Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/zGqeiiPruSr2biU_XbPbul94r88.roa
File: zGqeiiPruSr2biU_XbPbul94r88.roa (raw, json)
Hash identifier: CIv1CpocJOY5qfjKr/7KVEEXmefn7kWMA6n1EjHrA9U=
Subject key identifier: CC:6A:9E:8A:23:EB:B9:2A:F6:6E:25:3F:5D:B3:DB:BA:5F:78:AF:CF
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 1276
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/zGqeiiPruSr2biU_XbPbul94r88.roa
Signing time: Fri 22 Aug 2025 08:49:22 +0000
ROA not before: Fri 22 Aug 2025 08:49:22 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 17809
IP address blocks: 113.61.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4726 (0x1276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 22 08:49:22 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=CC6A9E8A23EBB92AF66E253F5DB3DBBA5F78AFCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c9:5e:b4:6c:a0:81:1f:54:4c:9e:be:14:a3:
7a:9e:06:ec:c1:67:40:d6:98:04:86:11:97:ce:71:
9b:54:1c:45:a4:38:f8:64:1d:e7:b4:95:4d:64:5f:
2b:23:0b:90:e1:56:3f:4f:72:ed:df:c4:23:fa:d2:
d9:02:8f:b5:db:63:b7:0d:06:10:01:31:56:35:ef:
d0:47:9b:24:37:17:40:91:f3:ce:56:2b:d0:ca:3a:
b7:23:b5:24:85:c0:be:86:86:a3:b4:7b:b2:b4:b6:
8f:07:c9:c3:c8:54:48:eb:ae:8c:d2:3b:5e:a5:2e:
30:77:c2:cb:af:46:be:fd:7e:0a:bb:9e:c9:8c:67:
73:d5:f4:19:e4:54:d3:1a:82:47:05:32:03:a9:26:
90:84:1c:4c:1e:a9:6d:39:1c:94:d8:45:c2:11:a0:
14:8d:3e:74:3d:65:11:1f:11:ab:a1:20:f0:78:9f:
78:e4:39:73:e4:7c:94:39:47:23:7a:66:22:aa:b6:
99:88:26:e4:ae:7a:3d:ae:2a:38:b6:fd:b5:c8:4a:
6d:23:0d:54:53:50:38:be:3e:b7:af:d0:a1:d5:2f:
ac:c9:a8:c8:40:84:8d:b0:27:a1:e0:d6:cc:05:bf:
36:e4:ef:ff:a4:eb:b2:e9:6d:b5:82:fa:f5:33:b1:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6A:9E:8A:23:EB:B9:2A:F6:6E:25:3F:5D:B3:DB:BA:5F:78:AF:CF
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/zGqeiiPruSr2biU_XbPbul94r88.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.208.0/20
Signature Algorithm: sha256WithRSAEncryption
99:a2:ae:05:fb:96:b6:68:8f:c5:3c:8a:29:5f:3b:de:ab:3d:
91:82:b3:03:6f:c1:3f:6d:86:6d:3e:12:e0:2d:49:96:83:a4:
e4:34:d2:15:bf:e1:7a:c9:1a:e6:05:55:75:ab:97:89:3b:de:
6a:5a:53:f6:38:8c:75:a8:76:94:1c:8e:05:bf:f0:2e:36:55:
10:45:d8:7f:b7:b1:af:37:91:ba:94:0c:47:c5:e0:4f:07:cd:
9d:be:e8:ab:4b:b2:e9:68:42:5d:1f:15:75:41:bd:a3:a7:a1:
53:63:ef:5c:b9:66:42:f2:4f:04:bf:26:35:c8:d2:01:df:dc:
20:4d:3b:16:4e:77:c4:cd:cb:ff:d6:f0:23:8a:61:a3:12:d4:
d3:5f:c9:be:0e:f4:84:a9:ca:1f:4f:61:5e:a1:62:6c:75:11:
6c:63:a7:19:2f:b1:e9:c7:86:fe:a6:b5:6c:27:ac:6c:b4:a8:
8c:b6:13:ff:24:d9:c6:ca:4b:15:7d:71:39:35:9d:19:87:86:
d3:f3:5d:a9:ef:64:78:e4:6f:1c:1e:1f:4f:37:ac:fc:a6:28:
49:f8:e0:98:fa:a9:fc:2c:76:15:b0:bd:89:89:0c:b7:42:e8:
06:ce:89:a2:df:2e:ea:d0:d9:36:dc:2e:ce:cc:a0:2c:26:b4:
0e:07:3d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:53:19 2025 by rpki-client