Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/tgnHzXeLCJiXCAPJ_glUTv7OHS8.roa
File: tgnHzXeLCJiXCAPJ_glUTv7OHS8.roa (raw, json)
Hash identifier: Y7G+AG2b8fGaiPrCf18XFNnHbbpuCoEv8RauRd/wso0=
Subject key identifier: B6:09:C7:CD:77:8B:08:98:97:08:03:C9:FE:09:54:4E:FE:CE:1D:2F
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 1474
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/tgnHzXeLCJiXCAPJ_glUTv7OHS8.roa
Signing time: Fri 22 Aug 2025 08:51:32 +0000
ROA not before: Fri 22 Aug 2025 08:51:32 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131621
IP address blocks: 2001:dc1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5236 (0x1474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Aug 22 08:51:32 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=B609C7CD778B0898970803C9FE09544EFECE1D2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:76:83:f9:d4:43:58:3a:43:8a:93:2a:82:
03:d6:9a:a5:b1:3b:75:b4:92:0b:94:69:fc:4e:cb:
db:b1:ea:25:1b:fc:95:6e:dd:43:c5:bd:25:c7:9f:
53:50:62:c7:f8:a0:c3:d7:8e:94:28:1b:cb:b2:c0:
0b:8e:6b:de:06:c2:65:02:9a:1a:e4:43:5a:b1:72:
78:d0:55:c5:c7:30:75:e2:fb:05:89:42:a2:07:ba:
7a:f7:12:7b:c3:51:8f:08:35:5c:10:4d:41:ac:9e:
60:71:62:39:de:af:55:04:52:18:e3:1c:b5:58:32:
20:44:23:00:3e:cc:bf:97:08:75:e5:fe:02:e3:ad:
67:e6:4a:e5:a7:bb:fb:02:58:6d:81:68:28:18:6f:
4e:c1:ec:0f:06:bc:f0:1f:a8:4d:35:07:8b:e8:93:
fa:28:19:09:78:09:02:ba:07:43:72:88:73:02:15:
5f:be:81:29:8e:e7:f7:52:ee:26:d1:c3:0c:d0:c3:
a1:13:d3:3b:3e:08:7b:98:ba:90:3e:f8:e9:41:fa:
90:04:38:f7:6f:ff:7e:40:fe:fa:a6:2a:10:40:7b:
49:bc:27:6f:29:d1:87:88:57:c4:a1:18:2f:9c:a9:
8e:e4:76:05:0e:90:6d:31:35:52:91:e9:ba:fe:1a:
7b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:09:C7:CD:77:8B:08:98:97:08:03:C9:FE:09:54:4E:FE:CE:1D:2F
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/tgnHzXeLCJiXCAPJ_glUTv7OHS8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:dc1::/32
Signature Algorithm: sha256WithRSAEncryption
af:21:19:75:b5:4a:89:b4:cb:43:87:97:2d:87:3e:10:95:27:
c0:44:f8:ca:7d:f4:13:cc:30:2d:c5:e9:e1:e2:c9:bd:ff:8f:
35:d4:7b:92:4c:ef:33:3f:15:c3:a0:35:27:05:9b:67:c3:03:
e1:d8:11:14:5c:b3:7d:ca:6b:ad:ca:ad:f3:83:91:be:db:88:
fc:24:80:95:00:83:51:97:71:08:a4:7b:92:26:22:b6:5b:47:
88:19:1c:fb:35:c7:42:c5:f3:8e:be:5f:94:66:96:7b:dc:fa:
f1:43:cb:42:70:93:94:af:75:9f:27:07:46:24:f2:5a:a2:d8:
af:71:2d:51:d8:54:db:5f:4e:d6:2d:b6:86:d4:b4:0d:21:23:
a0:fb:39:d6:e2:d1:64:46:c9:fb:1d:d3:fc:fa:41:07:c2:44:
93:9c:78:cf:d5:60:66:f7:55:91:d0:ec:f7:8a:f7:5b:90:5f:
e5:c6:c2:35:b0:fd:07:f7:49:50:b6:10:fd:a2:f7:df:ba:b4:
3b:0a:66:69:92:62:6c:e4:63:95:d5:fd:cb:f1:eb:e2:7d:c1:
5e:62:08:3d:03:d6:d6:48:a9:3a:26:6f:c5:60:f4:80:37:4a:
c6:01:5f:fb:39:9c:ec:c0:df:0a:ce:45:a5:ce:08:90:f7:ab:
79:84:b8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:48:56 2025 by rpki-client