Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/lUaY_JEWtwFgjXPk3_IXElPh0M4.roa
File: lUaY_JEWtwFgjXPk3_IXElPh0M4.roa (raw, json)
Hash identifier: 9yCAHj8MGJgzdhapiacSfGMjjtQdLpCJs+djqKk8ZOk=
Subject key identifier: 95:46:98:FC:91:16:B7:01:60:8D:73:E4:DF:F2:17:12:53:E1:D0:CE
Certificate issuer: /CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Certificate serial: 030C
Authority key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/lUaY_JEWtwFgjXPk3_IXElPh0M4.roa
Signing time: Sun 10 May 2026 16:02:38 +0000
ROA not before: Sun 10 May 2026 16:02:38 +0000
ROA not after: Wed 30 Dec 2026 15:30:20 +0000
asID: 18040
IP address blocks: 2402:43e0:eeee::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 780 (0x30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Validity
Not Before: May 10 16:02:38 2026 GMT
Not After : Dec 30 15:30:20 2026 GMT
Subject: CN=954698FC9116B701608D73E4DFF2171253E1D0CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:78:02:0c:39:04:3b:78:8a:28:38:13:e3:
c2:1d:8e:03:e3:1c:c3:74:7e:a1:39:e9:d9:f5:af:
c5:30:66:38:74:f3:e1:bc:5c:5d:dd:f3:56:44:de:
08:e2:10:fa:ac:9f:20:0e:b9:b1:ba:6a:ff:bc:ad:
3c:70:66:ba:3e:3c:7f:71:87:49:2e:79:74:33:f8:
3a:ff:fc:51:32:f0:b4:fc:70:0a:5c:c6:e4:3f:b6:
1a:4a:f0:97:33:46:fb:d5:4f:05:1a:39:2c:59:43:
41:cf:0a:59:77:a6:fd:01:25:34:8a:4d:61:31:2b:
7f:f9:75:15:ba:1f:9f:1c:a9:cc:1f:c0:11:58:9c:
4f:cd:84:f9:3d:14:b9:41:2d:f5:56:7b:89:30:5c:
57:f3:97:9d:f2:e3:f9:a7:9c:91:47:31:38:61:78:
88:d5:f7:d2:27:e6:d2:ac:06:38:0c:1f:38:ae:0c:
41:37:9d:f3:00:49:63:c7:84:ba:fe:a7:23:0a:59:
34:9b:b5:06:05:99:ff:3d:3f:71:b0:ca:92:97:99:
c9:e8:d5:cd:00:8c:08:20:8e:cd:ef:55:28:c0:d7:
b5:b5:24:58:68:c6:61:ab:62:da:e8:8d:bf:36:a5:
0c:da:32:40:87:7a:1a:aa:42:5e:a8:92:fa:5e:7d:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:46:98:FC:91:16:B7:01:60:8D:73:E4:DF:F2:17:12:53:E1:D0:CE
X509v3 Authority Key Identifier:
keyid:FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/lUaY_JEWtwFgjXPk3_IXElPh0M4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:43e0:eeee::/48
Signature Algorithm: sha256WithRSAEncryption
46:29:b5:44:fe:71:bd:6d:8d:d3:6a:2b:11:4d:b1:c0:05:ab:
11:0c:f1:26:bb:4d:aa:23:37:39:26:03:46:e8:e1:fa:4a:17:
c1:83:d9:a3:f0:7d:46:d5:ec:26:bc:5c:88:85:21:cd:fe:42:
43:3d:b6:1c:3d:7e:61:e1:3b:66:ac:79:41:67:e6:2d:37:74:
bb:dd:a7:00:25:5f:2a:b3:30:d3:db:4a:c5:9a:8f:50:19:85:
30:4e:9f:7d:fd:af:6a:5f:63:93:9f:1e:1f:79:4a:e5:4d:44:
42:c0:8f:73:d4:bd:ca:d0:55:4a:58:37:77:d9:4b:0c:67:f5:
68:d0:27:5b:b2:80:2c:e8:d2:a2:7d:c5:f4:75:6d:b0:c0:9f:
e8:45:d1:34:e1:25:81:de:7f:20:9b:16:80:24:ce:39:64:d5:
79:15:03:9c:98:c7:d6:a9:1e:8e:83:4b:f8:d0:1a:fc:d8:ef:
63:dc:cb:ec:69:5e:ca:f4:2d:b1:74:dc:ab:1b:56:4e:ca:92:
e8:a3:40:50:52:a3:39:a3:5f:f0:00:6d:c8:23:63:ec:ad:ac:
90:c6:fe:de:56:a8:fc:d1:98:83:19:82:22:a7:be:aa:14:61:
70:fb:f3:4c:61:39:60:cc:43:b5:f7:50:01:51:b0:a5:20:a9:
a2:ab:23:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 15:20:29 2026 by rpki-client