Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/LNGq2KkqngXkGjM1eDmDU0GUB3k.roa
File: LNGq2KkqngXkGjM1eDmDU0GUB3k.roa (raw, json)
Hash identifier: Y8ICa+/nETcWYLFRdvkQ4d7OtENDwDTGjR1srNoNEtY=
Subject key identifier: 2C:D1:AA:D8:A9:2A:9E:05:E4:1A:33:35:78:39:83:53:41:94:07:79
Certificate issuer: /CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8
Certificate serial: 0D25
Authority key identifier: 33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/LNGq2KkqngXkGjM1eDmDU0GUB3k.roa
Signing time: Fri 22 Aug 2025 09:03:59 +0000
ROA not before: Fri 22 Aug 2025 09:03:59 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131597
IP address blocks: 45.113.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3365 (0xd25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8
Validity
Not Before: Aug 22 09:03:59 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=2CD1AAD8A92A9E05E41A33357839835341940779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:36:57:2f:d8:9e:ad:49:4b:45:a2:6e:7a:81:
f5:37:00:bd:54:30:66:d8:e7:87:06:f9:42:78:c9:
ee:ec:76:70:bb:87:53:fd:a3:26:0d:f4:fe:3c:18:
b6:b3:6d:b2:5f:cf:05:c3:6e:93:10:4f:9f:cf:c1:
55:47:f0:dc:e5:f8:e1:66:b7:11:e7:03:4f:98:bb:
18:c2:bd:1f:ed:9f:de:b9:09:32:7d:ad:24:47:7e:
70:74:bf:42:13:01:aa:0e:18:c6:09:2c:22:3c:d7:
d2:dd:11:6b:c7:71:91:05:8c:f6:46:c2:ac:23:ae:
4f:6c:92:2f:5d:23:da:62:06:64:52:35:e8:e9:1f:
d5:96:05:b8:b3:ca:24:0a:5e:8f:98:a6:56:b5:76:
f3:81:fa:53:09:1d:0b:29:8f:42:e0:67:ec:e2:13:
a3:fd:46:76:52:ce:1f:74:13:42:1b:b6:f7:43:b7:
06:4c:56:36:78:d4:ef:72:af:ad:fc:d0:0c:f5:6f:
df:d7:23:41:87:13:36:88:12:a7:a5:62:af:03:4c:
ac:53:e6:07:f3:aa:bf:a1:f9:03:b7:f2:57:44:03:
bb:14:00:7b:05:30:2f:5c:06:2b:e5:75:ae:19:94:
c7:55:aa:f5:0c:f4:16:ce:e2:03:c7:92:a0:fe:bb:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D1:AA:D8:A9:2A:9E:05:E4:1A:33:35:78:39:83:53:41:94:07:79
X509v3 Authority Key Identifier:
keyid:33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/M6gOdbovKw_UMSGJp-Q-Q1Po06g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/LNGq2KkqngXkGjM1eDmDU0GUB3k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.156.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:0d:a4:6b:42:48:65:4c:86:ba:32:b0:5d:c1:08:d7:59:6a:
2b:c8:02:b3:63:bd:a7:40:d3:06:8b:54:65:c5:61:a4:74:5e:
82:33:e6:07:b9:b8:c6:25:0c:1e:52:30:3c:a8:0c:0c:57:0d:
46:fa:ff:f6:d2:ff:e1:1d:6e:11:9f:af:20:ed:48:ff:06:ae:
6a:02:07:1c:d8:cd:f3:75:51:be:6e:1b:05:e0:08:57:6b:a9:
51:8b:31:ec:8a:0a:5a:15:f5:2c:14:fe:cf:1c:37:59:4a:23:
d2:4d:cc:91:4b:8a:10:5e:da:57:90:36:f1:69:03:40:94:e9:
aa:96:64:79:b5:16:fb:33:a2:c1:31:8b:0a:bc:ba:40:83:f3:
97:7a:9b:7a:36:14:a5:3e:de:0a:28:69:7a:eb:b8:a5:ff:5d:
8b:aa:24:2b:6d:92:0e:11:79:7c:c6:32:b5:d4:f4:49:5f:a0:
18:d0:01:d2:ef:c6:07:08:0f:7b:5b:25:fa:58:db:e9:03:e6:
2b:89:ea:3e:a0:8c:85:3a:32:c3:b9:b9:d3:5b:36:0f:ca:bd:
48:6f:a1:0b:ca:b7:8b:b6:c8:27:b6:6d:4b:27:d6:92:c8:d2:
49:f2:3f:56:76:9d:82:3c:d3:1d:76:0c:c6:9d:b6:fa:f2:fd:
40:fc:8a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:00:10 2025 by rpki-client