Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/QOTdRfLwey7dU85Kyhxvqf_N_Rs.roa
File: QOTdRfLwey7dU85Kyhxvqf_N_Rs.roa (raw, json)
Hash identifier: sZx62NF8N0pZ7GaciJ0XxrcEmAPUZ0z3MWg5+LjW4/A=
Subject key identifier: 40:E4:DD:45:F2:F0:7B:2E:DD:53:CE:4A:CA:1C:6F:A9:FF:CD:FD:1B
Certificate issuer: /CN=B329DA9268FCFD54D9F38A01ED0CF7092BB6900C
Certificate serial: 01AC
Authority key identifier: B3:29:DA:92:68:FC:FD:54:D9:F3:8A:01:ED:0C:F7:09:2B:B6:90:0C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/synakmj8_VTZ84oB7Qz3CSu2kAw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/QOTdRfLwey7dU85Kyhxvqf_N_Rs.roa
Signing time: Fri 22 Aug 2025 09:03:41 +0000
ROA not before: Fri 22 Aug 2025 09:03:41 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 63898
IP address blocks: 2406:b4c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B329DA9268FCFD54D9F38A01ED0CF7092BB6900C
Validity
Not Before: Aug 22 09:03:41 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=40E4DD45F2F07B2EDD53CE4ACA1C6FA9FFCDFD1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:38:2c:39:d5:cf:71:97:0e:ec:96:e5:41:
4d:e1:df:cb:5f:97:4b:ff:83:d8:99:37:cc:c3:14:
74:79:a9:37:30:ad:f3:4a:9d:7e:ce:14:cd:27:92:
aa:78:ee:ce:6f:98:71:82:33:c6:46:0e:bf:6f:31:
65:4f:49:3f:0b:04:2e:70:83:a8:4a:2c:8a:a4:7f:
c5:57:31:ee:36:eb:2a:b3:96:ef:6b:94:fa:ea:6d:
1b:18:3d:55:65:b6:69:22:1f:f4:eb:7d:8e:9c:e8:
99:3c:4e:7e:93:4f:d5:ac:a3:82:fd:1a:72:bc:2f:
b5:5b:51:2d:49:cf:34:73:99:04:13:f5:b7:49:6f:
51:3a:8f:f2:20:1a:66:7a:53:18:cd:0b:25:d9:bf:
9a:82:c8:5b:7e:a5:3e:18:ce:e0:5c:21:e6:b0:12:
98:0f:71:47:3a:2d:0f:36:0f:6f:3f:13:ba:bb:b0:
cc:4e:55:6a:3f:de:c9:9a:b3:0d:71:ac:d1:ca:cb:
ad:88:bb:f1:22:e8:ca:27:57:6b:96:96:7b:09:85:
da:e0:0d:b2:f2:30:3f:f1:c6:70:da:4b:4c:5d:eb:
4a:97:a3:14:b0:20:17:79:20:67:46:87:d2:07:05:
c4:1c:39:c8:bf:ea:2d:3f:ab:e9:ec:75:67:23:c1:
32:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E4:DD:45:F2:F0:7B:2E:DD:53:CE:4A:CA:1C:6F:A9:FF:CD:FD:1B
X509v3 Authority Key Identifier:
keyid:B3:29:DA:92:68:FC:FD:54:D9:F3:8A:01:ED:0C:F7:09:2B:B6:90:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/synakmj8_VTZ84oB7Qz3CSu2kAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/synakmj8_VTZ84oB7Qz3CSu2kAw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/QOTdRfLwey7dU85Kyhxvqf_N_Rs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:b4c0::/32
Signature Algorithm: sha256WithRSAEncryption
