Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DBSBANKSG/C0FQft0AjWQ2pEDZCizD4M5gFb8.roa
File: C0FQft0AjWQ2pEDZCizD4M5gFb8.roa (raw, json)
Hash identifier: KXqYa+r+A3uRe7SjI8SZk8eNluJdkH6RPhdKASp5Xio=
Subject key identifier: 0B:41:50:7E:DD:00:8D:64:36:A4:40:D9:0A:2C:C3:E0:CE:60:15:BF
Certificate issuer: /CN=603136CCA4FB40559F2F75778C389C9D02C23F40
Certificate serial: 2D
Authority key identifier: 60:31:36:CC:A4:FB:40:55:9F:2F:75:77:8C:38:9C:9D:02:C2:3F:40
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YDE2zKT7QFWfL3V3jDicnQLCP0A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKSG/C0FQft0AjWQ2pEDZCizD4M5gFb8.roa
Signing time: Mon 25 Aug 2025 01:39:55 +0000
ROA not before: Mon 25 Aug 2025 01:39:55 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 56289
IP address blocks: 165.99.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603136CCA4FB40559F2F75778C389C9D02C23F40
Validity
Not Before: Aug 25 01:39:55 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=0B41507EDD008D6436A440D90A2CC3E0CE6015BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:13:b3:c8:5a:25:b7:1c:1f:59:b7:a6:6b:
88:85:e0:37:a4:36:af:51:c8:2c:55:2f:83:fd:c3:
c7:8a:02:11:71:d0:0b:ff:08:7a:e1:50:30:ce:ba:
9b:72:73:8e:d7:03:9e:e4:78:48:5f:7d:7a:b0:07:
75:48:29:2d:67:e3:57:4d:d2:cb:04:97:c5:fb:e4:
1b:db:70:bf:9f:01:3d:7e:61:5a:05:76:f7:69:6a:
cc:8c:cc:0d:34:db:d1:25:3d:e1:a0:8c:8d:8b:bb:
85:20:98:8f:83:9e:f0:01:68:52:47:25:dc:43:63:
e0:11:8d:71:c8:d8:57:a3:e8:19:04:dd:55:cc:f2:
7c:be:6e:57:6f:be:a9:ad:b1:fe:35:0f:a7:69:61:
7c:bd:5e:a7:e0:c3:31:b6:ff:37:09:86:36:a7:c2:
5c:59:8c:d9:e7:1a:c2:c2:85:61:5f:ab:67:70:a9:
ef:52:cc:30:37:f5:96:31:51:71:b3:d6:aa:0b:5f:
cc:8e:b6:db:e1:bf:4c:c1:0c:89:87:ab:3b:99:28:
3c:cc:eb:09:0f:46:1d:3b:da:3c:0e:58:27:25:dc:
86:f4:a4:d9:27:dd:ad:c7:9f:d4:3c:91:59:0b:6f:
e2:18:48:d5:8d:15:12:50:38:fd:86:09:96:e2:de:
85:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:41:50:7E:DD:00:8D:64:36:A4:40:D9:0A:2C:C3:E0:CE:60:15:BF
X509v3 Authority Key Identifier:
keyid:60:31:36:CC:A4:FB:40:55:9F:2F:75:77:8C:38:9C:9D:02:C2:3F:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKSG/YDE2zKT7QFWfL3V3jDicnQLCP0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YDE2zKT7QFWfL3V3jDicnQLCP0A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKSG/C0FQft0AjWQ2pEDZCizD4M5gFb8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.170.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a3:85:91:e6:af:ad:8e:85:ec:53:56:cd:f7:18:07:8e:dc:
05:54:c3:37:da:21:a3:b5:f2:ae:34:07:a3:f9:2f:34:d5:ad:
49:03:c8:29:af:25:d4:28:ef:32:1a:ab:8f:bb:6d:1d:3e:cb:
31:6a:a1:c0:0d:c9:4a:89:b2:16:5f:02:c3:68:b9:3d:b4:d6:
36:69:73:ab:07:83:c6:73:f5:d3:f1:ec:66:86:f0:76:a6:aa:
84:7c:93:03:42:37:13:0b:17:5c:74:b9:08:c2:78:3b:f2:78:
a7:be:2f:f2:60:cf:46:b7:53:fb:e4:60:5d:27:7d:b0:8a:4c:
04:87:c1:7d:5a:1f:d2:b2:9d:f7:0a:99:6a:77:58:1e:62:e3:
f5:6f:0d:88:7b:8a:b1:82:ef:7d:58:99:22:9b:ff:58:60:da:
fd:cb:29:4a:09:e4:c7:64:2b:3e:8a:6d:82:3d:9b:9d:8d:89:
47:07:dc:7d:8d:50:85:ab:3c:eb:75:54:0b:6d:60:03:42:e7:
f5:37:f3:e0:dc:0f:ce:e8:5a:3f:bf:96:e2:bd:78:da:a7:d3:
20:dc:09:e8:e9:9f:a3:9d:f7:60:de:9c:7a:6c:2e:25:dd:2d:
3e:b4:69:ce:72:7c:6b:5f:a4:68:bb:67:7e:f3:3c:f7:3c:6e:
85:a2:df:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:36:46 2025 by rpki-client