Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/UVgS-XHz602-8C5C4DLmvYpz24Y.roa
File: UVgS-XHz602-8C5C4DLmvYpz24Y.roa (raw, json)
Hash identifier: rKerTNKrj7suLPqcawBDyIK3yy8KdDfrgnJK1atHQKc=
Subject key identifier: 51:58:12:F9:71:F3:EB:4D:BE:F0:2E:42:E0:32:E6:BD:8A:73:DB:86
Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803
Certificate serial: 02DC
Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/UVgS-XHz602-8C5C4DLmvYpz24Y.roa
Signing time: Wed 08 Oct 2025 07:19:07 +0000
ROA not before: Wed 08 Oct 2025 07:19:07 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 152609
IP address blocks: 157.20.248.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 732 (0x2dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803
Validity
Not Before: Oct 8 07:19:07 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=515812F971F3EB4DBEF02E42E032E6BD8A73DB86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:65:cc:a6:e8:6e:0a:91:27:a3:f4:74:3d:
a0:c4:f8:cc:5b:9d:0e:39:11:59:96:1d:d7:f5:b9:
e2:f7:ac:35:29:61:9a:21:7b:bd:90:0c:d5:df:1a:
03:69:63:f9:0d:06:ce:6e:b4:a6:d4:3d:b3:e8:f3:
97:44:f4:72:be:4b:30:a3:d5:3a:de:23:d0:53:66:
a9:0f:c4:a9:ee:c6:e9:3b:12:fc:9f:26:9b:af:30:
71:b7:95:3b:0f:17:76:49:7f:f5:5f:87:1c:68:16:
77:7b:be:6c:d0:f6:a8:1b:9c:3a:34:0c:e2:9a:20:
30:48:bf:df:7a:f4:11:58:f3:a4:17:5f:38:30:92:
d8:10:76:72:a3:3d:08:b4:2b:6d:db:a0:a8:e7:b4:
43:d9:3d:e0:77:75:31:ee:92:b0:87:22:22:65:d7:
dd:d3:81:59:84:63:16:e1:2a:b6:56:f5:75:3d:da:
6b:b1:70:0d:44:d0:b9:8b:c8:e4:0d:42:ba:a7:0b:
91:96:62:d4:45:3b:ea:11:27:d2:68:b5:ec:36:7e:
00:42:40:0b:9b:d9:77:18:b5:df:ea:7f:4e:fb:60:
a6:14:45:ad:14:f2:52:03:3f:db:31:3e:e5:4d:ca:
c3:a2:49:dd:24:4d:5b:ef:8a:5c:9c:fc:e4:29:48:
62:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:58:12:F9:71:F3:EB:4D:BE:F0:2E:42:E0:32:E6:BD:8A:73:DB:86
X509v3 Authority Key Identifier:
keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/UVgS-XHz602-8C5C4DLmvYpz24Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.248.128/25
Signature Algorithm: sha256WithRSAEncryption
c1:83:51:90:d0:76:15:4f:fa:26:ba:ec:fa:04:8d:bf:52:79:
00:6a:68:70:39:a1:22:fd:ee:2c:02:75:73:9c:45:bc:df:ee:
9e:f3:eb:61:38:d5:65:19:b0:86:42:2a:84:56:38:9a:03:b0:
04:08:ad:6f:1a:f8:8f:1c:48:04:89:93:ca:36:80:b9:0b:c7:
2f:66:eb:6c:2e:eb:99:47:cc:ac:17:3f:1e:96:e9:03:2e:0a:
9c:19:b4:d0:ff:f1:a2:0f:d9:76:c1:21:d8:22:16:08:bc:5e:
56:36:df:90:1e:cc:59:19:c7:bd:88:b1:72:1d:47:4b:01:8c:
9b:ac:a5:bd:15:e3:f0:bf:f7:1b:ef:df:63:41:d9:48:f4:a4:
fe:1d:d4:29:12:6a:5c:ad:2a:3e:27:51:2b:51:6e:88:26:ad:
03:91:ab:6f:6b:16:bc:9e:3e:10:4e:74:14:7e:72:e3:21:00:
2a:bf:d9:55:2c:ba:f0:c1:ee:27:0a:c3:a1:43:ef:c5:23:da:
5b:47:b8:c0:3d:2e:1e:3f:a4:9a:46:6f:a7:5f:47:0d:a5:0e:
ea:25:31:a5:af:d8:92:64:4e:45:69:57:18:5a:ea:44:e1:87:
30:54:8c:36:8f:6a:d6:bf:9c:5a:38:81:6a:46:2c:c7:10:27:
d8:e2:11:d1
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICAtwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz
QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTEwMDgw
NzE5MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUxNTgxMkY5NzFGM0VC
NERCRUYwMkU0MkUwMzJFNkJEOEE3M0RCODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCudWXMpuhuCpEno/R0PaDE+MxbnQ45EVmWHdf1ueL3rDUpYZoh
e72QDNXfGgNpY/kNBs5utKbUPbPo85dE9HK+SzCj1TreI9BTZqkPxKnuxuk7Evyf
JpuvMHG3lTsPF3ZJf/VfhxxoFnd7vmzQ9qgbnDo0DOKaIDBIv9969BFY86QXXzgw
ktgQdnKjPQi0K23boKjntEPZPeB3dTHukrCHIiJl193TgVmEYxbhKrZW9XU92mux
cA1E0LmLyOQNQrqnC5GWYtRFO+oRJ9Jotew2fgBCQAub2XcYtd/qf077YKYURa0U
8lIDP9sxPuVNysOiSd0kTVvvilyc/OQpSGLRAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUUVgS+XHz602+8C5C4DLmvYpz24YwHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU
RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84
enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvVVZnUy1YSHo2MDItOEM1QzRETG12
WXB6MjRZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFB50U+IAw
DQYJKoZIhvcNAQELBQADggEBAMGDUZDQdhVP+ia67PoEjb9SeQBqaHA5oSL97iwC
dXOcRbzf7p7z62E41WUZsIZCKoRWOJoDsAQIrW8a+I8cSASJk8o2gLkLxy9m62wu
65lHzKwXPx6W6QMuCpwZtND/8aIP2XbBIdgiFgi8XlY235AezFkZx72IsXIdR0sB
jJuspb0V4/C/9xvv32NB2Uj0pP4d1CkSalytKj4nUStRbogmrQORq29rFryePhBO
dBR+cuMhACq/2VUsuvDB7icKw6FD78Uj2ltHuMA9Lh4/pJpGb6dfRw2lDuolMaWv
2JJkTkVpVxha6kThhzBUjDaPata/nFo4gWpGLMcQJ9jiEdE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:39:37 2025 by rpki-client