Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/Rbn-MuYcpxL0L12nq5LyTMcPX-4.roa
File: Rbn-MuYcpxL0L12nq5LyTMcPX-4.roa (raw, json)
Hash identifier: iumyYDnBQ7nor157htrzF570n/iQGqDt66pQofqiR6c=
Subject key identifier: 45:B9:FE:32:E6:1C:A7:12:F4:2F:5D:A7:AB:92:F2:4C:C7:0F:5F:EE
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0E57
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/Rbn-MuYcpxL0L12nq5LyTMcPX-4.roa
Signing time: Fri 22 Aug 2025 08:56:25 +0000
ROA not before: Fri 22 Aug 2025 08:56:25 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18419
IP address blocks: 150.129.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3671 (0xe57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Aug 22 08:56:25 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=45B9FE32E61CA712F42F5DA7AB92F24CC70F5FEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:17:e1:d0:77:f7:bd:da:8c:5d:77:61:3d:
d2:a9:f6:2a:f5:4b:db:fc:61:97:3c:b4:aa:51:c7:
57:7c:a2:47:fd:69:d0:b7:87:fb:fc:a3:9a:5d:89:
ec:d4:31:00:a5:a2:2b:d6:49:54:65:34:e8:26:aa:
63:8c:9c:57:fd:46:55:2d:83:0d:99:ed:81:e0:fe:
e9:a6:25:3c:fd:ec:6f:9e:c8:ae:f2:8e:0c:68:f7:
71:50:ca:cc:a2:22:c1:34:e1:a0:de:c7:85:91:4c:
0e:6b:22:78:6d:35:42:2c:63:ff:8e:82:f7:0e:46:
80:44:9e:5f:0c:bb:55:12:0d:72:8a:4a:f7:ca:85:
cb:c8:4a:63:a4:5f:15:0a:1f:51:ee:7e:4e:67:9c:
e6:b9:96:36:5d:98:d3:cd:a5:ac:29:fa:25:a2:33:
79:65:08:1a:93:cc:fb:ee:40:50:f1:3d:bb:19:5b:
22:de:72:76:06:58:1f:0e:fe:7b:bb:04:91:a9:03:
1e:0d:57:82:4a:ef:e7:eb:ba:a9:e8:e8:80:f3:0a:
0b:22:02:2d:4b:2b:1c:ee:b5:3a:d0:37:e1:bd:14:
32:cf:83:a5:68:d1:c5:1f:ba:72:c9:59:8c:03:fc:
4f:e6:4b:23:22:28:2f:f0:05:df:37:3d:0e:01:11:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B9:FE:32:E6:1C:A7:12:F4:2F:5D:A7:AB:92:F2:4C:C7:0F:5F:EE
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/Rbn-MuYcpxL0L12nq5LyTMcPX-4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.129.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:33:47:ca:f5:f0:e8:f6:87:28:aa:04:cc:bb:e8:6b:af:bf:
7d:62:4c:ba:36:4a:dd:1b:8f:67:ac:18:00:38:c5:cb:46:28:
64:bf:de:ce:a4:da:f3:69:7a:0d:88:61:4c:c6:93:c0:69:cf:
de:d7:42:2a:d0:4a:1a:df:1b:82:a4:6a:85:96:b3:11:83:f6:
64:95:c6:91:95:46:8c:9d:f6:74:a5:41:ba:e1:44:7c:d3:ad:
22:8c:a9:ae:6e:f0:c3:96:17:c5:d5:6b:df:5a:c9:3f:1a:18:
62:9b:7d:61:53:b9:0a:1c:5e:55:f4:b2:11:71:ad:5b:63:9e:
46:b7:cf:47:72:e6:7c:c1:e0:2a:db:85:08:48:5a:f0:cd:c9:
72:27:69:3b:65:8f:98:69:b0:8d:59:dc:cb:32:bc:83:40:8c:
b4:46:23:00:0d:97:ab:c8:e2:ff:58:59:5c:33:56:64:b8:31:
85:da:e2:da:fd:38:22:f6:f3:b1:64:48:f0:4a:0b:8c:3f:82:
7f:2a:eb:39:12:39:b5:0b:04:aa:74:9b:4d:a6:75:26:c3:11:
29:5a:24:e4:ee:9d:aa:d2:e0:bf:3f:0b:ff:c2:fa:d4:14:cc:
90:d2:45:ed:9a:9e:a6:a1:b8:6a:c4:c3:8b:0f:0d:87:07:1e:
c1:b6:c1:2b
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDlcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF
NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNTA4MjIw
ODU2MjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ1QjlGRTMyRTYxQ0E3
MTJGNDJGNURBN0FCOTJGMjRDQzcwRjVGRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6sxfh0Hf3vdqMXXdhPdKp9ir1S9v8YZc8tKpRx1d8okf9adC3
h/v8o5pdiezUMQCloivWSVRlNOgmqmOMnFf9RlUtgw2Z7YHg/ummJTz97G+eyK7y
jgxo93FQysyiIsE04aDex4WRTA5rInhtNUIsY/+OgvcORoBEnl8Mu1USDXKKSvfK
hcvISmOkXxUKH1Hufk5nnOa5ljZdmNPNpawp+iWiM3llCBqTzPvuQFDxPbsZWyLe
cnYGWB8O/nu7BJGpAx4NV4JK7+fruqno6IDzCgsiAi1LKxzutTrQN+G9FDLPg6Vo
0cUfunLJWYwD/E/mSyMiKC/wBd83PQ4BEQnxAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQURbn+MuYcpxL0L12nq5LyTMcPX+4wHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+
q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv
Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS9SYm4tTXVZY3B4TDBMMTJucTVM
eVRNY1BYLTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCloFI
MA0GCSqGSIb3DQEBCwUAA4IBAQCyM0fK9fDo9ocoqgTMu+hrr799Yky6NkrdG49n
rBgAOMXLRihkv97OpNrzaXoNiGFMxpPAac/e10Iq0Eoa3xuCpGqFlrMRg/ZklcaR
lUaMnfZ0pUG64UR8060ijKmubvDDlhfF1WvfWsk/Ghhim31hU7kKHF5V9LIRca1b
Y55Gt89HcuZ8weAq24UISFrwzclyJ2k7ZY+YabCNWdzLMryDQIy0RiMADZeryOL/
WFlcM1ZkuDGF2uLa/Tgi9vOxZEjwSguMP4J/Kus5Ejm1CwSqdJtNpnUmwxEpWiTk
7p2q0uC/Pwv/wvrUFMyQ0kXtmp6mobhqxMOLDw2HBx7BtsEr
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:49:06 2025 by rpki-client