Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/6poRaXqgt55Rl75scc8dt9GYgFU.roa
File: 6poRaXqgt55Rl75scc8dt9GYgFU.roa (raw, json)
Hash identifier: wrBU4bxFzolj7MZuMN4DA4dWHnxi8bNFU7yy8+z+tLg=
Subject key identifier: EA:9A:11:69:7A:A0:B7:9E:51:97:BE:6C:71:CF:1D:B7:D1:98:80:55
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 1463
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/6poRaXqgt55Rl75scc8dt9GYgFU.roa
Signing time: Fri 22 Aug 2025 08:51:28 +0000
ROA not before: Fri 22 Aug 2025 08:51:28 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131644
IP address blocks: 101.102.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5219 (0x1463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Aug 22 08:51:28 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=EA9A11697AA0B79E5197BE6C71CF1DB7D1988055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:fb:36:68:b5:c6:ae:18:28:3f:0e:55:e9:
43:7b:71:67:d4:7c:e3:6c:be:4c:db:8e:00:3a:dc:
cf:34:dd:da:9f:38:26:4b:01:89:d9:24:cb:fc:9e:
a1:a2:e6:37:b1:20:20:23:07:dc:92:86:fb:8b:f7:
3c:ab:fa:fd:40:f7:c5:0b:ed:91:9a:9a:17:fd:16:
5a:9c:2c:65:a5:fa:18:0f:8d:d6:9e:00:19:1b:92:
3d:f0:59:91:13:83:aa:08:c9:89:36:6e:c4:ba:5a:
52:5a:b7:89:78:17:93:9d:1e:a4:7f:c7:eb:03:3f:
73:09:43:e9:90:7f:d2:af:ad:ce:24:a2:c2:e5:ba:
16:f8:66:65:b7:dc:71:cc:10:a3:a0:6e:f9:fb:25:
f0:eb:d4:67:b0:c2:dd:f8:d0:e5:1c:74:0c:7d:b8:
42:e0:06:03:d4:d6:de:93:d7:27:f3:f5:4e:cb:2b:
d2:2d:68:11:d4:c1:c2:25:40:0b:07:5b:27:5c:96:
db:cb:75:25:75:8d:11:a1:a4:86:3b:c2:a8:3a:1f:
6f:20:35:7f:4d:fd:96:6f:32:7b:3b:bb:03:46:be:
f3:4e:88:65:9d:d4:e5:03:ac:73:7f:d1:00:14:70:
3c:df:70:31:a9:2c:15:2d:ee:49:9a:1b:d1:bb:a2:
68:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9A:11:69:7A:A0:B7:9E:51:97:BE:6C:71:CF:1D:B7:D1:98:80:55
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/6poRaXqgt55Rl75scc8dt9GYgFU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.102.103.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c3:41:cb:ef:dd:3b:0a:b4:07:6c:09:0b:97:2d:f2:12:cd:
08:63:cd:da:6e:9f:6f:c9:5d:42:61:37:2a:de:58:61:f7:0c:
f3:c9:a8:a8:22:d6:2d:b2:73:44:cd:b0:04:16:5d:28:c6:c0:
cb:e8:22:6f:b1:66:29:d5:41:29:92:c6:80:a7:53:54:d6:09:
e0:a0:34:35:c4:4d:46:a6:c5:53:81:ed:47:6a:76:99:eb:22:
5e:d7:0f:ea:cd:03:e9:f5:e1:47:d8:5e:26:fd:c3:32:0b:b9:
cb:16:c2:42:7e:ed:2a:28:72:11:58:3b:95:1a:05:a2:0d:12:
37:05:e5:91:96:7e:a9:d6:dc:dd:d5:70:89:d0:76:5f:c8:ab:
1b:15:20:49:19:c6:c4:43:5b:0f:72:e7:b3:2a:04:02:82:55:
af:89:97:a9:5f:2b:cf:15:db:18:ca:0f:a5:20:25:9e:4f:aa:
78:e7:11:57:11:99:ed:54:59:ee:f9:1c:07:53:3b:33:91:f0:
78:52:2a:37:19:8b:cf:d9:80:fa:67:1b:00:36:7c:ba:6a:f2:
78:34:05:93:2f:65:cf:93:98:69:00:dd:27:81:02:17:45:97:
0d:3e:ae:4c:31:80:bc:83:60:45:b0:89:1a:e1:9a:94:1b:6c:
3a:91:78:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:50:44 2025 by rpki-client