Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/PZxIr4ZZ_jzCceEajRdqPLl4KzM.roa
File: PZxIr4ZZ_jzCceEajRdqPLl4KzM.roa (raw, json)
Hash identifier: 9n2jIbNXXlW3qMBCrLzWj0o4VjPoZDBdIZ21q4Pblac=
Subject key identifier: 3D:9C:48:AF:86:59:FE:3C:C2:71:E1:1A:8D:17:6A:3C:B9:78:2B:33
Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial: 0DEE
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/PZxIr4ZZ_jzCceEajRdqPLl4KzM.roa
Signing time: Fri 22 Aug 2025 08:52:12 +0000
ROA not before: Fri 22 Aug 2025 08:52:12 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18018
IP address blocks: 122.255.93.112/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3566 (0xdee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Validity
Not Before: Aug 22 08:52:12 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=3D9C48AF8659FE3CC271E11A8D176A3CB9782B33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:01:d1:87:4c:20:03:36:c8:5d:6a:a0:ef:
92:95:0e:da:e3:2e:a2:4e:db:ac:30:a6:34:b4:63:
a4:b2:49:f4:45:d2:e5:b3:d8:d3:d3:4e:5f:4a:32:
94:5c:b9:b0:76:13:13:96:9e:17:cd:8e:eb:88:9d:
4c:ab:87:73:03:d7:0f:82:ad:d2:d8:ad:bf:45:57:
81:f1:29:88:d0:6c:5a:3d:b8:bb:ac:cd:4a:29:9a:
bc:74:5c:d4:11:95:34:ee:61:a0:2c:19:36:d2:dd:
18:76:29:cc:6f:78:8b:fb:11:f2:e6:ab:d1:56:c5:
c6:0e:a6:11:28:cd:cb:e3:99:28:33:04:28:e8:05:
59:1a:0d:d2:99:aa:75:6b:db:41:95:20:31:32:79:
b5:53:fe:32:05:76:21:f0:26:9b:0d:e1:66:10:ec:
77:d8:63:d6:58:60:3b:75:00:ce:48:96:64:66:ea:
38:df:f9:36:87:16:63:92:a1:22:c7:91:1b:8d:4c:
d2:67:81:60:92:98:c6:b0:e1:bc:49:27:97:47:bf:
a2:8f:3f:ca:06:40:10:bd:c9:5e:40:fe:96:16:ac:
0d:ae:2b:38:43:fd:11:8d:aa:b9:e7:bb:a1:70:91:
6c:5f:06:f4:1b:a2:dc:d5:69:38:bc:8f:9f:9f:0a:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9C:48:AF:86:59:FE:3C:C2:71:E1:1A:8D:17:6A:3C:B9:78:2B:33
X509v3 Authority Key Identifier:
keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/PZxIr4ZZ_jzCceEajRdqPLl4KzM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.255.93.112/28
Signature Algorithm: sha256WithRSAEncryption
8d:11:94:7b:ec:ea:bc:ba:11:16:0a:f6:49:09:d7:c7:e1:1f:
19:20:eb:07:6d:bf:d3:f8:8e:be:47:30:4c:bb:9b:bc:4f:78:
4a:5c:b3:6d:af:8c:9c:25:dc:06:81:7c:8c:3c:c0:55:4a:dd:
28:75:6c:57:4e:16:e6:7b:78:5e:b8:ad:ac:d7:fd:25:c6:75:
91:ae:2d:84:7b:53:64:a9:fd:29:9d:d3:d1:61:2b:64:80:31:
b3:c5:91:98:a4:83:28:05:bb:66:52:2e:74:9b:92:5a:fe:f4:
d3:5c:48:dd:9d:a9:ec:0f:4f:96:97:4e:f6:27:ba:72:cb:20:
be:6a:ad:af:1c:d9:df:c1:7f:ea:d7:65:02:9a:b8:d9:01:1a:
db:4d:50:33:ec:35:41:25:3a:02:bc:38:45:d4:df:5d:ee:e1:
21:38:1c:90:3a:2f:8e:c3:9c:e7:b7:3b:e1:83:bf:0d:c8:f1:
6d:34:c0:5c:a1:93:b1:aa:88:0f:69:e4:46:04:a6:34:8a:01:
8c:d1:ef:ae:ca:c5:0c:f5:30:e2:ef:cd:d8:42:82:70:fc:fa:
cc:1a:c1:ec:93:d2:e9:5c:5a:0b:f1:ec:42:55:a0:c8:38:b2:
67:57:9d:d6:1c:7c:4f:bb:91:36:f0:4e:50:d3:28:34:07:26:
1a:5c:b1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:00:00 2025 by rpki-client