:d9:
3a:3f:ab:cc:72:80:30:c3:e1:fa:9e:ea:2b:55:88:
ce:e6:2f:96:32:33:95:a9:21:bc:6e:d9:f3:03:e6:
27:08:95:84:31:88:5c:86:1c:0c:3e:11:be:56:70:
5d:0d:15:d9:f9:ea:db:3c:58:f0:1d:64:1c:91:a9:
94:1b:5e:02:92:3d:84:17:04:68:d6:51:ff:d1:58:
b4:75:0e:17:f2:2d:92:14:f3:e7:5e:31:2a:27:63:
2c:9f:01:82:9d:fe:cf:50:c2:2e:1e:3d:99:38:d7:
96:6c:22:30:25:ac:42:e4:fb:bd:38:4b:a1:b8:76:
02:26:7c:c1:f0:3b:2e:ec:77:80:d7:79:98:e9:a9:
e7:8c:ec:f4:41:49:4a:13:d5:06:93:b9:51:33:7b:
1c:45:e2:95:b4:bf:b5:7e:8e:17:9d:c9:6d:72:53:
02:d1:65:60:c6:d8:34:50:9a:d7:bf:9a:ba:8e:a1:
58:e0:19:6e:20:19:c1:bc:4c:cf:66:58:f2:47:28:
b9:3f:8a:3c:51:fb:8a:5e:fc:ba:3e:80:f8:cc:9a:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E8:F0:CC:B5:BF:37:1A:21:9B:67:E4:BF:D8:03:F2:9D:86:8C:4B
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/p-jwzLW_Nxohm2fkv9gD8p2GjEs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.56.0/21
Signature Algorithm: sha256WithRSAEncryption
b9:53:1d:de:08:05:40:e2:cb:8c:c2:ef:dd:b8:e3:9c:cc:8c:
34:f7:24:6a:e9:fb:57:1e:b6:c1:cc:7d:3c:43:a1:d5:e7:20:
3c:2f:dd:98:68:51:5c:8a:58:cc:24:90:49:6b:76:28:0a:cc:
d3:fb:11:68:d1:a6:16:aa:69:d4:74:75:1d:80:60:ac:34:91:
92:37:a7:7a:c1:96:08:c6:55:5d:20:46:8e:dc:b2:11:00:2d:
5a:a9:42:6c:75:cb:cc:dc:a4:77:ad:37:5d:09:17:1f:d5:e9:
2b:47:27:32:e8:a1:89:08:bc:f9:1b:ef:65:2b:90:c6:ac:e8:
b5:2b:7b:d7:47:34:6d:60:be:42:5e:41:90:63:b7:30:d1:e9:
f0:81:ff:a6:42:d0:3a:0a:96:90:f9:25:85:f5:58:0d:79:cb:
48:50:60:51:f2:c4:52:a8:14:02:db:ee:d0:0c:f4:db:3a:5d:
1a:55:0d:10:9f:01:73:e7:3f:14:e5:ae:68:ac:60:9a:c2:7c:
fd:17:5b:71:9d:0f:31:da:c2:b5:7b:ca:0f:da:ec:68:5c:e9:
7d:a0:ee:90:ad:80:19:a4:c1:59:51:50:58:c2:1f:64:a7:46:
3c:d1:dc:82:d1:cf:1f:64:68:61:e8:06:ed:e5:0c:3d:23:14:
d2:bc:81:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:45:50 2025 by rpki-client