Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/av5-yRNQHSf34I2_v1MEz7EBQMk.roa
File: av5-yRNQHSf34I2_v1MEz7EBQMk.roa (raw, json)
Hash identifier: cDw7aJXja/e/lBx1DJAK8zMEk2SHFosQ6xfkwMdTTZs=
Subject key identifier: 6A:FE:7E:C9:13:50:1D:27:F7:E0:8D:BF:BF:53:04:CF:B1:01:40:C9
Certificate issuer: /CN=ABD4DDB4BF932C5006B704B9828410174AC412AD
Certificate serial: 0225
Authority key identifier: AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/av5-yRNQHSf34I2_v1MEz7EBQMk.roa
Signing time: Fri 22 Aug 2025 09:03:38 +0000
ROA not before: Fri 22 Aug 2025 09:03:38 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 150766
IP address blocks: 36.50.228.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABD4DDB4BF932C5006B704B9828410174AC412AD
Validity
Not Before: Aug 22 09:03:38 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=6AFE7EC913501D27F7E08DBFBF5304CFB10140C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1a:bc:51:9c:ab:07:84:14:55:ab:68:a8:3b:
a5:14:16:69:a8:73:1a:d4:97:75:e7:ac:33:94:07:
f1:b5:42:ea:c5:57:30:34:52:5a:94:b0:d7:33:0d:
16:80:37:9e:58:fc:89:97:35:0c:65:49:d8:77:44:
93:28:5e:59:13:be:cb:f8:c9:19:fe:48:0d:e9:5b:
c2:68:4e:40:50:16:05:94:f9:19:8d:b7:b3:11:a0:
a7:ae:15:00:fa:8c:4d:d7:7c:a1:92:8a:8c:4a:5e:
01:41:7a:7c:51:5e:46:4b:b2:3d:c1:0f:43:4c:23:
a5:80:ec:db:be:65:1a:de:80:15:d1:aa:ab:eb:80:
4d:b6:73:42:b2:f5:3e:68:bd:e9:53:0d:44:93:aa:
c8:23:e8:46:df:23:b6:18:04:16:d9:2f:06:bc:07:
c1:9f:9f:c9:f6:62:c9:5d:3d:79:23:fa:99:f2:3d:
88:d8:ed:90:65:e1:0c:a5:d7:40:48:37:aa:4a:70:
64:b3:02:e8:25:94:8e:70:d4:85:d8:8e:78:ba:9d:
b3:25:cb:77:90:3b:09:ca:d3:b6:87:f7:7e:69:c5:
d1:a3:ab:f4:8e:9e:09:b0:29:43:09:cf:3a:6e:02:
7c:5c:1c:05:9b:6a:b6:c6:77:09:b6:ea:b8:6d:03:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FE:7E:C9:13:50:1D:27:F7:E0:8D:BF:BF:53:04:CF:B1:01:40:C9
X509v3 Authority Key Identifier:
keyid:AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/av5-yRNQHSf34I2_v1MEz7EBQMk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.228.0/24
Signature Algorithm: sha256WithRSAEncryption
82:3d:c4:d9:e6:96:1e:9e:dc:38:0f:8c:c9:3a:44:91:f4:5b:
b5:c8:f8:85:8b:e2:52:ed:cf:96:cf:4f:61:2f:24:20:a4:b2:
1c:43:59:08:05:63:b6:ab:7b:ff:4e:69:5e:56:8e:f0:a1:f8:
9e:41:21:3e:27:c2:55:42:a8:44:1c:ca:ac:ce:cd:aa:3b:35:
ea:ca:cf:f9:fb:27:1b:33:fe:45:ed:c9:9c:11:34:05:0a:e3:
ab:a9:90:de:83:d0:2b:09:a8:ea:72:11:a8:57:87:36:d8:8e:
02:f1:93:32:5f:f5:5d:dc:b5:db:a9:c2:2b:d9:94:cb:ca:45:
7b:3d:e4:3a:d2:5d:74:69:14:9f:0b:02:05:19:9d:96:56:b9:
46:44:d8:79:a9:10:fa:93:d6:68:2d:1c:ab:ea:03:ab:b3:2f:
36:26:a9:66:7c:55:79:66:7e:d4:7d:52:ca:04:42:e6:d6:fa:
38:0b:8b:57:30:cb:95:18:2c:a1:dc:6e:a8:b6:61:39:84:b3:
be:c4:5d:4c:0f:e2:6f:e4:88:48:75:f7:d1:d5:2d:96:dc:10:
e8:9e:db:0f:d0:e8:f6:7f:c4:d8:95:97:4c:e0:77:c2:df:ed:
93:96:94:09:e0:cb:5e:b8:59:4f:6a:ef:79:e5:e9:21:d5:9c:
c7:49:4a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:35:43 2025 by rpki-client