Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/f00ya5mEc_ExMBFQAI842vzRidg.roa
File: f00ya5mEc_ExMBFQAI842vzRidg.roa (raw, json)
Hash identifier: 9iGF33dUDSHtSMO8AmfmQ/25Lz6lWJJAW8vi83I7Hkc=
Subject key identifier: 7F:4D:32:6B:99:84:73:F1:31:30:11:50:00:8F:38:DA:FC:D1:89:D8
Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803
Certificate serial: 02F1
Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/f00ya5mEc_ExMBFQAI842vzRidg.roa
Signing time: Thu 09 Oct 2025 06:13:45 +0000
ROA not before: Thu 09 Oct 2025 06:13:45 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 152609
IP address blocks: 157.20.248.128/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753 (0x2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803
Validity
Not Before: Oct 9 06:13:45 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=7F4D326B998473F131301150008F38DAFCD189D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:de:b5:81:83:8f:b0:05:64:2a:2b:a1:88:7f:
c5:27:60:d0:05:3e:fc:42:3e:63:0c:63:09:1c:65:
ff:a5:e4:ae:86:7b:52:67:5c:69:ff:fd:3a:db:99:
00:b4:7c:8b:64:73:17:69:40:a2:e9:06:0f:de:b5:
24:ae:37:89:3c:4c:be:6c:a1:08:67:88:cb:04:b9:
88:da:88:93:03:ea:f7:a9:17:39:c1:a3:f5:42:97:
e5:61:af:cd:62:b5:90:83:b0:ae:97:d7:60:1d:e4:
2c:bb:76:c0:96:47:dc:e5:f7:9b:7d:79:b8:75:06:
a2:e0:ab:68:6f:15:b5:71:cc:06:cd:15:a2:dd:e0:
2b:88:81:7a:a7:85:09:7d:a2:fd:5d:68:fe:b7:7e:
d1:5d:1c:aa:d5:bb:68:99:2a:30:8d:c7:1e:19:a0:
46:73:67:4b:cd:23:00:17:d7:a5:00:95:c6:78:40:
16:a8:91:46:e9:b8:16:d7:c7:f5:48:c1:cf:76:50:
fd:9a:25:e4:6b:5a:fd:d8:ca:fd:52:53:1d:55:28:
2a:28:e2:02:1c:70:91:f8:34:14:ad:30:4f:1f:33:
35:c9:f2:a9:a1:68:3d:80:db:34:d9:7c:1c:40:0a:
26:5f:4f:b2:5e:95:f6:2b:e1:b6:76:d0:00:ba:9c:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4D:32:6B:99:84:73:F1:31:30:11:50:00:8F:38:DA:FC:D1:89:D8
X509v3 Authority Key Identifier:
keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/f00ya5mEc_ExMBFQAI842vzRidg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.248.128/28
Signature Algorithm: sha256WithRSAEncryption
73:05:70:a4:e9:64:4b:c1:41:79:be:1c:08:4e:61:2f:1c:a2:
cb:df:94:c5:7b:82:f3:13:5c:bb:6f:21:f2:73:6c:e7:b0:58:
18:2d:dd:53:01:f8:a2:11:dc:34:35:e4:2e:d3:f7:39:dc:de:
ba:01:3a:64:a9:9a:e9:57:56:72:d0:4f:ae:3e:d1:cc:76:3f:
c4:56:61:88:1b:df:f5:5d:b6:51:f0:dc:60:b8:79:31:2e:c7:
61:24:e1:87:fe:37:a1:83:b0:0d:5e:20:d8:a9:5d:1b:80:42:
86:c2:a4:97:9b:66:4d:3c:25:08:23:fa:83:2f:ab:10:cb:b9:
80:36:45:97:28:01:4d:95:57:df:35:37:5d:47:e7:a1:36:44:
79:29:d7:ce:97:a7:d4:21:56:f7:06:ce:b1:92:dd:12:f4:59:
3a:78:04:07:6c:be:5b:96:27:1a:d0:78:f6:93:0f:0b:1e:d4:
1f:4e:70:ae:51:93:3e:84:50:97:5a:2e:30:1a:11:2e:5c:e4:
f3:9e:d7:b7:1a:10:2b:02:87:c0:ca:2e:bc:45:76:c8:eb:cf:
2e:de:f7:85:4a:19:6b:44:e7:c4:92:3c:e8:cf:49:38:f9:8b:
8a:7c:00:39:42:4c:88:4a:4c:9a:db:8c:e9:e6:a9:a1:a7:0d:
5e:60:90:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:35:53 2025 by rpki-client