Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/M1rXzKZZp8r8otYHw2z0DUPNIi8.roa
File: M1rXzKZZp8r8otYHw2z0DUPNIi8.roa (raw, json)
Hash identifier: ocaUhtktXgcCA+Wy3/W5hRDLojCYHW3nFsM+H9VTo5w=
Subject key identifier: 33:5A:D7:CC:A6:59:A7:CA:FC:A2:D6:07:C3:6C:F4:0D:43:CD:22:2F
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0E63
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/M1rXzKZZp8r8otYHw2z0DUPNIi8.roa
Signing time: Fri 22 Aug 2025 08:56:28 +0000
ROA not before: Fri 22 Aug 2025 08:56:28 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 4780
IP address blocks: 203.121.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3683 (0xe63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Aug 22 08:56:28 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=335AD7CCA659A7CAFCA2D607C36CF40D43CD222F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:93:70:4e:39:28:7c:d9:7e:65:13:dc:bf:
ac:05:b4:00:19:37:e6:d7:8c:1c:02:67:3b:6a:24:
7d:df:24:19:83:9b:c1:3f:a9:68:23:cc:4f:51:67:
76:f3:8a:e7:8f:38:db:92:ac:32:7d:ff:ce:a1:51:
60:77:0f:58:dc:cc:04:29:d0:83:0c:35:3e:de:23:
5e:8f:fb:6b:04:07:18:c8:56:82:b6:43:35:de:18:
7b:dc:42:c4:38:9c:19:77:27:15:21:b8:9a:15:bf:
58:e6:35:eb:81:be:b7:30:08:e2:12:1b:1f:06:a8:
31:2d:dd:65:46:7f:49:89:38:d5:e5:a1:e1:8b:29:
98:38:44:d5:ba:8f:31:7f:41:70:44:e1:a3:a0:45:
85:6f:91:ae:b2:e5:53:bb:9f:fd:a5:86:94:f5:10:
30:b2:82:41:7d:ec:e8:43:bb:a1:93:d8:db:89:ed:
f4:36:fd:f1:3f:37:90:e7:e9:9c:05:4c:2a:3a:e1:
7b:9b:29:25:57:b5:8b:d1:91:f7:2d:a0:e6:5c:95:
ba:dc:fe:4f:e9:ca:06:9d:05:82:e0:52:88:54:30:
7d:e0:23:01:1b:f5:9c:d8:9b:23:7b:81:8a:e6:a0:
b8:7f:24:57:f6:f1:c0:7c:9f:28:da:6f:76:4d:18:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5A:D7:CC:A6:59:A7:CA:FC:A2:D6:07:C3:6C:F4:0D:43:CD:22:2F
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/M1rXzKZZp8r8otYHw2z0DUPNIi8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.121.240.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:08:b4:b6:a4:b3:5a:0b:86:77:f3:72:54:51:df:c6:78:34:
b1:07:da:36:1d:04:67:61:ac:e9:a1:f8:08:fd:02:04:94:9c:
7f:bd:09:64:75:14:9b:02:9b:ba:35:e7:92:53:15:22:a8:63:
f1:17:9a:53:53:7f:f5:a4:66:75:81:43:6f:8c:bb:ac:d8:06:
6d:7c:32:6f:5c:11:07:0a:ee:ae:e7:fd:08:27:41:ba:8d:eb:
e4:39:12:30:e2:cf:fc:f7:b7:7e:10:04:91:02:50:5c:5f:94:
92:b1:85:a4:5c:fb:7f:bb:25:8b:c5:46:d8:ca:f7:8c:22:cf:
5d:21:91:21:6e:0d:f5:b6:95:00:d9:6d:4d:3f:da:10:38:a8:
a4:bd:7b:c6:19:29:69:c7:e1:79:d8:68:ba:f9:e5:9e:2b:41:
40:0b:c7:47:79:4f:aa:0c:e8:2f:e9:08:92:69:ce:54:a5:2a:
d6:d3:c1:45:33:d9:fb:de:ab:18:08:32:eb:80:a2:5c:33:5d:
6f:e4:ec:f6:c2:63:ec:93:8c:c2:d7:93:9c:fc:0b:68:6d:77:
c0:25:7c:75:26:c9:8e:fb:96:0e:83:6e:82:0a:62:cb:91:f1:
67:f4:82:64:cd:07:71:f4:eb:49:dc:f0:c8:8f:df:ee:2b:08:
f3:59:05:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:00:03 2025 by rpki-client