Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/ONiGNyN2a5XzhlDs_A2_5euQ7uY.roa
File: ONiGNyN2a5XzhlDs_A2_5euQ7uY.roa (raw, json)
Hash identifier: 9y2XElXFqksBaCqCc2PlVjsjJ/Jxgt7xm35P0MIbn4Y=
Subject key identifier: 38:D8:86:37:23:76:6B:95:F3:86:50:EC:FC:0D:BF:E5:EB:90:EE:E6
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 13A6
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ONiGNyN2a5XzhlDs_A2_5euQ7uY.roa
Signing time: Fri 22 Aug 2025 08:59:33 +0000
ROA not before: Fri 22 Aug 2025 08:59:33 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9311
IP address blocks: 203.79.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5030 (0x13a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 22 08:59:33 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=38D8863723766B95F38650ECFC0DBFE5EB90EEE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0b:97:f7:aa:06:a8:f7:f3:a1:f7:95:ac:01:
27:e9:a9:38:94:7e:39:a6:dd:d5:13:86:5f:25:b5:
3d:5f:e8:e7:36:92:94:e6:f9:3d:84:b7:9b:9d:91:
bf:a4:6e:e1:f7:15:1a:d3:21:37:f7:7c:3f:eb:e9:
31:1d:32:a8:69:07:ab:71:80:ab:81:88:0f:bb:2c:
d8:5d:d1:a8:01:c8:b3:82:f8:84:a0:14:b6:51:eb:
3a:e2:5e:4c:be:8e:aa:ed:9e:6b:09:78:bd:d5:f8:
36:6f:5d:6a:76:78:fd:54:02:3f:e7:79:49:89:70:
12:38:7c:d2:20:ec:73:44:08:42:85:da:b9:d1:f4:
7f:a5:46:3b:c5:09:7d:53:53:47:eb:aa:09:10:8f:
90:c4:8e:df:d6:25:fc:45:7a:be:38:9e:96:61:72:
ed:52:cf:24:5e:c3:55:82:88:14:10:4f:ca:86:91:
f2:3e:c7:d5:69:e0:e9:e0:d5:e9:d1:f9:b0:fa:b0:
de:7f:10:77:6a:17:31:a1:04:1b:4c:6d:4d:2d:ea:
f2:78:99:d2:94:59:68:6b:ea:66:db:03:25:7f:99:
0f:cd:2b:a8:46:4f:9f:db:3f:34:c0:6f:4e:28:0f:
c8:31:cb:8e:cb:69:c4:1f:ed:7c:91:b7:a1:fd:0f:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D8:86:37:23:76:6B:95:F3:86:50:EC:FC:0D:BF:E5:EB:90:EE:E6
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ONiGNyN2a5XzhlDs_A2_5euQ7uY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.220.0/22
Signature Algorithm: sha256WithRSAEncryption
63:81:04:4a:bb:62:47:e1:f8:f5:96:63:3f:84:91:1c:a1:d8:
7d:45:23:aa:10:ab:4c:d6:2f:d8:b7:d1:d8:21:c8:13:a4:cb:
03:de:30:1d:84:dd:54:44:1a:ce:8f:ed:a2:32:40:ca:b4:29:
59:37:7c:b0:9e:53:42:65:ec:2f:3d:da:b6:94:29:94:89:de:
8c:57:10:cd:7b:80:77:9a:d1:0f:e3:a2:b7:70:db:18:9b:a1:
a0:34:dc:4c:b0:bf:bd:78:72:20:86:2e:ba:87:97:4c:d8:ca:
a6:3b:10:8b:c6:d6:89:d1:cc:98:47:6c:58:b5:88:33:21:12:
80:3c:70:70:9d:89:05:96:b1:42:55:d1:f7:26:5a:7a:49:e1:
e0:bf:43:db:97:4b:76:31:58:0b:9d:7b:c6:33:31:19:7a:8b:
1a:3a:c9:38:4e:d7:e0:04:1d:1c:b5:42:19:a0:5f:e3:90:e9:
b6:ec:ea:0b:9b:24:43:f0:02:03:f5:aa:8a:6a:ca:17:12:20:
01:f7:e1:3e:37:1a:4d:21:ed:60:a9:76:58:3e:f7:ea:d3:64:
e0:66:14:94:ff:27:53:1c:54:b0:d0:02:69:3c:dc:05:cd:5d:
dc:b0:08:d2:69:a2:14:07:1f:fa:bd:01:35:54:94:d9:c8:74:
9d:fc:8e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:50:19 2025 by rpki-client