Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/rOGZLjbjSlreeIZF5L7GWnOuk8o.roa
File: rOGZLjbjSlreeIZF5L7GWnOuk8o.roa (raw, json)
Hash identifier: nDORMAu2z2xfsf6fMSR4gnyT7IrBcWhYPPY52y1jo/0=
Subject key identifier: AC:E1:99:2E:36:E3:4A:5A:DE:78:86:45:E4:BE:C6:5A:73:AE:93:CA
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 1479
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/rOGZLjbjSlreeIZF5L7GWnOuk8o.roa
Signing time: Fri 22 Aug 2025 08:51:33 +0000
ROA not before: Fri 22 Aug 2025 08:51:33 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131644
IP address blocks: 182.173.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5241 (0x1479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Aug 22 08:51:33 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=ACE1992E36E34A5ADE788645E4BEC65A73AE93CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:2a:77:ba:a1:ab:b4:13:1d:06:17:cf:31:
42:8c:6d:81:00:1a:2c:cf:3d:94:6a:aa:8e:79:be:
2f:7e:4d:20:31:47:36:f8:64:e2:0f:1e:13:46:3b:
31:22:d9:d7:a9:af:27:48:3d:ae:76:fc:c3:a9:f6:
f1:4f:f3:6d:66:77:45:50:7d:80:6a:52:fe:5d:6f:
98:5b:95:29:32:b5:59:47:f3:3f:4d:0c:b7:85:b7:
d3:c7:d4:b8:ba:17:dc:23:b0:28:7a:06:22:1a:7e:
b8:df:40:56:0c:73:da:0b:a2:c5:4f:e3:64:1a:07:
67:5d:71:6c:a1:6f:c9:3b:0f:7c:bc:f1:85:a8:f6:
26:1c:85:7f:c6:e6:d9:80:4b:80:b3:ce:79:2b:c0:
f2:3c:44:b6:71:17:ef:50:27:77:5b:12:af:3c:5a:
d3:8f:74:6f:d8:98:ac:fe:f0:58:0d:75:24:37:bc:
3b:d0:88:53:da:c3:48:94:99:bb:b3:91:2c:dd:0f:
ef:e0:66:0b:a0:99:5a:e2:e3:51:77:aa:70:2f:06:
5e:56:99:89:f3:0b:db:45:f9:fc:b5:1f:22:73:38:
14:00:02:d5:39:c6:07:b2:cc:cc:c8:c0:14:5b:c8:
6a:f8:92:e4:e3:8b:21:d7:64:5c:80:fd:dc:da:eb:
7f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E1:99:2E:36:E3:4A:5A:DE:78:86:45:E4:BE:C6:5A:73:AE:93:CA
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/rOGZLjbjSlreeIZF5L7GWnOuk8o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.173.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:03:d1:1f:3a:95:47:d9:00:5d:75:95:43:d6:c4:a1:e5:f6:
70:76:66:d8:6b:71:7e:c4:a8:9e:76:8b:40:16:8d:e4:52:ff:
a8:3d:1f:e7:e9:91:36:17:1c:a3:20:9e:3f:3b:ba:18:7a:d8:
3a:8a:a0:dc:9d:fe:06:e2:05:9f:43:f1:6e:5b:b8:8f:eb:f7:
e5:d4:f2:3c:91:ea:06:e8:5e:3d:ec:b5:ea:65:23:2d:15:12:
ba:59:60:a8:f1:a1:54:81:01:1a:04:34:e9:20:ba:77:29:d0:
f9:e3:20:4a:dc:18:67:0d:78:d4:27:f2:0d:20:18:d1:4b:de:
11:b7:08:56:41:3f:9f:cd:cf:cc:56:39:64:14:a1:7b:f1:d9:
6d:80:ea:25:05:4c:3e:d3:5c:6f:a7:4e:fe:e5:3d:50:b2:1b:
eb:0e:15:53:4a:fe:9b:89:67:a8:80:40:c3:d5:ce:a7:58:20:
a5:c8:98:1f:2b:fd:f6:9e:1c:ce:62:50:cf:71:a4:9d:6f:97:
0b:9c:08:5d:dd:14:44:8b:5e:21:e0:fb:e3:e2:8c:7a:9f:1d:
18:e8:05:e5:b4:e5:07:08:da:1f:62:40:ef:22:98:41:fe:b8:
93:a4:f9:6a:19:87:09:ed:43:80:67:b1:3a:a2:a8:58:40:71:
78:ce:26:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:50:44 2025 by rpki-client