Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/oL1u4RcaxZEekXKakbzMw2Aui7A.roa
File: oL1u4RcaxZEekXKakbzMw2Aui7A.roa (raw, json)
Hash identifier: wbZW8yi0l+mr5Ra4SEHR3QvhJv0em7Fv2P+Q5IAljPE=
Subject key identifier: A0:BD:6E:E1:17:1A:C5:91:1E:91:72:9A:91:BC:CC:C3:60:2E:8B:B0
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1925
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/oL1u4RcaxZEekXKakbzMw2Aui7A.roa
Signing time: Fri 22 Aug 2025 09:02:48 +0000
ROA not before: Fri 22 Aug 2025 09:02:48 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131621
IP address blocks: 118.168.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6437 (0x1925)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 22 09:02:48 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=A0BD6EE1171AC5911E91729A91BCCCC3602E8BB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:a9:1d:53:60:e3:68:e1:3d:fd:ab:6f:99:
77:d9:30:c0:62:3d:6f:2c:ba:d9:49:a3:f3:46:76:
f5:35:34:80:a3:39:b0:15:35:6a:0d:fc:0c:02:8d:
a2:d2:c8:84:d0:cd:cc:6d:98:1f:cb:5f:8d:58:b5:
27:cd:57:1a:d7:3d:0b:97:92:70:db:51:d9:7b:b9:
21:5b:bf:64:1f:1f:7a:0c:29:6c:a2:b7:cd:ee:82:
5a:af:80:7f:aa:f9:98:0d:59:86:5d:b4:0c:35:c5:
2f:d3:77:6d:34:d6:2a:80:36:95:b0:b6:76:51:39:
c6:02:91:ee:c3:49:ba:7c:a8:c7:c0:cf:aa:0f:d4:
53:78:dd:68:b7:85:c6:08:41:eb:f4:c6:58:ef:9f:
28:f5:6e:c2:c2:c4:de:b8:39:47:c6:dc:f6:7a:e6:
fc:3b:ab:81:cb:3d:1d:2b:37:42:c9:ba:65:ff:4d:
30:ce:d3:d3:4e:cf:bf:e2:b5:ed:9b:00:44:ba:46:
6a:69:a9:0a:8d:9f:a6:4a:83:78:14:16:22:f8:12:
d2:ec:55:2c:ce:e5:a2:5d:d1:4f:3e:e2:b7:8f:1f:
2c:91:84:9a:09:62:84:cd:79:14:c8:36:26:70:54:
71:ed:e0:aa:07:d4:3c:5c:43:c4:89:5b:89:97:fe:
1c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BD:6E:E1:17:1A:C5:91:1E:91:72:9A:91:BC:CC:C3:60:2E:8B:B0
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/oL1u4RcaxZEekXKakbzMw2Aui7A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.168.255.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:2c:7a:ed:72:d9:49:88:2f:e5:48:14:00:66:ec:44:32:5c:
6a:ac:ea:61:1d:81:47:56:2d:73:a3:c8:b3:b2:0d:66:c5:e0:
cd:c7:83:95:8a:a5:83:74:c6:1c:38:64:7f:d9:32:d5:9f:d7:
3f:14:76:af:60:6c:f8:b4:e0:9b:e5:ca:1a:de:ba:cd:bd:93:
7c:61:b8:1a:fc:67:a7:ce:51:b6:47:af:91:ae:ad:fa:ac:d8:
05:14:b6:7f:42:12:92:17:e6:6b:ab:51:80:2a:25:97:8f:bd:
84:62:d1:4d:45:dd:97:fd:e6:1e:52:33:92:33:c4:23:0d:b1:
29:04:7c:31:b5:0d:1d:5a:e9:86:bf:a0:14:a6:e7:52:6c:db:
ed:c2:fb:87:e6:ca:6b:ec:e5:08:8f:4e:e8:ea:0c:b5:85:aa:
6a:97:8a:70:ce:3a:e3:d5:57:3f:2e:f0:08:e6:dc:d6:31:bf:
4e:82:df:a5:e5:a3:d0:b9:f9:d1:03:d1:75:1d:ab:19:22:aa:
e1:76:e8:10:85:ec:2c:1b:31:25:40:d4:63:0c:ec:59:85:6f:
17:2d:80:c5:d5:48:1d:e1:ef:4a:79:5b:f6:92:8d:98:75:58:
82:4f:90:27:86:42:0e:26:5e:ce:f7:16:63:dd:10:79:cb:ef:
59:d3:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:50:04 2025 by rpki-client