Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ymZMkQKU272dS-BHmzhmQ9ryin4.roa
File: ymZMkQKU272dS-BHmzhmQ9ryin4.roa (raw, json)
Hash identifier: eSCKJ6/aUhAF3mbrj6L/iNP22ns9YKaqWbwLYz++EgM=
Subject key identifier: CA:66:4C:91:02:94:DB:BD:9D:4B:E0:47:9B:38:66:43:DA:F2:8A:7E
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 1408
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ymZMkQKU272dS-BHmzhmQ9ryin4.roa
Signing time: Fri 22 Aug 2025 08:57:30 +0000
ROA not before: Fri 22 Aug 2025 08:57:30 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131607
IP address blocks: 150.117.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5128 (0x1408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 22 08:57:30 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=CA664C910294DBBD9D4BE0479B386643DAF28A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:82:21:9f:76:9d:e0:62:34:5a:ce:d7:0a:
d2:1f:27:a9:d0:d7:74:60:a9:f7:ed:a1:42:8e:bb:
52:e0:3c:40:2b:f7:68:ca:26:81:cf:af:81:54:05:
20:b5:77:7b:47:f2:9f:b4:05:84:63:97:6a:4d:7b:
8c:b4:85:f3:9e:ec:f4:f9:a5:cd:15:07:67:c1:b5:
20:57:95:f8:8c:b0:8f:99:4b:6a:79:02:8a:bb:ac:
42:e2:0b:89:95:3e:b5:7f:76:8e:cc:6d:3f:f1:f7:
cf:9d:58:4e:0e:1a:87:dc:5c:8a:c8:d3:bc:ff:d1:
d7:af:96:7f:a1:7e:fb:3a:f3:a0:7d:08:d0:16:fd:
65:06:f3:7c:c4:71:fc:8a:fc:dd:b8:e0:db:b3:de:
bd:62:a1:8a:9d:f3:e4:10:91:14:fa:82:20:6c:70:
64:ae:c9:21:c3:0c:f1:7e:18:ea:a8:1e:ca:9d:33:
de:a1:8a:db:6b:26:84:1f:44:eb:4c:8c:02:1b:86:
1c:0b:ec:c7:2b:41:81:43:4e:f3:9f:b2:af:19:3d:
bb:6d:09:ba:ab:6e:26:85:71:46:68:37:cf:a8:0e:
99:b1:ab:b3:88:ef:90:86:6f:f3:3c:ff:61:50:0b:
42:77:55:b6:c6:2a:ac:6a:07:e4:c7:2c:68:00:4c:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:66:4C:91:02:94:DB:BD:9D:4B:E0:47:9B:38:66:43:DA:F2:8A:7E
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ymZMkQKU272dS-BHmzhmQ9ryin4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.168.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:fb:1b:73:80:b4:38:04:4e:32:c9:03:64:3e:45:cb:3e:57:
f4:d7:2f:aa:48:32:e1:81:11:7d:57:ed:13:29:ae:69:bf:15:
f6:7d:52:00:e1:d2:99:2a:4b:ee:c2:bb:3e:ce:85:90:ce:ee:
37:7d:f7:bd:eb:fa:2c:9d:c9:03:17:df:02:3f:39:ae:4f:be:
d7:49:10:3a:9a:8d:6a:cd:bf:1d:e9:6d:49:b4:98:a2:87:be:
23:c7:fa:73:3d:ae:2e:44:75:e8:01:0d:0a:71:e2:2d:69:9e:
14:42:84:f4:9a:a1:ae:f0:89:d9:c0:a6:a8:e4:42:40:b0:60:
3f:af:03:d2:62:31:6f:ea:aa:29:a5:1f:d3:91:bb:57:47:9a:
fb:60:51:c7:29:a8:a9:30:5d:48:50:8c:2a:c6:bb:8c:e7:69:
6e:70:43:8b:49:67:93:c7:40:7f:f8:a1:48:06:c2:a8:d5:dd:
6c:ec:b4:ef:ee:95:4a:c4:8b:53:05:3c:22:ee:5f:6a:30:57:
f8:45:a4:29:d6:79:ef:99:f9:90:2e:25:ba:b8:7f:e9:62:90:
ed:0e:9d:db:f2:90:3e:77:20:1b:56:7d:1d:58:1c:6a:ff:41:
2b:70:4c:52:b9:68:f4:8c:5e:65:da:2e:02:33:90:12:fc:30:
2d:df:ca:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:53:40 2025 by rpki-client