Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/FEkS2AdduKTJWEZBxpLFeaE9udI.roa
File: FEkS2AdduKTJWEZBxpLFeaE9udI.roa (raw, json)
Hash identifier: L4bkE8XcbaqcM7iVwOQuXzoGz3Bv7Db1e27C4JATwhE=
Subject key identifier: 14:49:12:D8:07:5D:B8:A4:C9:58:46:41:C6:92:C5:79:A1:3D:B9:D2
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 128A
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/FEkS2AdduKTJWEZBxpLFeaE9udI.roa
Signing time: Fri 22 Aug 2025 08:49:26 +0000
ROA not before: Fri 22 Aug 2025 08:49:26 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 17809
IP address blocks: 182.155.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4746 (0x128a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 22 08:49:26 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=144912D8075DB8A4C9584641C692C579A13DB9D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:fd:45:64:f5:bf:7a:e0:60:ed:37:2a:4b:
7d:94:2d:33:43:cd:f3:bf:6f:bf:0d:c5:7e:55:9f:
57:1e:d3:f2:65:57:a3:d6:47:0c:23:e9:84:fb:d0:
2a:2c:52:e1:93:20:84:1e:70:3d:02:81:3c:f0:cf:
da:5d:df:58:80:77:d3:24:2a:36:ef:6b:5e:39:be:
38:46:b7:ae:a2:1c:12:67:10:c7:4b:84:cd:d3:6a:
19:e7:2e:a5:8f:90:3f:ae:b3:9a:9b:e4:c7:46:d7:
60:b8:d5:49:2b:3c:1f:81:68:62:e9:d8:d6:cb:ae:
7f:27:ac:94:7e:c3:bd:88:49:97:8b:c2:3b:21:bf:
e8:3b:64:f0:f1:2c:0a:58:b5:5b:e4:8f:81:74:40:
39:da:83:cd:95:b4:d8:34:bd:1b:37:8a:0a:27:f9:
0c:6b:15:68:f5:1a:7b:59:a8:32:d5:74:af:e3:aa:
b7:5b:f4:5e:42:c8:66:30:4e:e9:d0:e2:c2:c3:85:
3e:95:66:9c:48:28:54:f4:e7:97:5b:de:ea:bf:6e:
00:55:60:07:9c:39:b1:e2:76:e6:9f:b4:73:8c:dc:
50:d4:36:bb:7a:63:81:b9:c9:cb:b5:15:e1:6b:ff:
89:70:4b:29:16:77:01:84:df:cb:81:14:27:d5:97:
7c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:49:12:D8:07:5D:B8:A4:C9:58:46:41:C6:92:C5:79:A1:3D:B9:D2
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/FEkS2AdduKTJWEZBxpLFeaE9udI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0d:6b:ee:13:26:2e:17:08:cf:48:33:3c:65:eb:4d:cb:36:d2:
65:ec:b0:d7:c3:6b:8d:df:7b:dd:a4:c3:f5:dd:38:69:7e:24:
29:a0:68:f3:f2:9e:e3:62:5e:7b:9b:01:5b:99:8e:2e:3e:3e:
17:4e:26:a8:ea:0d:cb:ea:43:0d:7c:6c:a0:be:c2:ad:44:ab:
36:43:3b:50:92:70:b9:93:b4:0d:22:39:3d:12:9e:ab:d9:8e:
c1:e4:f5:26:c8:17:58:5e:bc:50:35:cb:ad:f6:5b:7c:02:ed:
bc:25:c7:b1:da:29:43:a6:e7:3a:56:8e:cc:95:26:08:b3:4c:
05:d2:a0:80:cd:e8:c6:e8:e8:ce:17:cd:73:e3:4f:86:18:29:
69:3f:d4:d3:21:c8:25:a9:f3:0e:20:83:a7:45:15:e0:ca:41:
d8:7f:af:7f:11:f6:22:6e:42:74:36:ad:65:3d:1e:c0:22:84:
d3:85:1c:ca:e9:55:8e:40:29:80:5b:42:79:2a:d8:df:62:d4:
71:7c:51:21:c7:11:cc:4b:d8:cb:d6:57:29:07:f3:ec:54:ff:
6e:d6:59:4b:1f:40:90:cc:60:79:f9:99:9b:08:61:f4:e7:d6:
eb:7e:29:89:7c:fb:ca:36:7b:c5:4f:65:30:54:99:1b:e0:9a:
98:fa:aa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:44:08 2025 by rpki-client