Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/J50ylXuhdas2KjTervlhvK74aq4.roa
File: J50ylXuhdas2KjTervlhvK74aq4.roa (raw, json)
Hash identifier: nkzyQg2rjHt4Go9O2O37cjw7Y67mlPRCQzf0lKj5t7I=
Subject key identifier: 27:9D:32:95:7B:A1:75:AB:36:2A:34:DE:AE:F9:61:BC:AE:F8:6A:AE
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 146A
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/J50ylXuhdas2KjTervlhvK74aq4.roa
Signing time: Fri 22 Aug 2025 08:51:29 +0000
ROA not before: Fri 22 Aug 2025 08:51:29 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131621
IP address blocks: 101.102.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5226 (0x146a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Aug 22 08:51:29 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=279D32957BA175AB362A34DEAEF961BCAEF86AAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:d0:ce:1f:88:66:bd:73:31:0a:06:39:fc:
c4:a5:bd:00:f9:49:e1:08:cc:7b:5f:d5:f6:e3:ba:
5d:bd:e6:e4:6c:49:02:21:51:e8:08:15:aa:30:e1:
36:fb:a0:f5:a5:c1:dc:4e:92:e8:32:7e:34:c0:2a:
98:73:60:4b:fb:25:1e:a0:ad:07:e1:20:d5:c8:f2:
d8:e6:17:0b:52:ef:c2:e0:de:64:40:0e:0d:14:16:
cc:1e:20:4b:d8:de:6d:bf:5e:5c:40:dd:d6:ea:2a:
54:1f:a7:3b:84:7e:c7:dd:95:b6:f1:e8:db:af:04:
35:f3:c1:c8:f5:ec:6a:8e:11:12:a2:6e:ab:af:95:
5c:f2:d6:d4:a7:a1:e4:42:2d:c0:ce:5a:12:ee:07:
07:48:fc:de:a4:51:7c:5f:2a:61:89:c0:50:f3:db:
6b:13:9e:58:69:03:3c:68:e9:c9:b8:15:77:04:cb:
b9:f6:60:c2:86:3b:2f:49:ad:0d:43:5a:d3:1b:45:
da:af:f0:6b:f6:d7:16:e3:d1:ae:79:59:72:d9:5f:
dd:db:05:53:dd:8b:96:eb:99:0c:35:f8:83:5f:2e:
36:cf:67:8f:e8:4e:fd:2a:8b:8e:7e:c8:b4:3c:c1:
51:68:db:e6:ee:79:76:02:42:d4:35:2f:1f:dc:31:
00:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9D:32:95:7B:A1:75:AB:36:2A:34:DE:AE:F9:61:BC:AE:F8:6A:AE
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/J50ylXuhdas2KjTervlhvK74aq4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.102.103.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e3:d2:2e:a3:7e:4a:0e:ea:10:c1:f4:0d:ad:b3:a1:bf:c5:
ea:c3:23:5f:34:8c:93:bc:f1:16:41:f8:d7:20:ce:c7:db:e7:
12:e8:c7:e8:2f:2f:09:1b:17:27:c1:a4:82:8a:28:72:22:78:
80:20:b9:eb:0e:a2:85:93:ad:c8:00:fb:08:9f:dc:f3:29:21:
2e:28:5b:8b:02:ea:17:61:b9:95:df:63:e7:4f:2d:0e:3a:9c:
95:40:bc:7e:c7:60:80:1e:69:10:e2:2c:2b:c1:27:8a:12:6f:
54:e9:51:58:ef:60:b6:06:ea:24:b5:98:a3:4c:06:87:60:b7:
dc:24:69:e7:b9:17:62:96:7d:f2:26:b9:55:e0:d3:84:9f:81:
04:d8:be:fc:3f:cf:3a:4f:4c:eb:40:84:8b:be:07:44:75:4a:
9d:d6:53:39:ac:d8:d8:57:da:e5:21:7f:59:41:7e:ae:75:ea:
29:b7:ad:32:fe:2b:3f:fe:60:9d:97:a9:51:9b:b3:cd:ab:43:
8b:13:d4:0c:84:36:03:75:fd:22:0b:93:d0:16:64:99:d8:89:
87:3e:2c:9d:2f:37:9f:13:ae:fb:9d:cd:f3:f7:84:1d:4e:a0:
d3:24:70:c5:fb:8e:14:94:fc:98:c2:51:77:41:e7:c1:23:03:
79:12:23:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:50:57 2025 by rpki-client