Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/tmonIDoTBxz80Rf4Cw3JREtdp98.roa
File: tmonIDoTBxz80Rf4Cw3JREtdp98.roa (raw, json)
Hash identifier: Dt0y86hRm4LS3ybuiAnGEmUpsvBW8FTHDawoPoFaQOM=
Subject key identifier: B6:6A:27:20:3A:13:07:1C:FC:D1:17:F8:0B:0D:C9:44:4B:5D:A7:DF
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 106B
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tmonIDoTBxz80Rf4Cw3JREtdp98.roa
Signing time: Fri 22 Aug 2025 08:54:14 +0000
ROA not before: Fri 22 Aug 2025 08:54:14 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9919
IP address blocks: 139.175.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4203 (0x106b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Aug 22 08:54:14 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=B66A27203A13071CFCD117F80B0DC9444B5DA7DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:e7:57:1b:ea:ba:30:35:c0:3b:02:fe:1a:
b0:bf:db:f9:84:4b:69:6f:82:af:33:c3:1f:c0:aa:
7e:21:79:a6:88:b8:bb:55:df:49:2f:91:6b:8e:18:
27:76:fb:28:a2:cb:cf:ec:6c:26:c0:0c:6e:e5:7d:
e8:67:1a:90:86:3a:da:7c:41:af:da:94:a6:89:8f:
25:6e:4f:58:9f:2f:b4:81:b2:0c:f1:79:b5:15:c5:
c0:6b:6f:07:aa:09:5b:8e:da:4d:96:05:a6:8d:2d:
41:fa:e8:ee:b7:75:de:ae:d8:39:5a:58:c4:68:8a:
13:41:6e:d2:d2:01:42:f9:e2:cd:70:7a:bc:52:86:
7e:9d:c8:4e:e5:35:9b:ff:5d:28:45:8b:ed:ee:5a:
9f:9b:3a:c9:d6:a5:22:4d:52:62:41:61:f8:98:8f:
e9:36:d9:0c:73:d8:a0:9d:a2:71:7d:5b:20:2f:00:
26:12:69:d2:ee:4e:9a:40:1f:9e:c7:df:df:65:67:
05:07:54:2f:4b:6b:95:3d:a1:c6:ed:fb:22:33:72:
5e:4a:44:38:65:92:f8:53:68:bf:07:4e:9d:03:18:
fb:89:06:f1:6b:8f:c5:8c:7c:63:17:3a:f6:a6:d4:
d8:ff:de:d7:88:29:c8:25:e1:89:e1:c4:9a:89:c2:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6A:27:20:3A:13:07:1C:FC:D1:17:F8:0B:0D:C9:44:4B:5D:A7:DF
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tmonIDoTBxz80Rf4Cw3JREtdp98.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.175.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:c8:78:b5:9d:a1:73:b0:8a:f6:7c:ee:29:35:19:49:6e:60:
83:f7:e0:51:99:98:10:09:34:e6:2d:58:e3:0a:b6:5f:e2:bc:
be:94:2a:74:90:83:60:e6:a6:2d:66:da:5e:78:19:82:b5:8a:
c4:2d:60:37:3c:75:23:c0:81:b0:2b:52:26:fc:34:57:ab:b0:
38:38:98:0c:80:c2:fb:21:68:23:27:cc:bd:6a:76:a7:9d:10:
c3:2e:b6:c5:34:05:50:26:68:2f:d1:25:7a:6e:ad:fb:ea:fe:
31:18:5e:3f:ef:39:ad:a7:ef:94:08:d3:f2:41:65:e8:7c:12:
8e:bd:9d:a0:46:f9:63:9a:ab:07:29:5d:8a:7d:73:53:61:f1:
3e:dc:44:3e:15:8e:eb:21:c1:31:d3:eb:e3:15:d0:ed:b2:47:
ed:95:10:54:32:8e:9c:b7:18:de:0c:5b:c7:17:19:78:a5:cf:
29:b4:22:6c:84:de:b8:0e:85:b5:79:e6:6c:98:8f:96:1b:a6:
72:fe:fa:69:85:9c:28:9e:dd:5c:bf:36:01:45:05:dc:37:42:
fd:af:e4:52:5c:08:91:3f:76:4b:69:dc:c2:fa:02:05:4d:78:
7f:fe:2d:af:e2:78:c5:6c:6b:1f:3c:56:33:cf:cc:87:a3:f5:
b2:0d:6c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:43:07 2025 by rpki-client