Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/7qLzUgHjyDqea9ZPvpbaqED2-mE.roa
File: 7qLzUgHjyDqea9ZPvpbaqED2-mE.roa (raw, json)
Hash identifier: KNxLl9A16/+km24k+QmccYqWRqe3niacTl1oO6x1T7k=
Subject key identifier: EE:A2:F3:52:01:E3:C8:3A:9E:6B:D6:4F:BE:96:DA:A8:40:F6:FA:61
Certificate issuer: /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Certificate serial: 0E5C
Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/7qLzUgHjyDqea9ZPvpbaqED2-mE.roa
Signing time: Wed 29 Apr 2026 01:32:19 +0000
ROA not before: Wed 29 Apr 2026 01:32:19 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9264
IP address blocks: 103.130.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3676 (0xe5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Validity
Not Before: Apr 29 01:32:19 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=EEA2F35201E3C83A9E6BD64FBE96DAA840F6FA61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d6:75:1c:5b:a0:d2:4a:49:62:d9:bd:70:f8:
60:74:20:6a:d7:b1:4a:42:88:b9:c6:c7:0d:80:ea:
e7:55:8f:c4:9f:87:ea:53:ce:2f:f3:ae:5b:14:41:
1b:e9:26:83:bb:09:6f:10:e5:f8:9b:8a:a8:c2:34:
58:cd:07:b8:e8:e2:f2:94:fe:ed:dc:20:c6:36:92:
84:42:de:fc:55:21:f8:60:8c:02:ae:95:8a:18:77:
95:3b:59:38:34:7f:28:8a:4d:3e:95:fa:b7:27:7b:
71:60:43:cd:e9:0d:04:44:5c:34:2a:04:08:58:d2:
ac:38:a8:0b:48:22:2e:5a:f4:94:2d:1c:a8:ae:93:
1d:86:16:e6:b4:6d:c4:93:cf:fe:c4:c2:85:c1:43:
17:cf:2e:11:08:74:2a:a8:dd:02:80:04:12:14:ca:
7a:85:7a:fd:99:84:ea:da:31:fc:02:c5:93:94:cb:
1f:bc:db:92:3b:ff:d5:43:3c:a7:73:50:8f:a7:33:
83:cb:66:63:a8:56:3c:71:ea:a1:72:10:87:f4:1b:
33:74:62:7a:dc:9e:f3:0c:18:02:71:98:a9:36:d5:
98:02:3c:07:6b:7e:1d:78:52:15:bf:b4:76:ca:67:
e5:ea:d8:c0:d3:1d:90:68:ff:46:6f:df:9b:44:a8:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A2:F3:52:01:E3:C8:3A:9E:6B:D6:4F:BE:96:DA:A8:40:F6:FA:61
X509v3 Authority Key Identifier:
keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/7qLzUgHjyDqea9ZPvpbaqED2-mE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.252.0/22
Signature Algorithm: sha256WithRSAEncryption
42:0b:43:7c:39:83:24:30:02:6f:83:39:c0:66:f4:b8:e6:6d:
e8:bc:19:02:41:e8:7c:d1:54:e8:c3:4d:4c:24:4e:a0:57:c0:
ba:1f:35:42:b6:a7:ef:05:d5:0d:1e:30:51:3b:f0:5d:8b:11:
22:aa:75:fe:38:19:03:d8:20:4b:7a:97:03:18:83:df:84:a6:
4b:e0:d9:11:2b:3e:3e:13:36:40:1a:2a:1f:e5:58:96:48:5d:
75:80:81:1b:a1:21:b4:48:26:e6:01:cb:af:33:8c:03:6b:26:
d8:5d:65:0b:8d:32:ab:91:bb:2f:9a:62:60:2f:90:a4:52:91:
de:68:87:6d:60:69:5d:c3:35:34:23:f1:5b:6d:0e:0a:cd:fc:
ef:de:82:87:d5:95:b4:be:34:e6:a1:72:77:45:61:3c:dd:b2:
ea:5d:50:65:fe:35:0d:3b:46:7c:89:40:35:a2:2d:da:ce:cb:
1f:9f:6d:b8:e1:2a:74:30:29:b6:e0:2d:f5:12:e1:57:5e:7f:
11:57:3a:9f:f1:45:2f:73:87:8d:4d:71:f7:33:cc:fd:f3:0f:
47:4a:3e:5f:d4:32:43:96:c5:55:18:61:b9:a6:15:be:79:84:
11:4e:90:3e:dd:46:f2:0d:89:76:bc:ce:c9:d5:41:39:b0:b1:
4d:89:f7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:13:57 2026 by rpki-client