Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMYKL/xTExfB0jOCFW_HvSExDO--zZxeQ.roa
File: xTExfB0jOCFW_HvSExDO--zZxeQ.roa (raw, json)
Hash identifier: wn+mu83zqWZqHj4dYPxNAS1yFnh8c3TSnFKAeF+06b0=
Subject key identifier: C5:31:31:7C:1D:23:38:21:56:FC:7B:D2:13:10:CE:FB:EC:D9:C5:E4
Certificate issuer: /CN=9A0CC0BB631D15131023849083D941A2DBCDFA65
Certificate serial: 0376
Authority key identifier: 9A:0C:C0:BB:63:1D:15:13:10:23:84:90:83:D9:41:A2:DB:CD:FA:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mgzAu2MdFRMQI4SQg9lBotvN-mU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/xTExfB0jOCFW_HvSExDO--zZxeQ.roa
Signing time: Fri 19 Sep 2025 06:41:41 +0000
ROA not before: Fri 19 Sep 2025 06:41:41 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 148996
IP address blocks: 160.191.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886 (0x376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A0CC0BB631D15131023849083D941A2DBCDFA65
Validity
Not Before: Sep 19 06:41:41 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=C531317C1D23382156FC7BD21310CEFBECD9C5E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9c:1d:ec:20:ac:3a:27:3e:c0:53:bd:2e:17:
1a:32:42:2e:83:39:9f:a4:d6:c6:1e:25:98:5e:f9:
84:e5:59:aa:7c:0d:23:be:3b:ff:af:77:99:cc:d9:
a6:96:cd:a9:4e:f5:70:a7:15:2c:c5:b6:8a:6c:4b:
ed:8b:09:1d:ef:69:17:e1:8d:68:6b:a9:69:3d:98:
98:70:9f:0a:6e:fb:9d:c4:80:49:89:f1:72:d0:b7:
49:61:27:de:8b:e4:82:29:cf:00:37:a8:f1:d8:be:
e6:08:14:50:85:c0:87:8c:15:96:54:23:54:ad:03:
22:41:ea:35:49:8a:00:d3:19:38:ec:0b:aa:89:cd:
38:00:da:77:ff:b4:a0:58:75:3d:33:b4:29:9c:90:
32:11:a6:87:a2:80:2c:45:38:05:6d:4d:7d:41:6b:
dd:0b:0c:ce:ed:54:cb:92:e2:2d:d9:2a:7f:20:b9:
0e:c1:e3:f6:a5:e9:f8:2b:ac:85:45:8f:b7:8f:85:
e7:5d:bb:79:07:f9:c6:20:ec:7e:bf:2f:46:77:64:
e9:0c:70:c9:25:5c:6b:47:7f:6a:5b:c5:2e:93:38:
83:3c:e0:96:9a:2c:2b:c1:e9:91:de:45:65:59:26:
65:6d:e8:aa:ff:3e:bc:42:59:89:78:34:2c:98:94:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:31:31:7C:1D:23:38:21:56:FC:7B:D2:13:10:CE:FB:EC:D9:C5:E4
X509v3 Authority Key Identifier:
keyid:9A:0C:C0:BB:63:1D:15:13:10:23:84:90:83:D9:41:A2:DB:CD:FA:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/mgzAu2MdFRMQI4SQg9lBotvN-mU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mgzAu2MdFRMQI4SQg9lBotvN-mU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/xTExfB0jOCFW_HvSExDO--zZxeQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.4.0/23
Signature Algorithm: sha256WithRSAEncryption
62:4f:f7:34:8a:3d:6a:8b:a9:06:5d:27:95:55:f1:93:17:01:
2b:7a:a0:4b:c7:7f:f9:31:54:72:21:37:61:be:84:29:1b:0f:
66:67:f3:dd:13:42:98:71:82:ca:75:23:4b:6e:22:16:6e:42:
0b:07:92:99:02:35:a4:88:e6:38:a6:be:ff:b2:41:b8:eb:71:
f4:6a:ab:d7:8b:d2:7b:9f:d8:07:aa:cb:09:0a:88:a9:b9:4e:
d0:54:3f:40:3d:f6:5e:c2:3d:ed:c1:23:96:28:b9:a8:cb:2f:
0a:a6:fb:ed:26:04:90:8a:02:59:1b:29:da:a2:8e:e0:5c:d2:
2c:98:f0:8c:7a:e8:e4:b8:3f:6f:34:c0:7d:39:38:1a:6d:c4:
58:82:47:1d:d0:3d:69:0f:49:82:26:cf:5a:4b:a8:4c:84:9a:
8e:4f:62:8b:66:cb:bc:80:f4:6d:aa:db:a4:a1:c1:ac:55:bb:
f9:04:c7:cc:91:9d:68:f4:64:2b:16:b7:98:cb:8b:04:0d:94:
2c:07:75:f8:cc:af:0b:cb:53:36:cb:39:91:cb:83:4e:63:fd:
de:a3:82:3d:79:65:a8:e0:70:1b:5a:b2:01:aa:b8:2e:69:74:
32:f8:55:4d:4c:0b:6a:1f:0d:f9:77:16:0e:fc:bf:33:3c:a2:
3a:f6:20:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:43:11 2025 by rpki-client