Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/-7U4M2fxz5QWvhGTnzYLpmTQuSo.roa
File: -7U4M2fxz5QWvhGTnzYLpmTQuSo.roa (raw, json)
Hash identifier: 3vYDspRZsnx6F1t7RW12PxC5jtfjhwZ8Zvq/dha8vmM=
Subject key identifier: FB:B5:38:33:67:F1:CF:94:16:BE:11:93:9F:36:0B:A6:64:D0:B9:2A
Certificate issuer: /CN=B329DA9268FCFD54D9F38A01ED0CF7092BB6900C
Certificate serial: 01AD
Authority key identifier: B3:29:DA:92:68:FC:FD:54:D9:F3:8A:01:ED:0C:F7:09:2B:B6:90:0C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/synakmj8_VTZ84oB7Qz3CSu2kAw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/-7U4M2fxz5QWvhGTnzYLpmTQuSo.roa
Signing time: Fri 22 Aug 2025 09:03:41 +0000
ROA not before: Fri 22 Aug 2025 09:03:41 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 63898
IP address blocks: 103.158.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B329DA9268FCFD54D9F38A01ED0CF7092BB6900C
Validity
Not Before: Aug 22 09:03:41 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=FBB5383367F1CF9416BE11939F360BA664D0B92A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:71:2d:a8:66:57:fe:a4:0b:08:b7:ca:ac:17:
b4:61:68:c3:03:24:8c:92:8f:61:dd:ff:45:7e:2b:
86:72:7b:af:69:0a:bf:55:61:ac:42:00:db:fb:13:
ef:a2:d2:7b:44:93:f8:1b:e5:41:a2:74:41:01:50:
57:94:0f:92:2d:f1:05:36:c7:32:43:a6:e1:04:61:
f7:d0:a0:3f:64:2f:fe:0d:a3:a4:90:21:4a:68:c0:
1d:3b:3a:dc:7e:c1:5d:d9:97:63:f7:51:53:c4:38:
99:50:91:f9:b7:03:29:44:fd:7f:2b:80:7e:2e:27:
31:d1:93:b3:3e:1b:e0:f6:a1:c5:6a:05:63:5c:22:
50:c5:5d:88:16:d1:03:c6:c9:06:f6:50:a7:d0:a8:
77:33:1c:cd:89:36:f7:fc:87:f3:40:fc:89:3c:f9:
27:24:a0:6d:56:b0:21:ca:54:a1:25:9e:f6:0a:8b:
07:7e:8e:68:0c:df:17:a3:b9:50:5c:a0:d8:11:3e:
72:74:0f:d6:65:49:26:30:ec:dd:88:bc:e7:ce:06:
a3:2d:36:1a:e7:e1:90:a0:6e:76:87:1c:3a:d6:e8:
69:7c:b5:8c:50:d9:a2:84:51:d3:cd:1a:78:7a:45:
ec:90:87:87:ae:e9:00:83:47:18:47:30:49:d2:47:
cd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B5:38:33:67:F1:CF:94:16:BE:11:93:9F:36:0B:A6:64:D0:B9:2A
X509v3 Authority Key Identifier:
keyid:B3:29:DA:92:68:FC:FD:54:D9:F3:8A:01:ED:0C:F7:09:2B:B6:90:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/synakmj8_VTZ84oB7Qz3CSu2kAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/synakmj8_VTZ84oB7Qz3CSu2kAw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/-7U4M2fxz5QWvhGTnzYLpmTQuSo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.78.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:d3:be:4d:0e:0a:9f:0e:12:d0:19:2c:0c:5f:9d:a4:c9:f1:
e1:71:d6:fe:f4:88:93:34:fa:e9:23:e8:5f:fd:1b:66:5f:3d:
ac:14:a7:9f:b3:37:c0:cc:b1:c5:db:a2:ff:29:55:7d:2e:aa:
50:01:b5:e8:21:d1:e7:6a:8d:54:92:1e:d5:0d:6d:38:77:d1:
da:bc:ff:94:da:22:31:28:e6:f8:2e:b5:3f:06:50:71:d9:ce:
5b:b0:e9:a3:e0:03:d0:b5:cd:fd:81:fc:d0:ab:87:d9:78:8e:
e7:30:72:0f:38:d1:a7:d2:d5:81:09:ba:9c:e4:50:93:9b:dc:
d9:ea:c5:ac:42:0d:13:ec:ce:23:e7:32:e4:ae:2e:12:a8:14:
78:83:ec:bd:67:dc:b1:15:51:8e:b6:77:df:eb:c2:9c:33:1e:
7c:00:b9:84:22:d3:f0:e7:38:ca:85:3c:47:54:05:20:e3:5f:
81:66:a3:3d:52:96:9e:08:ba:7f:cc:99:3d:09:69:3a:c3:d4:
67:7f:cb:5b:95:9c:15:a7:95:88:37:e7:9c:4a:c3:e6:84:56:
a8:e0:a9:2d:cf:e9:9c:f3:b0:9e:c3:0e:ab:03:84:b9:21:06:
25:81:7f:7a:ad:4e:ef:13:ce:35:6b:ee:db:8c:bd:f3:37:d6:
1b:be:5a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 13:24:47 2025 by rpki-client