Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/kvQkqbc4LzlHby27w17qLy29jWM.roa
File: kvQkqbc4LzlHby27w17qLy29jWM.roa (raw, json)
Hash identifier: sGbqpVh2WqLdmdlsBidPocaqsKGmsv3ZTImWpAzM6HY=
Subject key identifier: 92:F4:24:A9:B7:38:2F:39:47:6F:2D:BB:C3:5E:EA:2F:2D:BD:8D:63
Certificate issuer: /CN=ABD4DDB4BF932C5006B704B9828410174AC412AD
Certificate serial: 0227
Authority key identifier: AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/kvQkqbc4LzlHby27w17qLy29jWM.roa
Signing time: Fri 22 Aug 2025 09:03:39 +0000
ROA not before: Fri 22 Aug 2025 09:03:39 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 150766
IP address blocks: 36.50.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABD4DDB4BF932C5006B704B9828410174AC412AD
Validity
Not Before: Aug 22 09:03:39 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=92F424A9B7382F39476F2DBBC35EEA2F2DBD8D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:61:ff:2b:9a:0c:f1:6e:39:2d:1d:9b:b1:
9b:9f:8a:37:8d:3f:00:fe:25:4a:da:fd:f1:2b:bc:
63:5b:65:af:9f:9e:09:14:0a:3b:77:08:32:ec:a2:
1c:e3:e1:a3:a9:88:f5:f4:8d:d3:42:35:11:c7:1c:
96:e0:61:c0:96:a4:20:3e:e8:2f:da:51:7a:56:52:
b5:fb:c7:ca:5e:bb:86:72:f6:ac:31:13:0b:d1:33:
a3:66:f8:4c:e5:49:9a:3f:a4:1f:e3:27:f8:5b:49:
ae:6b:61:d9:b6:f6:c4:dd:59:27:99:8a:98:3f:72:
3e:23:40:41:cb:c2:9d:af:14:07:93:f5:29:6c:5b:
8e:08:c9:8c:36:3c:ae:fe:4a:7f:e4:7c:61:c8:ad:
f5:4c:b6:50:96:03:46:a2:34:7f:d7:68:18:3f:f5:
35:4c:c7:82:d2:66:91:7e:00:2c:92:f2:61:b7:67:
bd:c2:3e:b7:15:20:f1:af:87:4e:85:dd:77:fa:76:
bb:6f:17:1d:39:de:86:75:1e:9d:ca:a1:b3:e1:4f:
11:99:13:0c:17:5b:af:fd:51:85:e8:3b:89:eb:d3:
4c:91:37:ea:c2:5e:a0:96:53:d1:45:cc:d5:4e:2a:
a6:57:2a:19:7b:09:e7:bc:78:ce:8c:52:20:48:a2:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F4:24:A9:B7:38:2F:39:47:6F:2D:BB:C3:5E:EA:2F:2D:BD:8D:63
X509v3 Authority Key Identifier:
keyid:AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/kvQkqbc4LzlHby27w17qLy29jWM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.229.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ef:0d:2b:0e:8c:80:4c:0d:f4:f2:ba:71:89:eb:b4:3b:64:
94:e7:05:80:f3:6f:6b:8a:a5:aa:74:70:a4:79:2a:98:d4:3e:
bf:6f:c7:93:b8:13:21:89:5e:ad:dc:01:0d:21:69:43:7f:89:
5d:f0:27:a1:b0:bf:1b:10:d5:b8:9c:d7:95:4f:33:45:da:f6:
f6:1e:a8:a3:02:0a:61:06:7a:53:b0:a7:23:88:80:67:0f:3a:
f2:84:95:94:ca:80:d0:fc:5b:10:67:00:1a:a3:75:7d:df:e5:
a4:16:77:66:9e:2b:0d:c8:9b:61:a5:be:a3:d6:7c:d2:3e:27:
60:68:4c:cc:5c:58:53:30:e9:93:fb:62:fa:9e:0d:f8:51:68:
c8:29:67:07:72:62:8b:01:af:31:cb:0d:ca:fd:9c:b1:7b:f0:
2a:19:3a:73:c8:52:c4:2f:31:8e:77:a0:01:e8:e6:33:ec:4c:
23:ea:4e:f2:88:03:2b:36:3b:f6:6a:73:c5:8d:cb:4f:d5:8f:
be:19:50:f4:41:34:1c:7c:2e:6a:5c:b6:8a:12:4d:70:ae:7a:
54:d8:54:96:0e:04:37:de:4a:0a:68:22:29:11:51:ce:7a:3f:
29:40:a2:58:d8:08:39:89:64:1f:6b:1b:0e:c4:7c:ab:55:9e:
7d:72:ac:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:53:26 2025 by rpki-client