Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/pJjq3pyIvXmZeztb-Md32cWdUyg.roa
File: pJjq3pyIvXmZeztb-Md32cWdUyg.roa (raw, json)
Hash identifier: DW0PhuUFIRLJdsO4y9RAlwKNkLnSI+uTSrtxRPJhTZI=
Subject key identifier: A4:98:EA:DE:9C:88:BD:79:99:7B:3B:5B:F8:C7:77:D9:C5:9D:53:28
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 1477
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/pJjq3pyIvXmZeztb-Md32cWdUyg.roa
Signing time: Fri 22 Aug 2025 08:51:32 +0000
ROA not before: Fri 22 Aug 2025 08:51:32 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 17718
IP address blocks: 150.242.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5239 (0x1477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Aug 22 08:51:32 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=A498EADE9C88BD79997B3B5BF8C777D9C59D5328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:09:a1:f6:b8:da:56:a5:b3:99:53:ea:0f:
7a:0b:c5:d2:2b:e9:d4:54:f7:0d:45:cc:3a:49:77:
5b:b7:61:64:52:98:b7:f9:ec:9b:bb:6a:15:41:97:
9f:a2:0f:25:d5:59:cf:bc:97:2a:85:68:a9:db:ee:
c5:17:72:07:17:f6:38:46:49:72:49:50:4f:e2:1e:
0e:33:c2:f7:e7:29:b7:d3:04:1e:e8:e9:dd:35:42:
77:8d:f3:ca:0f:5e:af:39:3a:1d:93:22:0c:17:d9:
48:23:32:d9:65:ed:26:0f:60:c8:77:b1:be:f2:24:
ed:73:b9:1a:6e:eb:97:0b:ec:c7:95:e3:f5:cb:ad:
3a:cc:a6:d8:3e:86:0a:b6:60:37:3e:ff:a5:69:f9:
b7:20:90:47:5c:0a:b8:62:af:de:67:40:af:bc:0f:
c9:ed:39:0f:52:ad:e2:a2:5c:a6:db:1d:63:05:36:
eb:9a:30:71:54:8c:b7:07:69:0f:6f:67:c8:ab:59:
d7:c5:1a:e3:3a:d2:17:cb:ee:eb:6a:20:69:c2:70:
0f:41:c5:8c:62:a8:30:1f:67:dd:72:c9:5c:cc:9e:
2c:15:f4:1e:a0:cf:32:e1:0a:0e:d2:89:d0:c5:0f:
48:bc:8c:e0:8e:8c:2d:93:ad:31:d9:30:28:9a:65:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:98:EA:DE:9C:88:BD:79:99:7B:3B:5B:F8:C7:77:D9:C5:9D:53:28
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/pJjq3pyIvXmZeztb-Md32cWdUyg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.242.102.0/24
Signature Algorithm: sha256WithRSAEncryption
17:37:08:13:6e:be:25:c8:04:eb:6e:6b:c1:05:37:23:67:a8:
d6:3b:0e:66:0e:e0:7d:b4:0f:8b:41:13:d0:e7:9f:db:b1:4e:
21:75:d4:a2:7b:29:d4:a5:8d:df:54:96:18:c7:a7:e8:41:e8:
da:97:4d:d3:08:02:9b:6b:cc:68:14:fa:9a:5a:48:a2:0a:f9:
b6:1b:ef:d6:c9:5f:0b:f7:71:94:72:f3:fc:b9:6b:c6:0d:8f:
0f:0f:d1:b1:62:16:72:c0:10:b0:7d:e2:3a:94:41:cd:d2:12:
2e:9f:3a:3f:ba:3c:36:d7:3e:27:5d:f7:5b:58:11:33:42:44:
5b:e3:dd:71:04:4a:f7:70:d0:dc:f0:22:9d:85:c5:3d:65:d9:
f3:7e:81:cf:88:cb:0d:c6:f0:1f:3a:0c:a1:85:cc:5d:02:00:
66:31:9a:f6:48:1a:5c:6f:fe:74:bd:61:23:69:03:71:40:bb:
c6:80:14:9a:4b:24:7d:2a:87:54:60:03:51:dd:1e:df:5a:ba:
2d:0b:53:40:ef:ef:f4:a9:55:5a:ff:99:3e:13:d6:89:46:12:
2f:b1:cb:a7:13:e0:9e:99:84:98:f7:3f:f1:a6:39:56:92:27:
c8:9c:e7:24:b0:26:3d:de:3a:d5:f2:28:ed:e2:76:e5:b1:2e:
8e:0d:d4:30
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICFHcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB
OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTA4MjIw
ODUxMzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE0OThFQURFOUM4OEJE
Nzk5OTdCM0I1QkY4Qzc3N0Q5QzU5RDUzMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+RAmh9rjaVqWzmVPqD3oLxdIr6dRU9w1FzDpJd1u3YWRSmLf5
7Ju7ahVBl5+iDyXVWc+8lyqFaKnb7sUXcgcX9jhGSXJJUE/iHg4zwvfnKbfTBB7o
6d01QneN88oPXq85Oh2TIgwX2UgjMtll7SYPYMh3sb7yJO1zuRpu65cL7MeV4/XL
rTrMptg+hgq2YDc+/6Vp+bcgkEdcCrhir95nQK+8D8ntOQ9SreKiXKbbHWMFNuua
MHFUjLcHaQ9vZ8irWdfFGuM60hfL7utqIGnCcA9BxYxiqDAfZ91yyVzMniwV9B6g
zzLhCg7SidDFD0i8jOCOjC2TrTHZMCiaZaE5AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUpJjq3pyIvXmZeztb+Md32cWdUygwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0
p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv
MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9wSmpxM3B5SXZYbVplenRiLU1k
MzJjV2RVeWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvJm
MA0GCSqGSIb3DQEBCwUAA4IBAQAXNwgTbr4lyATrbmvBBTcjZ6jWOw5mDuB9tA+L
QRPQ55/bsU4hddSieynUpY3fVJYYx6foQejal03TCAKba8xoFPqaWkiiCvm2G+/W
yV8L93GUcvP8uWvGDY8PD9GxYhZywBCwfeI6lEHN0hIunzo/ujw21z4nXfdbWBEz
QkRb491xBEr3cNDc8CKdhcU9ZdnzfoHPiMsNxvAfOgyhhcxdAgBmMZr2SBpcb/50
vWEjaQNxQLvGgBSaSyR9KodUYANR3R7fWrotC1NA7+/0qVVa/5k+E9aJRhIvscun
E+CemYSY9z/xpjlWkifInOcksCY93jrV8ijt4nblsS6ODdQw
-----END CERTIFICATE-----
Generated at Sun Aug 24 08:51:34 2025 by rpki-client