Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/TjYEur3CAERf7tLr_Z0l1MJhvVo.roa
File: TjYEur3CAERf7tLr_Z0l1MJhvVo.roa (raw, json)
Hash identifier: mH23Newr0XkDwl+aD99ks7Pp0P+sAVEFQh/7+94ENSY=
Subject key identifier: 4E:36:04:BA:BD:C2:00:44:5F:EE:D2:EB:FD:9D:25:D4:C2:61:BD:5A
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0E60
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/TjYEur3CAERf7tLr_Z0l1MJhvVo.roa
Signing time: Fri 22 Aug 2025 08:56:27 +0000
ROA not before: Fri 22 Aug 2025 08:56:27 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18419
IP address blocks: 103.234.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3680 (0xe60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Aug 22 08:56:27 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=4E3604BABDC200445FEED2EBFD9D25D4C261BD5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:d0:bf:f9:26:b4:77:30:37:a2:33:bf:04:
ee:35:02:79:3a:85:32:f8:02:59:fa:9a:60:9d:6b:
05:31:9e:5c:e4:b7:12:0a:5d:49:5d:b7:a8:9f:bf:
cd:a1:e8:26:45:58:3f:3e:6a:e1:e8:93:ae:56:d8:
a8:01:a1:c4:2b:7f:32:8a:14:d9:18:03:83:bf:cc:
a8:ed:d4:38:16:2d:84:61:bc:6b:9f:7e:cd:9e:9b:
df:cc:5c:98:99:2d:91:a8:a1:f5:1d:bb:77:2e:ad:
5c:ad:1e:96:f0:01:cf:9a:ad:ae:e2:d7:50:96:8a:
50:ee:03:cc:df:d0:75:d4:73:25:78:8e:a2:e7:cb:
a7:2c:96:ac:04:33:f3:84:d6:18:d3:cd:f5:07:67:
31:c5:02:92:bd:71:f2:ef:4e:b0:94:43:1b:f9:97:
7f:3e:2e:25:20:d3:10:eb:a8:ce:28:5d:ff:f9:9b:
93:34:32:b4:1b:0f:b3:5b:2d:5b:58:98:e7:9f:7d:
de:3d:76:bc:a1:00:60:55:b6:da:b1:a9:4b:81:dd:
68:bd:77:53:cc:c2:19:a5:49:03:98:55:91:b0:0c:
d2:dd:7e:47:45:6c:61:7f:85:90:28:56:ca:30:bd:
22:7e:0b:b5:7b:32:45:78:87:7d:ef:6e:ac:f9:d8:
d6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:36:04:BA:BD:C2:00:44:5F:EE:D2:EB:FD:9D:25:D4:C2:61:BD:5A
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/TjYEur3CAERf7tLr_Z0l1MJhvVo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.204.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:69:47:84:06:58:59:ab:5d:f3:a0:2a:0e:f4:77:7d:4a:60:
fe:59:73:32:b4:df:ac:8b:db:d2:21:d5:e5:5f:01:de:72:68:
a6:0c:56:73:c8:3b:21:fd:87:c0:27:75:cd:bd:1c:5e:02:51:
47:60:4c:89:29:40:58:70:c4:df:58:e0:2e:6c:f4:6f:12:30:
97:bc:40:2e:c7:f2:55:59:92:ae:eb:b1:38:14:8f:7f:69:ed:
0d:1f:85:26:10:b8:d0:b4:d1:32:0a:8b:30:9a:d5:e1:a6:4c:
b9:0e:fc:b2:f6:f7:2c:e3:29:ab:c8:2e:ce:5f:6d:ef:cf:a6:
71:22:89:49:a4:58:03:56:9a:d5:69:c8:27:1a:d3:32:22:e5:
ee:30:87:d4:1c:a0:c4:f0:fa:f3:87:9d:e7:27:c9:c4:5d:a0:
39:9d:88:6b:08:46:d0:15:a8:52:9a:3e:8d:5e:5b:a5:a7:d0:
42:98:f2:fd:b0:f5:a6:56:71:9b:0e:63:2a:07:1a:da:c6:17:
70:ef:04:f2:7b:3d:69:d3:25:32:d0:a7:47:66:1b:d9:9a:6d:
69:3f:8c:7b:10:68:c3:81:be:04:30:9b:88:de:0a:74:45:52:
1c:40:ab:6a:92:a3:3d:1d:94:4e:04:bd:ff:4a:ab:59:2d:d5:
be:a6:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:53:55 2025 by rpki-client