Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/cAAoRYjs4Fhulg_NrFpgTKFSug8.roa
File: cAAoRYjs4Fhulg_NrFpgTKFSug8.roa (raw, json)
Hash identifier: GU3lGnuoC/0EIa5DEUSqxYffOaPxsUIoWI+JqYFi0K4=
Subject key identifier: 70:00:28:45:88:EC:E0:58:6E:96:0F:CD:AC:5A:60:4C:A1:52:BA:0F
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 0801
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/cAAoRYjs4Fhulg_NrFpgTKFSug8.roa
Signing time: Fri 22 Aug 2025 08:58:50 +0000
ROA not before: Fri 22 Aug 2025 08:58:50 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9678
IP address blocks: 2401:95c0:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2049 (0x801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Aug 22 08:58:50 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=7000284588ECE0586E960FCDAC5A604CA152BA0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:0d:41:ed:dd:67:b5:01:d8:d5:ca:1a:ce:
03:cb:69:87:f2:79:92:39:aa:22:8a:ee:57:b3:c7:
b5:bd:bf:4a:f4:06:f0:2a:eb:51:e1:b1:7b:7b:a6:
61:29:fb:4a:84:3f:ff:f4:b6:cb:b2:c6:04:df:cf:
a8:4c:a0:c5:6e:e6:5a:46:f9:7d:ef:df:4b:4e:da:
13:97:17:12:8a:83:9c:e0:fa:e9:5b:67:d6:57:da:
e5:e9:17:5c:7e:f0:c1:02:f3:d0:72:07:f2:35:a1:
75:dd:fb:23:5f:e5:0c:75:11:5f:5f:47:ce:1e:ee:
bf:ac:ce:25:67:ae:61:c2:2b:be:dd:da:cb:74:f2:
bb:ce:9b:4d:14:fe:19:d3:cd:b1:de:7d:0b:39:a0:
43:40:bc:3a:68:d9:aa:d0:2c:a0:83:03:d6:62:fe:
f8:c7:24:58:e0:7c:9d:78:74:7c:8a:f6:a2:58:b0:
9f:7d:33:7d:e2:1e:7d:7b:e3:83:6c:57:f4:18:34:
01:c5:f5:85:91:d3:90:f4:72:12:2e:b8:75:eb:d3:
4d:96:97:d0:aa:05:7f:d2:ac:48:c7:43:1f:50:e6:
be:89:50:cd:3d:01:21:50:db:b3:25:a8:30:60:cc:
62:fa:a5:8d:6f:5c:3b:3f:99:a7:d5:89:4d:8c:64:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:00:28:45:88:EC:E0:58:6E:96:0F:CD:AC:5A:60:4C:A1:52:BA:0F
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/cAAoRYjs4Fhulg_NrFpgTKFSug8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:95c0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
54:57:d4:9e:67:72:9e:1a:26:41:ed:e4:0b:07:1e:9f:7c:32:
8d:58:1e:c5:79:f0:56:12:d9:75:34:ed:63:d0:f8:ea:d0:84:
a8:33:cf:81:39:bb:bd:3b:e8:ef:35:a4:ef:39:8f:8e:26:4f:
c7:8d:b5:de:be:a0:e6:81:ce:b7:81:53:29:36:3f:bc:9e:81:
f9:c3:06:50:73:c4:95:21:8f:8b:0a:f6:63:54:53:5f:9e:38:
84:4b:e9:0d:93:9c:28:05:55:b3:99:9f:f3:0c:f3:0f:ff:6b:
27:67:ea:bd:0a:b7:cc:0e:94:78:30:75:2b:84:9a:f2:b2:03:
01:a5:7b:38:19:d9:36:2e:04:8d:cf:44:08:35:ec:78:c3:49:
9f:44:cd:9f:0c:31:db:d3:4c:97:c2:e6:7b:62:74:09:6a:2c:
d1:91:2c:56:82:f6:ea:8e:d1:91:c5:96:e8:6e:d7:34:6b:4f:
3b:0b:b3:4c:38:2f:94:cf:cf:19:0c:c4:59:a4:24:9b:e8:71:
59:19:e8:74:c0:20:7f:9e:d5:f6:b7:0b:90:a1:23:7c:b4:6f:
b4:f6:73:04:81:f3:cb:6c:16:e6:6a:c7:3e:89:96:ec:b1:25:
ab:20:83:68:36:6b:4e:d4:fb:6e:96:5d:ae:ec:9f:ba:e4:4a:
cf:b3:52:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:53:22 2025 by rpki-client