Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/6XGvDhhCQBa13ub_Oe5hYLv8zMM.roa
File: 6XGvDhhCQBa13ub_Oe5hYLv8zMM.roa (raw, json)
Hash identifier: Z1Gx766UgoSnBYLl2jt8suotvAI/pJir5o3p/czJyzk=
Subject key identifier: E9:71:AF:0E:18:42:40:16:B5:DE:E6:FF:39:EE:61:60:BB:FC:CC:C3
Certificate issuer: /CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F
Certificate serial: 13A0
Authority key identifier: 68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/6XGvDhhCQBa13ub_Oe5hYLv8zMM.roa
Signing time: Fri 22 Aug 2025 08:52:03 +0000
ROA not before: Fri 22 Aug 2025 08:52:03 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131663
IP address blocks: 2403:b7c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5024 (0x13a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F
Validity
Not Before: Aug 22 08:52:03 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=E971AF0E18424016B5DEE6FF39EE6160BBFCCCC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:d3:7a:77:de:f2:97:cb:db:a1:f3:8a:47:
e8:d3:ea:29:b3:71:67:92:25:38:49:f9:86:89:7d:
2f:0c:4b:3c:f6:44:f6:b6:69:1a:51:3d:50:9f:21:
a3:43:86:8b:89:e0:64:85:41:9e:5f:22:55:23:4b:
f6:e3:57:a6:61:a8:7d:7d:4c:b4:e7:b0:a0:b5:55:
95:61:d5:8e:63:38:1e:91:92:0d:ee:4a:1b:98:61:
d2:28:b8:69:05:54:da:ab:bc:62:27:53:9d:29:92:
fc:5b:57:4f:5b:c5:8c:ff:81:1a:4d:58:e8:08:f8:
ae:86:c0:66:cc:12:7a:46:8c:bc:3e:ed:4e:f6:cd:
6d:d1:a8:1e:1a:f1:e4:aa:81:56:9d:d2:59:5b:ca:
92:57:79:3d:a2:f6:8f:33:44:0c:2d:1c:c5:c3:9e:
25:e6:d3:9b:7b:36:85:5e:ff:39:d2:1e:90:85:97:
35:89:cb:0d:de:0d:71:de:0c:54:09:f0:38:46:90:
58:eb:01:78:f2:cd:c5:32:2d:bc:49:67:23:1a:d9:
99:77:8d:16:c0:b5:b1:9d:a5:d2:74:29:a7:77:b2:
74:49:64:5d:b3:ab:05:4c:53:fc:28:ba:77:0e:f7:
80:0a:13:fa:41:97:13:4d:ac:9c:d1:e0:6d:ad:98:
fa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:71:AF:0E:18:42:40:16:B5:DE:E6:FF:39:EE:61:60:BB:FC:CC:C3
X509v3 Authority Key Identifier:
keyid:68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/6XGvDhhCQBa13ub_Oe5hYLv8zMM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:b7c0::/32
Signature Algorithm: sha256WithRSAEncryption
aa:ff:fb:f7:1f:8f:76:85:47:07:91:d9:7a:41:dd:54:89:89:
71:1e:93:e5:10:c9:c9:6a:09:66:f3:21:83:14:04:59:7c:f6:
bc:89:fe:1e:79:94:ba:ea:a7:44:6c:50:84:c5:20:f9:88:f4:
57:d3:b1:c0:ea:74:d7:eb:94:77:4a:63:25:95:dc:fe:c9:d7:
d8:07:e6:e5:86:8c:ad:a9:2d:fa:68:38:4a:57:28:0a:d5:f1:
54:28:90:c2:ae:19:64:dd:46:83:4f:8a:cc:60:b2:cc:a2:66:
96:26:22:20:ae:0f:03:cc:1a:87:bd:27:95:93:4e:bd:e6:18:
75:6f:c1:44:e7:8d:55:98:0d:20:7a:c0:9f:65:f2:4b:66:8c:
53:e9:e6:b2:91:b8:16:86:16:61:28:56:a0:1c:92:06:58:62:
0c:d3:f9:51:f1:5b:cc:d7:d5:dd:55:88:b5:14:14:43:37:69:
dd:11:e9:25:41:53:ce:e6:2d:33:67:c0:5f:1e:f6:2e:2d:2d:
f0:97:dd:fe:98:39:af:2f:7d:4f:d3:3d:f0:01:98:00:21:30:
dd:38:7e:3e:6c:c7:44:87:d1:f3:58:1f:b8:ac:0e:71:9c:0a:
2d:c0:c5:09:5a:ea:7d:f8:3b:e1:ec:83:62:63:09:07:ea:9d:
b3:b8:8a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:04:24 2025 by rpki-client