Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/I0uk9dqtoT_uDkNxkLmaHMNkRGE.roa
File: I0uk9dqtoT_uDkNxkLmaHMNkRGE.roa (raw, json)
Hash identifier: L8A2jdQkowzyLRP7tI8d1O2rgaSllBH6XNO0Turak5o=
Subject key identifier: 23:4B:A4:F5:DA:AD:A1:3F:EE:0E:43:71:90:B9:9A:1C:C3:64:44:61
Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial: 0DF0
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/I0uk9dqtoT_uDkNxkLmaHMNkRGE.roa
Signing time: Fri 22 Aug 2025 08:52:12 +0000
ROA not before: Fri 22 Aug 2025 08:52:12 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18018
IP address blocks: 122.255.94.0/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3568 (0xdf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Validity
Not Before: Aug 22 08:52:12 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=234BA4F5DAADA13FEE0E437190B99A1CC3644461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:fa:80:4b:63:3b:cc:2e:f4:03:fa:a9:39:
5e:67:f7:29:8b:af:66:62:20:9f:3b:62:bd:6e:e9:
94:fc:b9:61:0d:dd:35:13:35:96:a4:60:a8:cc:89:
d7:f8:3c:32:84:6d:18:dc:e4:ba:fc:5a:cf:df:08:
5f:37:18:89:b0:65:10:fc:b6:bc:5c:39:30:61:7a:
7a:85:d7:59:0f:cf:57:0a:a8:f4:0d:46:73:02:fd:
77:de:c8:72:fa:eb:a3:9a:9d:26:61:08:ce:76:5f:
1a:7b:f4:09:bd:7f:10:b4:5f:06:52:65:6e:cf:2b:
b8:f6:b7:34:c1:74:50:9e:98:b7:70:98:85:82:a5:
33:18:1a:78:32:a5:f7:4b:e3:79:5f:41:eb:49:80:
9d:54:25:1d:a3:94:af:d5:00:c5:b4:98:76:00:38:
7f:db:a3:fc:24:2a:53:b8:ca:97:7a:7b:c8:dd:d7:
18:cd:21:86:a4:07:42:9c:f7:fe:0a:20:99:02:61:
07:52:f1:4c:24:0b:52:de:f4:8b:57:b0:8d:0a:cb:
b0:32:fd:51:40:3a:8e:6b:ac:bf:1f:4b:1b:7c:10:
53:3e:68:24:9e:82:18:33:cf:ff:77:38:9f:58:8b:
cd:98:09:a3:54:69:90:20:4b:3e:b7:58:a3:ab:94:
94:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4B:A4:F5:DA:AD:A1:3F:EE:0E:43:71:90:B9:9A:1C:C3:64:44:61
X509v3 Authority Key Identifier:
keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/I0uk9dqtoT_uDkNxkLmaHMNkRGE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.255.94.0/28
Signature Algorithm: sha256WithRSAEncryption
bc:45:16:74:f4:96:07:53:8e:bf:fc:b6:fd:00:12:48:40:94:
01:65:c3:fa:16:09:8e:75:f9:9f:30:60:4c:79:fb:e8:8d:24:
6b:a3:33:cc:c7:3d:de:58:ee:03:88:de:73:e3:5c:a6:8e:15:
bd:8a:d9:c1:76:cc:da:fd:c3:f6:83:f7:86:a9:bf:8f:28:3b:
d2:c8:3b:b3:9f:e3:47:ac:bc:f0:2a:1a:90:c0:fd:23:ed:6b:
c3:9b:49:a4:83:ab:84:10:d1:be:47:96:52:4e:34:e5:3d:40:
69:02:71:2c:10:af:f0:9b:93:68:f2:b2:93:c1:fe:30:3f:43:
1f:dc:d3:b7:3d:6b:48:3f:a2:24:24:44:06:44:29:c6:c4:f2:
d9:ae:72:ce:68:f2:12:84:c4:88:62:0b:fd:1b:c9:5c:00:54:
e7:93:56:0b:a4:f1:47:1d:0e:55:75:5d:d8:3e:d9:b0:65:b7:
bf:db:a2:d3:32:74:92:94:c1:73:73:84:61:e6:76:67:0f:4e:
b8:e9:d3:f1:d4:5d:8b:19:9d:40:0c:9e:4c:1c:42:b6:ce:15:
75:d5:3a:7c:22:3e:c5:82:bd:72:9d:c8:f7:b4:97:ff:8d:53:
eb:0d:f3:1e:67:71:c5:aa:0e:08:46:04:82:14:b9:ce:ed:1f:
8c:df:03:d6
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICDfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy
Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yNTA4MjIw
ODUyMTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIzNEJBNEY1REFBREEx
M0ZFRTBFNDM3MTkwQjk5QTFDQzM2NDQ0NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIdfqAS2M7zC70A/qpOV5n9ymLr2ZiIJ87Yr1u6ZT8uWEN3TUT
NZakYKjMidf4PDKEbRjc5Lr8Ws/fCF83GImwZRD8trxcOTBhenqF11kPz1cKqPQN
RnMC/XfeyHL666OanSZhCM52Xxp79Am9fxC0XwZSZW7PK7j2tzTBdFCemLdwmIWC
pTMYGngypfdL43lfQetJgJ1UJR2jlK/VAMW0mHYAOH/bo/wkKlO4ypd6e8jd1xjN
IYakB0Kc9/4KIJkCYQdS8UwkC1Le9ItXsI0Ky7Ay/VFAOo5rrL8fSxt8EFM+aCSe
ghgzz/93OJ9Yi82YCaNUaZAgSz63WKOrlJRjAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUI0uk9dqtoT/uDkNxkLmaHMNkRGEwHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe
wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv
bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC9JMHVrOWRxdG9UX3VEa054a0xt
YUhNTmtSR0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEev9e
ADANBgkqhkiG9w0BAQsFAAOCAQEAvEUWdPSWB1OOv/y2/QASSECUAWXD+hYJjnX5
nzBgTHn76I0ka6MzzMc93ljuA4jec+Ncpo4VvYrZwXbM2v3D9oP3hqm/jyg70sg7
s5/jR6y88CoakMD9I+1rw5tJpIOrhBDRvkeWUk405T1AaQJxLBCv8JuTaPKyk8H+
MD9DH9zTtz1rSD+iJCREBkQpxsTy2a5yzmjyEoTEiGIL/RvJXABU55NWC6TxRx0O
VXVd2D7ZsGW3v9ui0zJ0kpTBc3OEYeZ2Zw9OuOnT8dRdixmdQAyeTBxCts4VddU6
fCI+xYK9cp3I97SX/41T6w3zHmdxxaoOCEYEghS5zu0fjN8D1g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:00:01 2025 by rpki-client