Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/ITia5bAc5jb-nyRtNPjwCGxDOp4.roa
File: ITia5bAc5jb-nyRtNPjwCGxDOp4.roa (raw, json)
Hash identifier: wrfcH5cTzENmHlxC82iMMCQbJNR0fOMg7pXGAx3DDLQ=
Subject key identifier: 21:38:9A:E5:B0:1C:E6:36:FE:9F:24:6D:34:F8:F0:08:6C:43:3A:9E
Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803
Certificate serial: 02F9
Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/ITia5bAc5jb-nyRtNPjwCGxDOp4.roa
Signing time: Thu 09 Oct 2025 06:14:21 +0000
ROA not before: Thu 09 Oct 2025 06:14:21 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 152609
IP address blocks: 157.20.248.192/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 761 (0x2f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803
Validity
Not Before: Oct 9 06:14:21 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=21389AE5B01CE636FE9F246D34F8F0086C433A9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:73:c0:36:08:3a:7a:0e:1b:d4:08:c6:7d:ac:
20:d4:8b:01:7d:eb:47:f0:eb:67:83:df:dd:18:32:
4f:0e:47:3a:c6:bb:41:c0:05:3f:c4:ca:f9:d7:7a:
cc:ed:c7:d9:db:f5:e6:44:06:0a:f1:65:d4:f9:2a:
7f:65:36:0c:cd:c3:9c:de:f1:48:5a:61:4a:e5:4b:
e1:f0:6f:2f:18:ac:28:45:e8:30:32:f6:57:d7:fa:
8b:6d:81:78:36:80:69:fe:a6:d1:79:f3:2a:4f:09:
59:6f:86:85:cc:0f:3c:08:28:f8:47:ab:d1:86:09:
db:47:1d:9e:e4:43:b5:c0:7c:49:aa:4f:0b:96:1b:
10:29:00:b0:98:2c:d4:80:65:c7:5e:a7:0d:6f:13:
fc:ab:6a:79:ea:e3:19:7c:6d:31:a2:41:45:0a:ae:
bd:77:de:f5:b7:5f:e3:cc:6a:18:00:15:46:b9:e3:
89:35:42:4b:e2:4d:67:59:47:b9:7f:a2:34:1f:21:
a4:63:be:1e:7b:ae:d3:e7:b8:d7:17:72:ca:4d:9f:
2b:2c:4a:bb:83:fe:2d:57:ee:ad:cc:3b:ed:6a:8d:
4c:85:1e:b0:c8:ee:de:4c:0d:99:d8:d0:62:f5:a4:
b6:f9:82:29:62:30:b4:af:00:97:c9:a3:e4:5b:1d:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:38:9A:E5:B0:1C:E6:36:FE:9F:24:6D:34:F8:F0:08:6C:43:3A:9E
X509v3 Authority Key Identifier:
keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/ITia5bAc5jb-nyRtNPjwCGxDOp4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.248.192/28
Signature Algorithm: sha256WithRSAEncryption
40:03:2d:ce:90:75:a2:25:74:04:a3:91:9d:ae:e7:4f:24:25:
09:8f:94:7d:0d:ca:2d:26:17:75:06:eb:ad:d0:ee:0d:dc:f8:
ad:bd:b8:a9:3e:db:88:42:65:01:83:4c:a1:05:5b:a5:d1:65:
17:41:fa:30:92:b8:cc:36:3d:d5:9b:14:6e:86:26:cb:0f:90:
24:b1:1b:6e:63:e6:1f:94:a2:45:58:3c:41:44:a2:0b:aa:05:
82:2b:de:08:e0:e8:44:0b:19:b3:46:2c:7e:7b:18:32:ee:12:
81:1f:36:d7:d5:85:a5:18:b1:0d:3d:a9:48:c7:de:a7:a2:b3:
21:1b:17:55:66:84:31:aa:ad:45:a5:b1:2a:4d:72:44:f2:1c:
91:bc:d1:de:7f:58:d7:fc:a2:aa:9f:97:59:55:c2:9a:4a:56:
3a:f5:36:3e:ec:c9:77:48:02:84:2a:13:01:f1:40:19:22:62:
fc:1f:d2:85:d6:17:e5:b1:5d:15:d6:67:97:05:2f:fe:9f:ee:
61:97:23:b2:09:02:8e:5c:a9:4b:4e:be:1b:83:87:7a:ed:d9:
16:e4:8e:a5:52:a5:c0:35:04:1b:a6:b9:f6:97:f6:7f:37:48:
38:7c:04:b6:aa:4a:16:a3:b8:57:95:e5:4a:cc:55:ad:af:96:
b0:23:83:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:52:38 2025 by rpki-client