Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/F9PJGTjnhUuaRsDFW6kGuIswr2Q.roa
File: F9PJGTjnhUuaRsDFW6kGuIswr2Q.roa (raw, json)
Hash identifier: 5Csj3Msctv8AWFzq+4WwY3wNuBSGk30qiZW/qCo3GTo=
Subject key identifier: 17:D3:C9:19:38:E7:85:4B:9A:46:C0:C5:5B:A9:06:B8:8B:30:AF:64
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0E56
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/F9PJGTjnhUuaRsDFW6kGuIswr2Q.roa
Signing time: Fri 22 Aug 2025 08:56:24 +0000
ROA not before: Fri 22 Aug 2025 08:56:24 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18419
IP address blocks: 203.121.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3670 (0xe56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Aug 22 08:56:24 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=17D3C91938E7854B9A46C0C55BA906B88B30AF64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:25:3d:50:49:18:c6:29:e3:16:4d:65:63:38:
28:e8:66:1b:41:67:c7:0a:12:2b:f7:15:f0:1e:56:
c8:a3:06:f2:86:ab:fc:86:26:21:5b:5f:fd:ae:35:
89:cc:36:81:7f:5b:6c:01:b2:0f:78:35:67:d1:89:
7b:2e:47:48:97:cc:17:3e:c2:43:08:1b:4b:ba:54:
8e:de:dd:fe:c7:0a:5d:ef:08:8f:8a:16:51:70:98:
08:94:45:19:fd:de:88:6f:f8:f2:4c:79:17:03:81:
71:9d:c1:93:f8:0f:da:8a:84:7f:d8:99:18:4d:31:
30:27:0a:6c:58:ef:59:eb:7c:8a:ec:59:cc:ce:6d:
db:ba:45:bc:f4:50:b4:8a:ea:0d:b8:eb:3b:a1:a3:
98:4d:30:17:63:4c:46:26:06:57:c1:d0:97:30:72:
7e:62:6f:19:17:58:a0:56:83:12:34:3c:99:14:af:
76:f2:3e:79:c9:66:24:29:73:9a:78:81:34:bf:c4:
2e:47:a8:f7:6b:8c:8f:d9:a9:ae:2b:57:15:28:4d:
c7:95:63:2b:62:4b:fa:03:4a:88:77:45:d1:72:e7:
36:ad:2b:2a:ee:8d:1e:fa:c9:62:8a:6b:40:7d:be:
f9:eb:c3:bf:06:88:b3:42:ef:71:08:a9:5c:a2:67:
25:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D3:C9:19:38:E7:85:4B:9A:46:C0:C5:5B:A9:06:B8:8B:30:AF:64
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/F9PJGTjnhUuaRsDFW6kGuIswr2Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.121.240.0/20
Signature Algorithm: sha256WithRSAEncryption
b6:18:65:cb:6e:f2:3d:26:6f:bd:d7:36:53:3c:47:f9:94:31:
6b:c2:da:72:47:04:f6:de:56:89:1a:ff:83:ed:5a:84:df:e3:
e6:c6:c7:10:53:7d:a6:8e:2a:f5:26:08:78:54:b9:e6:af:7a:
29:86:03:a0:99:34:b5:ee:18:5d:32:31:ff:0b:82:0d:41:e0:
6c:c6:06:92:68:35:a3:2b:6f:96:42:75:ef:2b:0a:c5:1b:96:
af:bc:60:76:1e:da:12:6f:db:6d:d2:59:50:5d:b8:f7:c3:c0:
a0:7e:b3:2d:bf:f4:1b:68:8d:ec:38:3b:29:fd:e8:54:92:09:
0f:97:44:60:ba:71:8a:09:46:7b:9a:b1:f6:e3:1f:3a:a2:0b:
83:9d:1e:79:ee:d6:af:e2:31:e5:11:b8:b4:84:25:73:dd:ca:
82:6d:c2:e4:9b:6b:9a:c4:53:06:e1:dd:88:f9:41:a3:34:91:
bb:e5:ab:cf:db:aa:e0:ea:73:29:7f:82:4d:80:27:f0:68:ce:
ec:b5:76:16:58:c6:99:4b:34:cb:07:55:df:16:a5:20:de:b3:
f6:e4:1f:fa:b0:73:0b:c9:71:a1:fa:a6:7a:ab:82:ac:bb:8a:
94:b6:bc:65:91:5a:7c:8f:7a:55:b7:91:15:e7:05:f2:68:03:
24:fd:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:54 2025 by rpki-client