Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Ke6CgNRg0pMHFjP_mSSyAY6Z41U.roa
File: Ke6CgNRg0pMHFjP_mSSyAY6Z41U.roa (raw, json)
Hash identifier: YqwlOGEcaAp5DCS0ajlmexYG+bj1rstuhn0f7Nk/oSY=
Subject key identifier: 29:EE:82:80:D4:60:D2:93:07:16:33:FF:99:24:B2:01:8E:99:E3:55
Certificate issuer: /CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0
Certificate serial: 0551
Authority key identifier: 42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Ke6CgNRg0pMHFjP_mSSyAY6Z41U.roa
Signing time: Fri 22 Aug 2025 08:49:40 +0000
ROA not before: Fri 22 Aug 2025 08:49:40 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 63909
IP address blocks: 160.25.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1361 (0x551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0
Validity
Not Before: Aug 22 08:49:40 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=29EE8280D460D293071633FF9924B2018E99E355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4f:a3:ab:ef:07:8c:25:33:d3:61:e2:66:89:
7c:7d:02:80:39:a0:74:09:df:ae:a1:42:ab:a1:5b:
1e:f3:8f:75:32:a4:74:ad:60:e6:8c:ab:df:f9:6e:
79:65:90:02:96:a4:66:16:f5:dc:87:aa:e3:a8:7d:
95:9c:1e:c6:9d:72:cd:c2:6f:10:7b:84:7a:0b:ce:
ba:59:1f:42:fa:38:96:50:d8:e8:05:6a:01:a1:7e:
e4:e8:cf:5f:9b:f9:a6:1b:22:e2:a0:2b:db:a4:0a:
97:fa:98:32:ec:8a:b9:e4:ce:b3:d2:6e:d4:5c:19:
4b:2a:da:46:ce:36:d3:12:a8:81:d1:ee:28:91:60:
60:19:e2:02:64:d4:50:4a:44:1f:78:db:9d:df:f5:
f9:d4:06:01:53:2a:a0:dd:77:f9:88:9f:5b:cc:fb:
87:74:88:db:62:cc:60:de:3a:69:29:07:16:85:6e:
09:11:8c:8b:ec:53:ab:b2:24:e1:a7:f9:1a:4a:8a:
02:a6:94:f1:46:f6:1f:e8:2e:2a:4a:11:ec:08:9e:
34:43:fa:76:3a:21:11:95:8a:3b:f7:79:3e:02:3d:
98:7c:33:09:39:00:de:e8:94:a9:03:b7:00:68:20:
88:11:72:ea:44:16:23:e1:54:80:de:80:c6:42:23:
7e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EE:82:80:D4:60:D2:93:07:16:33:FF:99:24:B2:01:8E:99:E3:55
X509v3 Authority Key Identifier:
keyid:42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Ke6CgNRg0pMHFjP_mSSyAY6Z41U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.221.0/24
Signature Algorithm: sha256WithRSAEncryption
77:95:7f:3e:ff:60:94:f5:96:6a:cd:78:ee:8c:60:3e:07:32:
47:61:ea:55:b6:89:69:c8:bf:42:90:da:09:3f:4d:01:75:0c:
b4:41:66:56:d1:da:a4:f7:42:2d:e1:0d:58:0d:60:0e:f6:0b:
e5:7d:85:82:26:61:29:b6:99:a4:3d:f3:a4:5b:66:e7:f8:2b:
95:b0:04:d9:d0:57:10:b9:e4:99:78:06:c5:ea:d5:51:e3:cd:
16:f1:0b:31:77:fd:b4:6a:fe:7a:e4:4e:0e:99:18:cd:be:6c:
8d:35:33:9f:60:bb:bc:7f:03:b0:3c:79:71:1c:d8:d7:c4:68:
45:e6:c5:f1:2d:81:68:8c:83:fe:e2:5b:66:3d:18:29:6f:93:
e1:b3:29:e2:f2:bf:f3:49:54:33:ba:45:1a:ce:f7:8a:84:c7:
83:1c:50:cf:6a:4d:42:1a:80:c3:67:4b:de:5b:51:8a:21:91:
75:59:4e:73:53:93:9e:fa:6d:f5:f4:fa:eb:fe:51:62:e0:a8:
a7:8a:b1:fc:4b:3d:e7:51:5d:ba:5e:49:a2:5e:bf:f0:4b:13:
e7:38:37:0e:8b:cf:ca:05:ab:b9:78:8a:9b:44:49:92:dc:e7:
81:40:26:5f:9d:22:db:66:a4:51:89:8b:c4:e5:00:75:5d:20:
93:0f:7c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:55:35 2025 by rpki-client