Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/KH_yQ7e76IrEHvcoRQIPk7EcLLo.roa
File: KH_yQ7e76IrEHvcoRQIPk7EcLLo.roa (raw, json)
Hash identifier: JjafWyCjSj+jfpsxfnO9EXl7JR5+97KCPZsAZMfhGXI=
Subject key identifier: 28:7F:F2:43:B7:BB:E8:8A:C4:1E:F7:28:45:02:0F:93:B1:1C:2C:BA
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 1288
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KH_yQ7e76IrEHvcoRQIPk7EcLLo.roa
Signing time: Fri 22 Aug 2025 08:49:26 +0000
ROA not before: Fri 22 Aug 2025 08:49:26 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 17809
IP address blocks: 182.155.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4744 (0x1288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 22 08:49:26 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=287FF243B7BBE88AC41EF72845020F93B11C2CBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:bb:e3:10:fd:1a:0a:a8:fd:a8:ae:7b:4e:
5f:d6:87:2d:82:8e:86:53:ca:55:88:04:2d:2c:14:
cb:a0:80:e2:af:13:bf:67:cb:70:e6:a0:a2:9d:be:
05:27:a3:0b:03:80:53:0b:1a:3c:62:f0:ac:4b:17:
84:11:7a:1b:9e:8e:ca:bb:03:03:0e:f7:87:77:6f:
cf:45:dc:79:cc:d3:d0:21:c1:27:9c:05:7f:81:5e:
fd:4b:39:75:58:c3:19:6b:9c:39:23:7d:fe:a5:91:
f9:3b:e1:7a:c3:1e:2f:50:79:60:bf:8b:3f:7d:10:
a4:36:35:63:ca:df:4d:f5:f9:1d:7a:cf:b2:43:e6:
94:6d:12:6f:83:49:8b:24:ae:6e:b1:3b:b6:26:2b:
27:8e:4d:8e:4f:a1:25:5f:58:be:83:dd:aa:9a:06:
15:d8:2c:e9:51:60:d9:21:97:bf:9e:33:03:58:31:
7a:af:7f:3a:1a:4c:45:bd:27:d8:7a:c3:15:13:5b:
17:ad:34:3e:3e:11:ec:d6:66:7a:e4:cb:70:37:52:
35:d6:a3:f3:23:75:f4:de:b1:bb:44:7f:f7:f2:07:
cb:ba:e7:77:77:c4:0c:c2:7f:b9:b9:8f:4c:59:7f:
ee:10:18:4c:d8:e3:d8:c8:38:cf:30:02:d3:d5:4a:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7F:F2:43:B7:BB:E8:8A:C4:1E:F7:28:45:02:0F:93:B1:1C:2C:BA
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KH_yQ7e76IrEHvcoRQIPk7EcLLo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.192.0/18
Signature Algorithm: sha256WithRSAEncryption
94:fb:f9:78:a9:16:fc:da:80:89:23:e3:6c:9d:21:44:2e:71:
c7:44:04:5c:ff:e9:5a:3b:00:88:28:24:ad:aa:b8:c4:a7:53:
c2:66:ac:d2:0b:58:62:bf:52:19:31:75:e3:46:9c:c6:22:c2:
b6:d7:4f:91:a0:d9:5e:f4:c7:9f:82:08:ac:03:8a:4b:c4:f4:
aa:eb:b3:a6:6b:b0:a1:d9:00:4c:9c:ee:76:81:21:c8:3c:2d:
05:fc:18:ff:f5:44:a3:96:57:cc:e4:e4:26:5d:21:a0:e4:7b:
20:d9:73:6e:82:77:1c:67:87:b4:00:f4:9f:ff:8a:6a:cb:a6:
22:d8:ad:95:cb:96:7a:52:00:73:e9:51:2f:08:c8:d3:65:ae:
4b:06:cb:10:99:b2:5e:17:c2:45:8e:9c:a3:21:18:ec:a3:a6:
fa:b2:21:7c:88:bc:c9:12:e8:5a:ed:0a:d7:6e:9c:06:3d:18:
d2:10:15:ce:62:bb:ef:99:22:1f:dd:dd:a9:6f:b9:2c:a8:db:
ca:98:67:81:91:df:db:5a:7f:f9:89:67:84:d7:b3:9e:93:e2:
27:a6:40:c6:61:e3:36:8e:9c:ae:8c:f4:98:e2:97:0d:88:0d:
7f:f7:57:50:b9:ee:bd:33:2c:ce:ac:1e:79:e4:8a:73:c4:18:
58:58:e6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:44:26 2025 by rpki-client