Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/Cn_s4ZUwpbzBWg6NwMtcEIy00O0.roa
File: Cn_s4ZUwpbzBWg6NwMtcEIy00O0.roa (raw, json)
Hash identifier: /iJBx9dXXQTdBiW/5SELw4rLF+l1l35k+PoO2t7uLg8=
Subject key identifier: 0A:7F:EC:E1:95:30:A5:BC:C1:5A:0E:8D:C0:CB:5C:10:8C:B4:D0:ED
Certificate issuer: /CN=ABD4DDB4BF932C5006B704B9828410174AC412AD
Certificate serial: 0222
Authority key identifier: AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/Cn_s4ZUwpbzBWg6NwMtcEIy00O0.roa
Signing time: Fri 22 Aug 2025 09:03:38 +0000
ROA not before: Fri 22 Aug 2025 09:03:38 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 150766
IP address blocks: 2401:5da0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABD4DDB4BF932C5006B704B9828410174AC412AD
Validity
Not Before: Aug 22 09:03:38 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=0A7FECE19530A5BCC15A0E8DC0CB5C108CB4D0ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:6f:ff:34:62:a1:25:c0:00:52:17:7b:8e:
95:f0:4d:70:70:5a:ba:c1:a6:9f:29:c4:98:8b:bf:
36:5d:42:68:c2:f8:ff:0e:87:d5:7c:b4:18:36:1c:
a4:5c:8b:20:37:af:8e:c9:14:51:be:30:a5:bc:39:
f1:e8:0d:0c:8a:4c:9d:9d:da:2f:80:11:d0:76:c4:
60:18:9f:04:87:4d:5b:a5:73:b9:55:67:0a:60:df:
f2:fc:d3:63:34:d4:f5:ec:4a:49:8a:72:76:0e:f2:
9c:9a:8f:27:4d:4c:b6:73:92:2d:32:2c:b3:9e:d0:
23:86:82:fb:b1:bb:5c:d3:90:ca:b7:43:16:84:45:
42:2f:f1:81:e6:cc:6d:60:7b:09:6e:93:92:ae:45:
45:78:c2:04:7c:0f:ad:68:f4:e6:6d:1a:8a:11:34:
67:49:c6:29:4d:e2:10:72:72:3d:5c:98:f3:b4:00:
a0:15:05:dd:d2:a0:ef:67:e0:4e:4a:2b:5d:46:7f:
c4:66:1c:40:59:f0:da:36:8e:7e:b2:a8:53:5a:a0:
0c:27:02:3a:03:0b:a5:ad:e4:65:07:74:7d:35:09:
a9:1a:1a:ab:cf:75:84:a2:d4:94:43:96:bd:90:f8:
ee:67:d7:0c:8b:59:70:44:67:fa:d2:cc:e4:c0:af:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7F:EC:E1:95:30:A5:BC:C1:5A:0E:8D:C0:CB:5C:10:8C:B4:D0:ED
X509v3 Authority Key Identifier:
keyid:AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/Cn_s4ZUwpbzBWg6NwMtcEIy00O0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:5da0:2::/48
Signature Algorithm: sha256WithRSAEncryption
19:84:2e:17:c0:24:29:11:3d:67:74:64:86:28:a7:26:dd:91:
d6:94:55:19:a7:97:23:61:f2:3e:71:05:80:5c:6d:e6:69:df:
03:0e:30:8e:74:ee:fe:81:0f:94:67:7a:63:47:a3:06:84:12:
7b:8e:ef:88:68:67:37:51:72:6a:1b:5f:dd:d3:b2:d5:bf:59:
9a:a4:6c:50:78:eb:7f:15:ed:88:23:67:f7:8a:d1:5d:59:c8:
33:f7:85:44:b4:dd:42:b5:36:ee:2c:58:90:24:a4:e4:40:7d:
bf:6b:e6:c0:1b:3b:3f:00:c9:15:a4:2c:29:7d:c2:79:1c:84:
52:3e:a9:3c:5c:04:b3:3d:3e:42:26:6e:45:c3:62:a5:e8:46:
ca:5c:9a:35:08:d2:62:1c:3c:b5:c4:40:3a:40:43:8b:c1:8e:
c0:f9:92:a8:66:08:87:ce:ee:cb:be:22:d5:ae:48:64:d8:0f:
af:8f:bc:07:d7:2f:d0:89:17:ae:17:da:f3:48:53:e7:11:55:
af:f6:3b:b3:cd:52:c9:5f:d2:7b:e7:6e:f9:87:05:d0:12:13:
90:45:8d:0e:40:a4:34:c6:11:04:2f:cc:d4:3c:c4:98:d5:c2:
42:42:73:f1:e9:e5:7b:39:1d:42:ab:f2:1d:9d:06:c2:46:a6:
a0:b1:77:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:49:54 2025 by rpki-client