Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/kieT8LagANN4MIdEotBeitC0r8Q.roa
File: kieT8LagANN4MIdEotBeitC0r8Q.roa (raw, json)
Hash identifier: JWLTLkuk28V9j2y2WhNckU+KVRshz88pQy5IMqv9ZgY=
Subject key identifier: 92:27:93:F0:B6:A0:00:D3:78:30:87:44:A2:D0:5E:8A:D0:B4:AF:C4
Certificate issuer: /CN=43FF5C92CC4950A457A7327D168FBC465B218322
Certificate serial: 0D84
Authority key identifier: 43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/kieT8LagANN4MIdEotBeitC0r8Q.roa
Signing time: Fri 22 Aug 2025 08:56:08 +0000
ROA not before: Fri 22 Aug 2025 08:56:08 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 4782
IP address blocks: 203.65.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3460 (0xd84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FF5C92CC4950A457A7327D168FBC465B218322
Validity
Not Before: Aug 22 08:56:08 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=922793F0B6A000D378308744A2D05E8AD0B4AFC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6c:27:67:01:68:cd:6a:96:ef:e3:16:c6:2b:
77:b6:a7:b3:21:f3:6c:1f:47:9c:9d:b8:06:42:d3:
87:62:53:97:44:c9:6a:f1:67:2a:bb:e1:59:f4:9a:
dd:ae:c4:c4:a0:db:6c:e9:20:64:fe:68:f6:7c:59:
13:75:72:26:0a:08:9c:26:ab:75:48:9d:87:02:78:
39:56:b3:de:23:cd:0c:45:d7:55:5c:ee:69:e5:b2:
30:9b:64:9c:8a:9b:4a:54:c0:76:ae:da:b3:de:3e:
5e:d1:d6:aa:77:8c:21:82:f6:3a:04:4f:59:10:bc:
de:7f:8f:ae:d4:85:0e:4d:29:fa:33:0e:be:e2:8e:
6b:6a:65:01:73:79:34:b8:3c:12:6b:a5:a2:3f:25:
0a:36:6d:fa:f8:55:ef:f8:ba:79:8c:73:ee:2b:53:
ed:11:ef:c0:61:31:c2:4b:f7:02:48:d2:16:a1:f4:
1b:0d:92:10:22:28:e1:8e:af:b5:7a:37:24:75:70:
4a:e5:d9:e8:ec:70:6f:c7:86:0e:3c:5c:62:65:42:
53:9f:91:fa:fb:89:f2:4a:ce:1b:6e:6b:5b:4b:94:
86:34:ed:ad:86:a3:78:44:6a:66:bf:cf:d6:4f:82:
77:87:47:60:be:7c:a7:50:b1:90:b5:7d:9e:b6:62:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:27:93:F0:B6:A0:00:D3:78:30:87:44:A2:D0:5E:8A:D0:B4:AF:C4
X509v3 Authority Key Identifier:
keyid:43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/kieT8LagANN4MIdEotBeitC0r8Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.65.0.0/17
Signature Algorithm: sha256WithRSAEncryption
7a:98:a5:fc:f2:9b:0e:89:99:84:73:95:7b:08:ba:9a:ea:34:
29:54:04:31:d2:36:02:9d:cf:51:cd:ef:2d:6c:3c:78:f6:5a:
ae:8e:ab:66:fa:57:a3:f0:a2:68:7d:54:a1:9d:4d:ed:a1:85:
c4:25:0d:d6:11:85:4f:12:66:ef:4e:cf:40:b3:a3:67:03:f7:
31:75:63:41:e2:26:70:71:de:fc:a7:d8:3a:e9:ea:f8:7c:cf:
84:64:09:13:04:77:64:46:06:4f:4e:5e:aa:8c:18:be:43:71:
2d:ec:7b:66:e5:be:b8:1f:f4:c0:2b:07:74:eb:1d:3d:52:67:
9f:ae:6d:41:49:cf:16:bd:9b:16:71:f1:eb:21:66:d4:e2:26:
0b:2d:a7:14:13:ab:aa:69:0c:41:d5:2d:3d:4d:21:62:f3:bc:
a0:1f:61:8f:9c:cf:57:da:e2:e0:e0:36:b8:9b:59:f6:06:db:
d7:72:04:c9:cc:9d:0a:b3:25:83:cc:3e:ff:67:33:e3:e6:61:
a2:47:75:73:98:de:f7:b3:57:01:03:a5:6f:1a:10:85:64:d1:
fc:c4:05:b6:64:06:d5:3c:aa:3d:b8:78:d4:c0:70:7d:88:a1:
09:ca:01:55:c5:eb:8e:f9:6a:a0:6e:cc:7c:c6:e1:04:23:2c:
6a:ae:2d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:57:45 2025 by rpki-client