Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/WjmHjsiw-r6r7cX5rvtah7UBTmQ.roa
File: WjmHjsiw-r6r7cX5rvtah7UBTmQ.roa (raw, json)
Hash identifier: sNcMjvLor2NKzVTpJSKI09p16/cORTksRWi6s+CJHpI=
Subject key identifier: 5A:39:87:8E:C8:B0:FA:BE:AB:ED:C5:F9:AE:FB:5A:87:B5:01:4E:64
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 146C
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/WjmHjsiw-r6r7cX5rvtah7UBTmQ.roa
Signing time: Fri 22 Aug 2025 08:51:30 +0000
ROA not before: Fri 22 Aug 2025 08:51:30 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131644
IP address blocks: 182.173.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5228 (0x146c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Aug 22 08:51:30 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=5A39878EC8B0FABEABEDC5F9AEFB5A87B5014E64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:de:0a:dd:9a:39:18:95:06:e2:88:47:66:
6f:09:32:cd:ce:bd:20:fa:c7:4f:be:c0:0c:56:32:
c0:dc:d0:20:8b:c5:78:bf:b8:6f:80:79:6d:f3:9c:
d5:67:1c:5e:33:54:d0:33:2b:a3:cf:c3:7f:9c:c8:
bd:dc:e8:a7:18:45:74:b6:c7:74:98:31:17:da:d4:
a0:35:af:31:7d:86:bc:34:14:85:2d:1f:60:f2:08:
6c:96:7c:a8:38:46:6f:56:bc:2d:b2:23:8d:a4:ab:
95:3b:e1:67:99:aa:3e:00:88:a3:5a:19:02:6c:d8:
b5:8c:43:4a:e7:95:02:42:62:17:80:5e:ab:c6:d0:
56:a6:4a:5e:5d:03:80:c2:13:d9:c2:52:a7:80:b1:
88:4f:d3:61:bc:42:09:69:4f:bc:f5:84:6f:2c:fa:
56:b7:32:00:43:1d:b9:08:3b:cf:28:18:0a:2e:61:
f4:4c:f7:0d:28:61:61:10:80:2b:1d:4d:07:13:68:
02:7f:e8:92:12:dc:d1:b1:25:83:68:eb:0c:44:92:
68:4b:08:2e:84:39:2f:46:6c:21:e8:b8:e0:66:05:
7b:cc:6f:39:51:cf:99:45:e3:a6:70:b5:f7:90:3e:
02:26:7b:82:7d:f1:b5:48:d1:62:79:06:80:9b:44:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:39:87:8E:C8:B0:FA:BE:AB:ED:C5:F9:AE:FB:5A:87:B5:01:4E:64
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/WjmHjsiw-r6r7cX5rvtah7UBTmQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.173.12.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:16:d9:df:c1:14:21:d1:4a:bd:a2:71:13:cb:5a:f1:89:45:
4d:67:58:1b:50:af:02:92:2a:ef:c5:73:91:02:4e:6e:ff:53:
16:1a:dc:ca:17:ef:98:d9:1f:80:fb:56:8d:e9:52:1b:07:7a:
54:7e:c1:a0:2c:a9:1e:ec:9e:f1:15:8f:dc:9a:fd:56:be:94:
88:7d:56:c4:38:62:18:34:c8:bc:d1:db:3f:de:ec:f1:e3:14:
35:ec:26:f7:7c:72:7b:77:90:19:5d:1c:83:4a:4e:da:10:2c:
bf:f8:46:81:e9:88:c7:a9:33:93:83:4e:1b:64:3f:39:2b:65:
d1:3e:33:78:ba:78:b3:43:6c:94:10:56:ba:81:70:75:f2:aa:
42:11:5d:51:5c:60:80:27:a6:b9:d4:22:2f:da:de:94:5b:45:
db:1d:1d:81:d3:9d:61:c2:db:fd:32:9b:d1:4c:d1:d5:a2:f9:
79:7c:21:9d:1d:25:b7:f2:fd:81:16:37:df:6e:ec:e2:f1:fb:
11:4e:0f:59:48:a3:f5:2c:e7:1a:34:d9:c1:c5:2c:66:a7:46:
85:61:43:01:66:66:cf:cd:93:07:cd:30:03:cf:36:1f:6c:36:
c0:0f:5f:d6:cb:04:e6:a4:c5:41:67:0a:37:63:13:f3:31:71:
d1:c5:95:34
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICFGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB
OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTA4MjIw
ODUxMzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVBMzk4NzhFQzhCMEZB
QkVBQkVEQzVGOUFFRkI1QTg3QjUwMTRFNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/Ut4K3Zo5GJUG4ohHZm8JMs3OvSD6x0++wAxWMsDc0CCLxXi/
uG+AeW3znNVnHF4zVNAzK6PPw3+cyL3c6KcYRXS2x3SYMRfa1KA1rzF9hrw0FIUt
H2DyCGyWfKg4Rm9WvC2yI42kq5U74WeZqj4AiKNaGQJs2LWMQ0rnlQJCYheAXqvG
0FamSl5dA4DCE9nCUqeAsYhP02G8QglpT7z1hG8s+la3MgBDHbkIO88oGAouYfRM
9w0oYWEQgCsdTQcTaAJ/6JIS3NGxJYNo6wxEkmhLCC6EOS9GbCHouOBmBXvMbzlR
z5lF46ZwtfeQPgIme4J98bVI0WJ5BoCbRONpAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUWjmHjsiw+r6r7cX5rvtah7UBTmQwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0
p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv
MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9Xam1IanNpdy1yNnI3Y1g1cnZ0
YWg3VUJUbVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBtq0M
MA0GCSqGSIb3DQEBCwUAA4IBAQB8FtnfwRQh0Uq9onETy1rxiUVNZ1gbUK8Ckirv
xXORAk5u/1MWGtzKF++Y2R+A+1aN6VIbB3pUfsGgLKke7J7xFY/cmv1WvpSIfVbE
OGIYNMi80ds/3uzx4xQ17Cb3fHJ7d5AZXRyDSk7aECy/+EaB6YjHqTOTg04bZD85
K2XRPjN4unizQ2yUEFa6gXB18qpCEV1RXGCAJ6a51CIv2t6UW0XbHR2B051hwtv9
MpvRTNHVovl5fCGdHSW38v2BFjffbuzi8fsRTg9ZSKP1LOcaNNnBxSxmp0aFYUMB
ZmbPzZMHzTADzzYfbDbAD1/WywTmpMVBZwo3YxPzMXHRxZU0
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:49:49 2025 by rpki-client