Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/jLyTbu4-yEAbGTraMQK_SA5KYRA.roa
File: jLyTbu4-yEAbGTraMQK_SA5KYRA.roa (raw, json)
Hash identifier: HKcvyVI9JbVS3WDBF+TsFkNMbSbpnyw1HMEFrb0Tj/w=
Subject key identifier: 8C:BC:93:6E:EE:3E:C8:40:1B:19:3A:DA:31:02:BF:48:0E:4A:61:10
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 13DA
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/jLyTbu4-yEAbGTraMQK_SA5KYRA.roa
Signing time: Fri 22 Aug 2025 08:59:48 +0000
ROA not before: Fri 22 Aug 2025 08:59:48 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9311
IP address blocks: 222.156.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5082 (0x13da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 22 08:59:48 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=8CBC936EEE3EC8401B193ADA3102BF480E4A6110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:0b:59:4c:8e:fc:59:8c:d7:a9:0e:6c:9f:
8e:60:76:30:82:6a:8c:f7:7a:d9:72:35:c0:a7:c3:
ac:99:16:5d:ce:cb:29:0b:27:b6:4c:23:6e:2b:06:
d4:36:df:8e:6f:b9:f9:aa:6c:a3:42:f3:01:00:9c:
05:99:26:e5:06:37:dc:f4:ef:7d:e9:82:ff:fe:23:
5f:58:f1:28:d6:f5:4b:b9:0b:01:98:13:e8:af:29:
6a:80:3c:82:c8:36:d0:92:4a:e2:8b:74:c3:94:af:
d6:57:56:2a:91:e0:88:f4:a1:02:aa:2f:d7:b3:30:
c3:ec:70:06:f6:dc:8b:92:4f:fe:c9:97:80:b4:47:
b2:d4:2e:b8:36:28:a0:4d:3a:2e:37:a5:94:00:35:
a0:9f:33:f3:fb:19:d8:19:2a:ec:64:fb:9e:38:08:
ef:6e:35:38:19:a1:3b:fa:70:d1:a2:fc:b7:47:75:
fa:44:18:d4:3b:2d:45:da:1a:33:bd:6d:90:7a:eb:
97:a4:bb:ec:38:be:6c:13:be:8d:d4:ff:b8:01:71:
07:ad:9e:2d:f7:e4:5a:59:70:06:17:20:8c:3d:d2:
04:e6:37:aa:8d:bb:86:5b:53:bf:1e:e2:6f:3e:46:
00:98:1c:12:33:6e:0c:2d:32:39:8c:68:0d:25:43:
51:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BC:93:6E:EE:3E:C8:40:1B:19:3A:DA:31:02:BF:48:0E:4A:61:10
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/jLyTbu4-yEAbGTraMQK_SA5KYRA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.156.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:1e:e2:dc:16:4f:c0:65:e9:3a:b1:86:5e:51:69:6e:5a:f9:
ab:d5:db:0d:d0:eb:c3:3a:04:29:b3:53:8f:13:af:03:38:b7:
44:0b:67:29:85:35:b1:d6:99:a2:cd:94:f6:67:52:46:b5:39:
27:11:e6:90:71:06:f4:62:d4:3e:00:9d:03:85:4c:24:c3:16:
57:ad:45:18:93:a2:24:87:c8:23:6a:b5:67:59:85:b1:09:9f:
d8:b3:9f:a2:a4:8f:7d:21:1e:3e:e0:d0:7b:7e:f9:ba:ed:b7:
bb:fd:af:26:11:15:b4:0a:23:8a:5d:3f:6d:02:69:2e:f2:e5:
a2:5b:ae:f9:06:b1:eb:72:f7:79:d7:9b:3b:27:a9:3b:24:ac:
d1:21:c4:d0:3b:7c:ce:c5:ff:65:64:9b:d6:49:97:be:05:b6:
5b:e0:2e:84:17:5e:db:2e:97:2c:1e:3e:c4:87:ea:b0:10:ac:
62:b9:af:ef:fa:38:4b:b7:73:32:57:4d:08:d5:0a:da:84:33:
0a:1e:37:6c:38:8d:f5:0b:53:e9:23:64:b0:13:aa:6a:91:80:
87:3b:47:b4:c5:ee:ad:bd:7f:19:45:2f:ed:9d:fb:aa:82:90:
9f:77:08:e4:85:5e:b8:15:b8:a5:14:74:6a:f7:e0:56:c5:e0:
b4:74:8c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:50:00 2025 by rpki-client