Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZAT/IVDfwZIEkQHBLiA8feY_VXch8Oc.roa
File: IVDfwZIEkQHBLiA8feY_VXch8Oc.roa (raw, json)
Hash identifier: rpv2VyUG1Pc76gfg+6fXZkRUERhi7OSrpJIquOyY2zA=
Subject key identifier: 21:50:DF:C1:92:04:91:01:C1:2E:20:3C:7D:E6:3F:55:77:21:F0:E7
Certificate issuer: /CN=41D608336CCF0EDFEA4A24614F1D7234884E8991
Certificate serial: 0227
Authority key identifier: 41:D6:08:33:6C:CF:0E:DF:EA:4A:24:61:4F:1D:72:34:88:4E:89:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/QdYIM2zPDt_qSiRhTx1yNIhOiZE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/IVDfwZIEkQHBLiA8feY_VXch8Oc.roa
Signing time: Fri 22 Aug 2025 08:44:06 +0000
ROA not before: Fri 22 Aug 2025 08:44:06 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 201217
IP address blocks: 210.79.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41D608336CCF0EDFEA4A24614F1D7234884E8991
Validity
Not Before: Aug 22 08:44:06 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=2150DFC192049101C12E203C7DE63F557721F0E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:9c:6d:de:72:a9:31:fc:8d:d9:0a:56:f8:
35:61:f9:78:16:9c:3b:5e:7b:45:cc:cb:08:d9:0e:
df:13:d9:0d:8b:98:f2:a3:11:11:4d:eb:92:bf:b3:
e1:93:3c:95:81:b8:d2:d6:08:ad:02:59:77:e0:61:
0b:1b:bd:64:80:c3:16:d6:18:22:d6:5a:41:71:21:
76:e6:f6:f0:d8:96:e5:57:3f:fd:48:d1:ad:eb:14:
0c:ce:53:16:06:be:43:84:ce:60:06:3a:3b:34:00:
9f:7d:9f:02:70:f3:7f:d7:57:f7:99:7c:b1:7e:22:
bd:a2:1a:2f:25:40:e6:cc:31:1c:de:be:17:7f:84:
73:ec:23:ec:aa:2a:60:84:6e:6f:6c:b8:c0:1a:0e:
4f:55:7e:e9:1f:dd:4f:c3:b0:fc:d6:dc:5d:80:91:
b7:46:2e:90:fb:ff:20:f4:95:51:70:19:07:7c:8e:
8e:f0:a8:38:e9:e9:1c:de:57:fd:68:e4:77:97:49:
b7:75:90:b6:cd:5d:45:65:37:c1:e3:3e:5f:a1:0c:
71:d5:e7:fa:8a:3e:fd:61:da:25:da:a1:0d:41:5c:
84:45:7a:c3:c8:4e:d8:dc:5c:9b:09:c8:7b:b3:12:
a2:fc:ef:77:3e:59:62:f0:b4:94:3a:17:d5:24:47:
3d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:50:DF:C1:92:04:91:01:C1:2E:20:3C:7D:E6:3F:55:77:21:F0:E7
X509v3 Authority Key Identifier:
keyid:41:D6:08:33:6C:CF:0E:DF:EA:4A:24:61:4F:1D:72:34:88:4E:89:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/QdYIM2zPDt_qSiRhTx1yNIhOiZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QdYIM2zPDt_qSiRhTx1yNIhOiZE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/IVDfwZIEkQHBLiA8feY_VXch8Oc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e6:33:ec:3a:70:c1:c9:14:98:54:5d:58:68:8f:f3:5b:1b:
0f:7c:24:41:f1:9b:8c:b2:e1:f8:16:01:d7:14:b4:33:d0:2a:
3c:de:ca:67:d4:df:ae:e1:88:df:ba:12:ce:02:59:d8:e8:d7:
e8:74:a2:0c:06:7c:32:03:ef:4d:f7:92:1d:10:97:bc:41:69:
b8:81:38:14:8c:cd:60:34:6d:52:49:3c:a8:f6:16:03:5c:76:
9f:54:60:47:c1:92:eb:bb:cd:4c:64:ae:e3:5c:20:d0:bc:0d:
2d:85:1a:06:72:0c:c5:2f:35:86:7d:aa:a4:96:bf:da:44:a9:
64:74:34:4f:b9:56:25:2a:b4:43:86:aa:8b:0d:60:8d:4a:00:
46:72:46:7a:29:42:8b:c5:21:fc:73:7b:c7:10:aa:56:4a:b0:
e4:b6:73:df:fc:2c:76:9c:a5:88:3f:d8:26:4a:9b:54:79:75:
12:75:fe:88:1d:90:f7:48:76:e9:3e:2f:0f:dc:cf:f2:57:2c:
25:74:da:39:7d:19:9a:0e:59:1c:91:ad:63:4d:15:2e:1a:0b:
95:4f:d0:53:3d:75:70:1d:11:52:15:fd:06:78:4c:e8:b4:d9:
13:c7:43:8c:5c:00:cc:1c:f2:41:72:16:a7:18:49:b7:44:21:
8f:a7:65:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:50:02 2025 by rpki-client