Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EHHKY/lucsKQ_k7erujKxt8qVBkhFkQUM.roa
File: lucsKQ_k7erujKxt8qVBkhFkQUM.roa (raw, json)
Hash identifier: wgpw6zNUNOjZoXJPctyxIsDj2EpRRl95KQxfyXVX4go=
Subject key identifier: 96:E7:2C:29:0F:E4:ED:EA:EE:8C:AC:6D:F2:A5:41:92:11:64:41:43
Certificate issuer: /CN=8302DE193598EDC36222D929FAD6678367D62E21
Certificate serial: 1398
Authority key identifier: 83:02:DE:19:35:98:ED:C3:62:22:D9:29:FA:D6:67:83:67:D6:2E:21
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwLeGTWY7cNiItkp-tZng2fWLiE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/lucsKQ_k7erujKxt8qVBkhFkQUM.roa
Signing time: Fri 22 Aug 2025 08:55:18 +0000
ROA not before: Fri 22 Aug 2025 08:55:18 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131607
IP address blocks: 103.130.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5016 (0x1398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8302DE193598EDC36222D929FAD6678367D62E21
Validity
Not Before: Aug 22 08:55:18 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=96E72C290FE4EDEAEE8CAC6DF2A5419211644143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3f:81:6e:3c:ee:1c:4f:88:5b:e2:b8:de:d2:
31:c4:d9:a1:b0:99:4c:0c:fa:ad:6d:d7:32:75:5e:
3d:fe:f5:f7:19:ab:ca:dd:87:bf:0a:25:c6:2c:e2:
74:59:0c:8e:e0:b6:ab:3c:1c:8a:96:ac:a3:33:b9:
a1:7c:06:6d:98:2b:cb:03:3a:c2:95:d1:d0:86:fb:
45:a0:74:fe:1d:cf:52:ed:db:f6:3e:bb:18:0c:a1:
b8:c5:24:e2:e9:3d:b8:06:e4:73:8e:9b:72:f4:5d:
3e:68:21:cb:56:ce:2b:80:25:e5:7e:25:88:f6:6b:
4b:68:8f:46:17:ad:bc:70:07:df:87:55:fc:9f:d2:
b3:82:1f:25:13:a4:ce:33:6e:2d:a6:8d:b7:90:37:
c5:14:96:90:9b:13:ae:f6:5e:dc:e9:48:6d:ba:53:
e7:f9:07:6b:a7:b9:93:4a:62:1c:b7:0e:7b:0d:c8:
9c:30:0f:bc:db:4e:11:fe:55:8f:e6:a7:db:46:32:
5a:71:b3:7f:8f:91:32:db:6a:39:97:d2:f5:b1:f5:
6e:99:ec:e4:f1:7c:38:f5:c1:c1:72:b0:09:b3:e2:
b6:7c:db:17:29:ce:c7:c9:a4:13:f1:f2:98:84:4e:
6a:bc:c7:a6:9d:e9:44:8f:34:98:5c:77:6f:98:a8:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E7:2C:29:0F:E4:ED:EA:EE:8C:AC:6D:F2:A5:41:92:11:64:41:43
X509v3 Authority Key Identifier:
keyid:83:02:DE:19:35:98:ED:C3:62:22:D9:29:FA:D6:67:83:67:D6:2E:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwLeGTWY7cNiItkp-tZng2fWLiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/lucsKQ_k7erujKxt8qVBkhFkQUM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.84.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:0e:ac:da:c9:df:0d:3b:82:c2:61:1b:05:0d:d0:a3:3c:02:
71:19:2a:bd:2a:d6:4a:d6:16:a7:65:62:58:da:5a:a5:97:e6:
8f:38:ea:96:0d:6d:a0:9f:42:a4:b3:41:50:f6:50:74:35:7a:
3e:90:5e:79:b7:b5:d5:98:45:f6:92:a7:bc:29:25:eb:55:2b:
a2:07:cb:29:65:20:77:fa:49:ca:b1:a4:be:a2:69:be:93:1a:
20:8a:88:03:e6:a8:bb:4d:7d:89:c3:55:d0:9c:62:3e:05:a0:
e9:e5:16:64:bd:5b:05:a2:31:65:52:ec:9c:08:b7:17:b2:42:
11:01:fd:00:93:8c:05:5f:65:89:b9:08:83:45:00:26:58:26:
e0:65:a1:5e:d4:90:f5:21:3f:59:97:bd:c8:1a:df:23:60:91:
4e:fb:53:01:04:eb:c7:16:19:68:6d:e1:e4:50:76:46:fd:a4:
c5:0c:e4:97:85:e5:57:7f:69:51:4e:c9:bc:75:c3:8b:8b:df:
c6:5e:da:8a:87:4a:72:53:ac:5d:b7:10:2e:a9:19:ac:69:5a:
b5:ea:db:97:5e:69:cd:72:99:3a:c3:c1:36:5d:82:af:41:8f:
f0:e5:19:88:8d:9a:95:ed:60:1f:98:bf:a3:38:a3:7e:a5:20:
7e:31:12:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:51:17 2025 by rpki-client