89:cc:e3:d8:dd:29:5c:f1:ed:25:16:ca:c7:0f:34:d0:8c:a3:
bf:14:a2:96:3b:e5:f1:2f:7d:91:42:2c:c9:3b:63:ae:75:32:
f8:89:a9:67:20:d9:de:37:24:d8:37:79:23:20:89:e8:73:94:
a0:75:0d:2d:60:40:2e:9c:bc:8d:58:8f:74:3f:19:c4:65:3b:
4a:0b:a0:47:9b:41:47:6e:7e:ce:86:b3:ba:ae:68:0e:93:df:
fb:3a:6d:00:28:88:da:b8:98:59:38:17:3a:81:e6:25:b7:69:
01:81:4a:93:1f:fd:1b:ff:da:ea:5e:35:0f:cf:b4:ce:b5:03:
c6:2d:b2:b0:1c:e2:69:dd:14:ef:cb:a1:b5:e7:4a:ee:3b:99:
82:28:d4:10:89:b0:13:48:79:cd:66:7c:20:c9:9f:0e:b2:36:
55:4a:ff:f4:b6:b6:87:5d:65:ba:e1:6d:a2:46:73:8a:0b:5e:
f4:cf:d9:29:7d:17:62:46:ad:9c:06:6b:b5:ea:5f:81:7b:b2:
e3:1f:bc:aa:ab:a7:55:b8:04:7e:c1:d0:38:1b:83:73:3c:8c:
b4:3e:95:f0:df:f4:f0:d4:61:cb:02:49:54:bb:cb:30:25:f7:
12:c3:36:93:b4:8d:ee:33:38:da:29:cf:5b:b1:42:11:af:e5:
0c:25:dd:cf
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICAawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjMy
OURBOTI2OEZDRkQ1NEQ5RjM4QTAxRUQwQ0Y3MDkyQkI2OTAwQzAeFw0yNTA4MjIw
OTAzNDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQwRTRERDQ1RjJGMDdC
MkVERDUzQ0U0QUNBMUM2RkE5RkZDREZEMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrrjgsOdXPcZcO7JblQU3h38tfl0v/g9iZN8zDFHR5qTcwrfNK
nX7OFM0nkqp47s5vmHGCM8ZGDr9vMWVPST8LBC5wg6hKLIqkf8VXMe426yqzlu9r
lPrqbRsYPVVltmkiH/TrfY6c6Jk8Tn6TT9Wso4L9GnK8L7VbUS1JzzRzmQQT9bdJ
b1E6j/IgGmZ6UxjNCyXZv5qCyFt+pT4YzuBcIeawEpgPcUc6LQ82D28/E7q7sMxO
VWo/3smasw1xrNHKy62Iu/Ei6MonV2uWlnsJhdrgDbLyMD/xxnDaS0xd60qXoxSw
IBd5IGdGh9IHBcQcOci/6i0/q+nsdWcjwTI/AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUQOTdRfLwey7dU85Kyhxvqf/N/RswHwYDVR0jBBgwFoAUsynakmj8/VTZ84oB
7Qz3CSu2kAwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlNTQ1lC
RVIvc3luYWttajhfVlRaODRvQjdRejNDU3Uya0F3LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9zeW5ha21qOF9WVFo4NG9CN1F6M0NTdTJrQXcuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9OU1NDWUJFUi9RT1RkUmZMd2V5N2RV
ODVLeWh4dnFmX05fUnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUAJAa0wDANBgkqhkiG9w0BAQsFAAOCAQEAiczj2N0pXPHtJRbKxw800IyjvxSi
ljvl8S99kUIsyTtjrnUy+ImpZyDZ3jck2Dd5IyCJ6HOUoHUNLWBALpy8jViPdD8Z
xGU7SgugR5tBR25+zoazuq5oDpPf+zptACiI2riYWTgXOoHmJbdpAYFKkx/9G//a
6l41D8+0zrUDxi2ysBziad0U78uhtedK7juZgijUEImwE0h5zWZ8IMmfDrI2VUr/
9La2h11luuFtokZzigte9M/ZKX0XYkatnAZrtepfgXuy4x+8qqunVbgEfsHQOBuD
czyMtD6V8N/08NRhywJJVLvLMCX3EsM2k7SN7jM42inPW7FCEa/lDCXdzw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 13:24:46 2025 by rpki-client