Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/yNLWtqaaWOBZBz29iBMtLp4_E-Y.roa
File: yNLWtqaaWOBZBz29iBMtLp4_E-Y.roa (raw, json)
Hash identifier: RIHWCqhtt1KLhihrevVIANWbxdErCTwA4k8UX53fSzI=
Subject key identifier: C8:D2:D6:B6:A6:9A:58:E0:59:07:3D:BD:88:13:2D:2E:9E:3F:13:E6
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 123B
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/yNLWtqaaWOBZBz29iBMtLp4_E-Y.roa
Signing time: Fri 22 Aug 2025 08:49:08 +0000
ROA not before: Fri 22 Aug 2025 08:49:08 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 17809
IP address blocks: 203.217.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4667 (0x123b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 22 08:49:08 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=C8D2D6B6A69A58E059073DBD88132D2E9E3F13E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:7c:2e:2d:73:0c:e3:b4:fb:fa:1b:a8:01:
4c:e3:b9:33:db:d7:a0:b6:d0:f7:38:5c:59:61:aa:
22:63:9d:6e:d8:3a:fc:52:cd:1e:a4:58:db:f2:34:
d8:54:b1:35:07:1e:02:11:aa:89:19:b3:53:06:aa:
f2:51:73:64:a1:2c:d8:04:e6:5c:6f:63:33:0d:b0:
78:08:69:56:30:a6:c9:c3:49:ce:8a:0a:cc:c7:65:
1c:e7:a4:ea:6f:95:e5:e8:6c:56:9c:2d:4f:1b:9a:
4e:f1:49:a3:9c:27:45:e4:e9:16:98:1f:1d:6a:02:
ad:ac:a9:92:ff:6c:03:06:07:60:11:b3:dc:b6:81:
cb:33:d1:1e:f2:8d:4c:22:b5:97:49:00:81:d2:c0:
ce:9f:5b:fa:80:eb:e6:7c:32:58:ee:35:ab:7b:13:
ff:c5:51:27:9a:a0:e8:bf:20:b2:43:15:f9:e6:b3:
cc:68:df:a5:08:3a:7e:50:90:c6:1b:25:6d:d8:27:
4a:1f:07:10:df:26:e0:e7:f5:51:d4:63:8f:0b:15:
73:59:4a:69:f7:72:c3:2d:58:37:4c:59:52:98:26:
80:52:0b:00:2f:f5:f8:e6:8e:b1:37:db:df:d3:b9:
6b:b1:60:8d:2e:3a:ee:c8:95:73:d7:b1:f3:0a:40:
45:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D2:D6:B6:A6:9A:58:E0:59:07:3D:BD:88:13:2D:2E:9E:3F:13:E6
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/yNLWtqaaWOBZBz29iBMtLp4_E-Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.217.96.0/19
Signature Algorithm: sha256WithRSAEncryption
00:6a:3d:a3:aa:9f:f3:c4:57:b0:6f:cc:67:d2:b6:7d:03:60:
8f:05:a6:7b:fc:5e:8a:d0:76:4c:fc:92:f4:f6:58:df:f3:0d:
dd:2f:a6:f8:81:9d:9a:67:50:3f:8a:5c:08:3f:33:b7:01:e7:
07:46:7d:92:2d:0b:b1:4e:c3:ea:e0:08:c3:c8:51:ae:f4:62:
4e:f6:c9:93:72:ff:6d:ea:21:bd:26:e9:d8:84:90:b0:6a:b4:
fc:ed:ec:4f:bb:6d:41:ce:5d:4a:e2:bd:81:19:42:68:6f:4a:
cc:5c:83:07:45:bc:6d:a3:87:9c:f6:05:4b:1f:4e:7a:75:19:
4b:eb:a2:48:68:d8:ca:bd:05:ca:79:a2:41:fc:d9:23:a8:30:
86:3a:75:85:1c:81:11:71:b7:42:62:b0:76:ea:cd:cb:6e:ea:
55:85:fc:f3:35:d8:09:b1:30:67:56:98:db:d5:3e:ad:4e:6d:
46:00:0c:a8:3b:01:ec:dc:d7:74:10:d9:95:77:e7:ac:44:dc:
04:69:4e:14:ff:27:6b:0c:54:b6:fe:5b:54:77:ed:cd:a8:50:
89:ac:91:e0:00:a7:17:8d:44:d7:3d:e2:3e:b5:f1:56:49:05:
e9:ec:1e:3f:93:28:53:1c:00:ef:a1:f1:a7:db:9c:81:ba:48:
06:9f:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:00:05 2025 by rpki-client