Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/6Ej6Sy5gV5N3fBiZr84OkcWGwMU.roa
File: 6Ej6Sy5gV5N3fBiZr84OkcWGwMU.roa (raw, json)
Hash identifier: UfS6sTSJXlnCh6f2QWwIDq3xlIBGXkv8cbMgcrqGnVw=
Subject key identifier: E8:48:FA:4B:2E:60:57:93:77:7C:18:99:AF:CE:0E:91:C5:86:C0:C5
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 1267
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/6Ej6Sy5gV5N3fBiZr84OkcWGwMU.roa
Signing time: Fri 22 Aug 2025 08:49:19 +0000
ROA not before: Fri 22 Aug 2025 08:49:19 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 17809
IP address blocks: 203.222.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4711 (0x1267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 22 08:49:19 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=E848FA4B2E605793777C1899AFCE0E91C586C0C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:32:15:7c:0a:ef:64:f8:61:c1:82:1b:72:
5c:85:7c:4e:5b:be:85:2e:dc:57:42:90:fc:7b:7e:
18:4d:2b:60:0a:55:ff:59:e0:2f:4d:59:52:03:7c:
0d:a5:f4:a6:ec:2c:5c:28:a0:c1:8b:87:8f:e0:b3:
02:01:ed:73:94:3e:86:ed:41:1b:09:fb:63:09:86:
76:9e:b8:24:5b:60:9f:07:87:18:be:8e:a0:4d:d6:
1f:64:af:43:67:b7:06:3b:61:f0:14:24:86:96:bb:
c0:74:f1:b1:36:95:d0:25:3e:ea:dd:22:07:bd:3c:
b8:34:64:a7:90:75:7b:3f:13:7d:7c:68:16:1a:eb:
ff:c8:54:a1:98:ce:f9:fd:fc:13:ea:51:19:ae:73:
92:dd:48:2a:d5:7f:cf:2c:dd:a8:6a:34:03:83:96:
12:3a:6c:53:04:e4:54:57:71:79:89:34:03:fc:27:
27:90:47:8f:3d:b2:e7:7d:2c:75:1c:09:12:76:5c:
7e:94:d3:6e:3a:b6:c8:79:a1:1b:60:39:17:64:55:
71:79:59:cc:33:07:c8:cb:f1:38:59:15:ef:08:52:
90:67:2d:2b:8a:00:63:50:88:f9:17:54:e0:15:a0:
88:18:6b:5c:97:17:7a:3a:a4:fd:d3:33:5e:b0:78:
bd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:48:FA:4B:2E:60:57:93:77:7C:18:99:AF:CE:0E:91:C5:86:C0:C5
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/6Ej6Sy5gV5N3fBiZr84OkcWGwMU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.20.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:63:28:6b:a7:90:7f:c2:00:3b:0c:2a:21:49:41:69:ec:7d:
c9:14:38:1c:a4:8d:47:eb:27:77:a5:a2:a8:ae:49:16:d6:f6:
c8:ce:62:b7:ed:05:57:d7:06:dc:02:d8:ba:e0:0d:66:34:f9:
d5:44:81:cd:ea:43:bc:c8:66:81:3b:f7:e6:70:0c:2f:47:fe:
f8:59:c0:d3:0f:9c:0e:fc:ae:da:62:a6:9a:1a:7c:6e:c5:79:
bb:34:e5:ba:fd:2b:5d:9c:c5:06:d5:55:c3:9c:e5:16:8e:6b:
0e:da:cc:66:1e:fb:41:6a:fd:54:8d:db:96:77:9a:0a:00:bf:
4c:43:12:89:d9:54:ae:7e:b8:cf:6c:a4:98:b4:65:ad:17:31:
df:66:36:38:91:cb:00:c5:d8:4c:99:56:42:96:41:ef:21:5d:
8a:e4:8a:ae:7a:d6:7b:56:83:4a:21:58:f6:e2:9d:03:70:3e:
70:a5:9e:70:1a:b8:0a:a8:9a:b3:5a:44:8e:7b:8a:4e:0b:a4:
c6:43:d6:91:8e:49:c2:85:29:0d:37:51:38:0b:1b:f1:e7:5c:
a7:33:54:b1:36:11:82:09:ed:23:90:a5:5f:e3:a1:5e:25:54:
f5:0c:c1:c1:9f:83:18:d9:31:27:20:36:80:0e:13:4b:c1:de:
49:52:26:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:44:19 2025 by rpki-client