Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/7cgFlrB-I3x7rwNyurRUPLuSXFc.roa
File: 7cgFlrB-I3x7rwNyurRUPLuSXFc.roa (raw, json)
Hash identifier: 0WJpk0ysqUb+JUMnm0nuvedrbVPtH6mJtLLnf2PjEoY=
Subject key identifier: ED:C8:05:96:B0:7E:23:7C:7B:AF:03:72:BA:B4:54:3C:BB:92:5C:57
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 1468
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/7cgFlrB-I3x7rwNyurRUPLuSXFc.roa
Signing time: Fri 22 Aug 2025 08:51:29 +0000
ROA not before: Fri 22 Aug 2025 08:51:29 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9311
IP address blocks: 150.242.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5224 (0x1468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Aug 22 08:51:29 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=EDC80596B07E237C7BAF0372BAB4543CBB925C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:15:7c:ca:f3:73:2a:41:ad:e7:56:12:7d:
f7:70:9c:62:10:79:9e:f5:22:bf:fa:e0:66:65:c0:
9a:79:01:42:1e:1f:d2:99:95:23:04:1f:92:03:9a:
7b:56:b1:f6:12:23:be:10:ea:80:d9:1e:ab:8d:95:
b1:cd:53:ce:88:2b:a2:95:1b:53:e9:66:80:59:26:
32:46:71:ac:d0:da:ac:0c:ff:e8:93:6c:05:de:3a:
88:61:33:12:82:ff:7c:64:69:83:03:9f:d3:2e:f9:
55:f8:c4:cc:64:ac:74:17:c0:c3:5d:01:73:9d:6a:
6e:05:1d:9d:f2:71:36:64:e1:29:90:35:94:19:6d:
d6:50:5f:46:94:96:40:b5:99:8b:cf:2e:e4:c0:d6:
58:00:f0:e1:46:c9:18:85:e4:f6:aa:a2:a5:b1:38:
8c:cd:8c:9b:a1:b0:74:05:e1:5c:5d:b6:aa:16:ff:
68:7c:bc:e4:44:2f:52:68:4c:fb:5c:c4:82:57:37:
d0:4d:1a:50:1a:3e:ad:68:20:6b:60:fb:ad:40:2f:
7c:67:88:62:af:f0:b2:a4:63:de:5d:86:de:1c:15:
4a:7b:0c:65:7d:63:79:95:84:28:6b:c0:b7:b0:31:
69:e2:b0:df:89:d0:96:1c:84:64:8f:68:ea:8a:27:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C8:05:96:B0:7E:23:7C:7B:AF:03:72:BA:B4:54:3C:BB:92:5C:57
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/7cgFlrB-I3x7rwNyurRUPLuSXFc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.242.100.0/22
Signature Algorithm: sha256WithRSAEncryption
08:25:e0:cc:49:88:45:a3:67:24:76:99:1b:c1:aa:19:b3:d6:
9c:63:79:95:b7:ae:81:d2:d0:ce:0e:96:3a:75:5f:6e:54:b2:
8a:95:03:70:a4:19:51:24:7c:32:e5:07:1d:5e:2b:8d:56:65:
ee:aa:07:1a:64:b8:cc:fc:77:20:c1:e0:a2:a4:fa:1f:6d:af:
0f:43:e5:ff:49:09:87:2f:31:a8:be:78:29:74:81:74:1b:fd:
79:72:c1:48:fe:4a:7e:89:88:4a:2e:df:85:55:31:51:d7:09:
bd:6d:34:a2:9b:cb:b1:49:7a:44:24:b6:72:cd:5c:10:8f:83:
27:24:8f:3e:4f:19:2e:53:42:57:b9:16:b1:e6:70:d1:5e:b1:
f0:a9:d2:4f:f7:9b:51:09:6e:59:c0:ee:f4:57:5f:f8:aa:85:
6b:d3:0e:fa:6a:17:ab:82:1b:19:46:dd:39:80:5e:b0:a6:fc:
b8:50:9f:b7:9c:60:a0:86:70:3c:84:39:19:c3:56:35:e5:bc:
ab:d8:0e:84:47:70:03:70:87:fa:bb:30:4a:50:20:66:4f:9b:
63:87:c5:ea:0e:f5:7f:b4:51:be:1d:3a:cb:21:b0:e1:af:f5:
78:93:41:2f:bd:f5:a5:45:ad:2a:c7:ba:15:78:86:54:e9:04:
99:c2:35:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:51:13 2025 by rpki-client