Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/xQ7A1P9nnDf-0CTo38PyTgpR65o.roa
File: xQ7A1P9nnDf-0CTo38PyTgpR65o.roa (raw, json)
Hash identifier: zWeiId2+wadXqaVwkxtRzCCqGfCilBm7eA7S3Fx0XbY=
Subject key identifier: C5:0E:C0:D4:FF:67:9C:37:FE:D0:24:E8:DF:C3:F2:4E:0A:51:EB:9A
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0E65
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/xQ7A1P9nnDf-0CTo38PyTgpR65o.roa
Signing time: Fri 22 Aug 2025 08:56:29 +0000
ROA not before: Fri 22 Aug 2025 08:56:29 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18419
IP address blocks: 124.109.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3685 (0xe65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Aug 22 08:56:29 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=C50EC0D4FF679C37FED024E8DFC3F24E0A51EB9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:f0:c5:46:fd:2b:e9:21:b5:d6:a3:83:21:
5c:42:1a:e4:78:db:46:4f:3c:69:07:11:46:1f:86:
99:2f:b4:53:73:0c:d5:a1:50:e8:01:3e:40:82:81:
04:1d:74:06:48:2f:3a:fb:17:f9:68:82:54:03:0b:
30:ad:2f:86:85:d0:9e:46:ff:b7:a8:e8:d3:62:a9:
dc:0d:8c:f3:db:92:5d:6a:56:5e:fd:00:41:2b:fe:
9b:b5:5a:48:ad:4a:9f:cb:26:36:0b:73:7f:cb:6c:
78:65:82:1c:63:ed:67:4e:f3:dd:e0:bd:e6:2a:3c:
fb:59:fb:1b:53:7b:59:d4:ac:c8:6f:e1:5a:78:e5:
08:1f:94:14:b8:67:be:fd:5e:49:ad:14:0b:44:7c:
ca:d3:4f:f9:24:f1:c7:49:52:09:13:1b:df:af:ad:
62:7f:05:5f:97:02:ac:1c:e1:ae:28:04:a9:33:9d:
1d:6a:99:1e:7f:a3:ad:ab:c1:91:14:f2:63:93:ee:
05:7c:59:06:86:da:81:e7:00:68:19:62:e6:40:f2:
2f:aa:b1:1c:57:53:ba:74:04:d6:72:70:c5:74:d8:
32:7e:aa:42:61:4f:96:c7:63:89:57:d3:24:c3:fa:
80:e0:d2:dc:ca:80:f2:1c:98:22:4f:4e:be:bc:1a:
bf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0E:C0:D4:FF:67:9C:37:FE:D0:24:E8:DF:C3:F2:4E:0A:51:EB:9A
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/xQ7A1P9nnDf-0CTo38PyTgpR65o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.109.112.0/20
Signature Algorithm: sha256WithRSAEncryption
16:57:42:26:92:d6:5d:4d:04:52:ab:5e:c6:ef:84:0a:c1:49:
1c:0b:33:3c:cd:1a:e9:6c:55:27:ed:9a:12:27:e2:b6:07:6e:
a1:e4:ce:d1:cb:76:b9:f5:8b:d9:0e:bd:e9:d8:ec:65:d7:ff:
ec:7c:c5:0a:b2:e0:a1:4b:a3:1d:e7:ea:18:85:05:8d:fa:3e:
c7:fb:d0:e3:9a:34:2e:0e:2b:cb:55:9b:8e:7f:cd:3a:5a:4b:
bd:d7:7d:6c:b4:b7:a1:18:42:71:aa:63:5b:dd:17:c9:a8:4e:
c9:74:13:3b:cf:dd:68:d2:07:9c:f2:9f:94:f3:da:76:31:6e:
1f:15:6f:60:16:1e:6d:98:3e:16:45:a9:ba:3f:c5:22:19:22:
cd:e5:4c:57:4f:0d:3f:de:82:e5:dd:c0:2a:73:73:53:c7:4f:
60:3e:75:f0:45:be:8e:fb:bf:f3:04:cd:bc:d9:47:02:7d:c9:
94:8e:df:31:37:63:5d:61:a4:55:22:2d:d9:48:9d:04:c0:ee:
90:9b:64:19:9f:29:62:19:6d:25:43:82:a2:b2:13:81:78:c8:
6b:9f:b2:40:e1:01:69:57:6f:e0:c9:d8:9d:ca:09:df:03:98:
1b:59:ae:1e:aa:ac:1f:ae:38:c4:de:90:70:cf:be:65:58:71:
a9:54:e6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:44:37 2025 by rpki-client