Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/q6Gt9FTCdmZ3pr8DqJxwAgQdKEI.roa
File: q6Gt9FTCdmZ3pr8DqJxwAgQdKEI.roa (raw, json)
Hash identifier: QwrnGQhW7yKultOH0+xjpr8QVNi/uYw8LaPM2MDv5/U=
Subject key identifier: AB:A1:AD:F4:54:C2:76:66:77:A6:BF:03:A8:9C:70:02:04:1D:28:42
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1949
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/q6Gt9FTCdmZ3pr8DqJxwAgQdKEI.roa
Signing time: Fri 22 Aug 2025 09:02:56 +0000
ROA not before: Fri 22 Aug 2025 09:02:56 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9680
IP address blocks: 202.39.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6473 (0x1949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 22 09:02:56 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=ABA1ADF454C2766677A6BF03A89C7002041D2842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:87:2f:2b:b0:8c:16:ef:2f:15:ba:ef:19:ac:
26:1f:28:92:d8:eb:66:71:cd:39:85:fe:03:4f:8c:
2c:90:ad:dc:f3:10:8a:4d:cd:6b:52:58:57:fa:8f:
cb:fb:4b:ea:45:6b:00:31:5e:c8:b3:69:1e:74:9a:
a8:d0:39:c6:65:8d:44:f1:7f:39:a6:d7:7f:00:fc:
37:fe:a9:d5:93:96:a9:1e:f8:5b:f7:fd:7e:de:bb:
f7:9c:87:f6:59:3d:28:31:9f:0b:8e:cb:5d:1a:e6:
72:fd:e8:b9:9c:22:16:32:06:00:a7:20:46:01:bf:
ff:97:58:95:1d:0e:9c:bc:ba:eb:24:e9:4a:f6:43:
85:12:50:02:9f:98:d2:7e:9b:9d:46:3d:b8:7b:4d:
c1:de:f8:74:07:24:e3:01:78:87:ef:0c:2c:97:a2:
5b:12:64:47:71:8d:d9:1f:3d:5e:89:c7:a4:68:83:
bd:6b:95:ab:f1:17:db:21:7e:a7:e8:48:5f:d0:8a:
6b:d8:17:f7:3c:a5:17:1b:ba:fa:25:fb:23:4a:c7:
56:fd:f3:cc:10:20:e6:53:2d:14:79:5c:f8:88:b4:
29:46:28:6c:6e:30:07:93:6b:ef:e3:c8:6e:e6:83:
2d:47:6d:39:73:33:9e:45:e9:11:11:96:f6:bb:98:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A1:AD:F4:54:C2:76:66:77:A6:BF:03:A8:9C:70:02:04:1D:28:42
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/q6Gt9FTCdmZ3pr8DqJxwAgQdKEI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.80.0/20
Signature Algorithm: sha256WithRSAEncryption
58:47:4c:fd:cf:8d:2e:81:62:23:50:fd:9e:1f:74:33:1a:8b:
9b:13:5e:d2:6b:f7:8f:2c:76:b3:7e:f6:19:20:07:17:bf:2f:
c9:c5:e9:3a:fe:14:9f:2f:bd:77:7e:50:e1:f4:d4:d4:e7:25:
14:68:f1:42:91:8f:30:88:48:0b:1f:30:37:8d:a5:4a:75:06:
6d:95:a3:31:cf:cb:98:dc:82:37:21:f6:b0:f1:ec:89:b2:33:
9c:d1:0b:b0:0f:28:60:0c:ca:87:19:83:73:41:f9:1e:af:2e:
a3:92:64:f8:b1:3f:4f:be:58:2d:fc:03:dd:0f:00:c5:19:14:
e7:2a:06:5c:a9:0c:38:68:dc:94:52:4c:f8:98:5c:43:06:b1:
15:11:b3:67:57:f3:6a:91:65:f0:51:2c:f2:79:7e:01:6f:b7:
0c:50:65:30:db:08:eb:9e:69:da:40:13:52:45:38:30:08:57:
fe:64:3e:07:9c:55:09:4a:7b:c3:f0:32:a5:44:6b:3f:6a:52:
42:fa:57:2d:4e:86:48:5b:a1:30:14:79:6e:63:e2:6d:41:f0:
5f:3e:dc:6b:19:c4:90:a5:5b:66:13:d1:d6:7a:16:50:88:97:
5d:c2:7d:4f:c0:bf:dd:ce:a9:c6:ee:02:9b:ad:5a:02:cc:88:
65:6e:ff:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 13:24:46 2025 by rpki-client