Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/76oT6jpWsLAS7z093S6dgaZjmzI.roa
File: 76oT6jpWsLAS7z093S6dgaZjmzI.roa (raw, json)
Hash identifier: QUSDtgbib6QrKIz1dSqYYed6Cgs0O3SeV5rjIxBCa5o=
Subject key identifier: EF:AA:13:EA:3A:56:B0:B0:12:EF:3D:3D:DD:2E:9D:81:A6:63:9B:32
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 08B4
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/76oT6jpWsLAS7z093S6dgaZjmzI.roa
Signing time: Fri 22 Aug 2025 09:02:01 +0000
ROA not before: Fri 22 Aug 2025 09:02:01 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131657
IP address blocks: 103.122.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2228 (0x8b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Aug 22 09:02:01 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=EFAA13EA3A56B0B012EF3D3DDD2E9D81A6639B32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:8a:f4:44:02:6a:4e:25:fa:82:43:3c:a5:
50:ac:19:ad:95:75:98:47:d4:8f:d9:55:5b:91:42:
65:f1:3a:ef:a6:66:8d:a7:9d:33:9a:c6:61:b9:7c:
f8:7c:08:32:ed:54:27:ae:a0:eb:56:d7:38:03:68:
52:41:f8:cb:7e:16:cb:ae:e2:ad:60:20:fd:e1:68:
20:4b:8d:b3:d1:03:ff:ee:44:6c:45:1c:02:46:98:
5a:a4:18:9d:97:80:7f:0f:87:03:3b:67:c3:17:1a:
52:27:be:4a:af:2b:87:2c:7a:95:50:26:62:fd:7c:
77:5e:68:8b:51:cf:a3:b2:f7:78:0c:08:0c:b3:53:
26:19:f9:01:9e:6f:91:73:ba:db:29:cc:3d:32:c7:
6e:ef:16:de:71:8d:6e:75:8d:17:0f:81:87:6f:ea:
3a:79:35:c1:13:01:de:bd:96:4b:83:cc:da:34:9c:
3e:99:16:1e:ac:53:4b:88:6f:17:80:ac:84:3b:c9:
85:a9:2e:dd:88:87:82:5e:47:8e:b7:38:ee:23:36:
fb:3b:16:57:6e:44:7d:0b:00:4f:a2:24:8f:d1:af:
db:e8:72:1b:1d:2b:11:ec:5a:9e:d9:09:47:5d:28:
2b:4b:cd:e7:36:c7:37:e9:d8:9b:b0:b5:be:08:ff:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AA:13:EA:3A:56:B0:B0:12:EF:3D:3D:DD:2E:9D:81:A6:63:9B:32
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/76oT6jpWsLAS7z093S6dgaZjmzI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.188.0/22
Signature Algorithm: sha256WithRSAEncryption
55:ae:c9:65:0d:97:da:6e:b5:5d:d8:25:86:0d:3a:3c:6c:e1:
ae:e7:cb:20:28:fd:49:7d:7d:30:88:18:70:a8:02:32:56:a4:
47:5f:ac:8e:69:6f:af:f2:b3:29:94:d3:ea:ae:ec:01:7c:41:
d1:83:26:11:47:a1:93:a3:a6:64:0d:d6:c5:9f:aa:4b:81:b5:
33:95:fc:52:0b:cd:5d:84:e9:93:4b:b3:ee:b8:35:b8:fb:73:
96:ea:63:aa:fe:9a:ea:bc:7b:f8:4c:7d:4f:85:00:97:13:54:
44:0b:d0:76:3f:94:ca:15:9c:5b:2d:78:b8:0c:43:d6:a2:cc:
3c:e5:b9:54:8b:f6:ac:22:da:2a:11:9a:de:18:f1:24:0d:1d:
38:0d:cf:1b:b7:67:1a:29:c3:ca:64:50:12:0e:ca:04:ea:0b:
68:4b:ab:2c:ba:ae:ae:fe:30:ae:49:0c:b4:dd:e7:35:52:4d:
ad:01:67:c6:ef:22:2f:9e:32:e3:50:cf:c9:5b:c6:1d:de:9f:
ec:6f:7b:f5:59:46:49:7f:e2:f6:bd:c4:8d:17:7d:b6:2f:19:
65:ba:97:32:f0:fc:c0:62:6b:39:3b:4d:fa:4c:d1:ed:fa:ac:
7b:db:69:6a:d0:b8:4b:a9:17:67:12:5a:3f:c6:55:bb:e0:2c:
e5:1a:53:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:59:10 2025 by rpki-client