Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/7EGTgJyjCW5hAxvIm2Zf9ca13Q8.roa
File: 7EGTgJyjCW5hAxvIm2Zf9ca13Q8.roa (raw, json)
Hash identifier: vtYqFP3w8kVH/dUgdDIPC9dyFG3k2T0ncXd76uvTTyc=
Subject key identifier: EC:41:93:80:9C:A3:09:6E:61:03:1B:C8:9B:66:5F:F5:C6:B5:DD:0F
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0F67
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/7EGTgJyjCW5hAxvIm2Zf9ca13Q8.roa
Signing time: Fri 22 Aug 2025 08:51:20 +0000
ROA not before: Fri 22 Aug 2025 08:51:20 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18429
IP address blocks: 124.155.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3943 (0xf67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Aug 22 08:51:20 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=EC4193809CA3096E61031BC89B665FF5C6B5DD0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dd:ef:fb:c4:76:75:e7:c6:d3:92:61:b1:e7:
23:a8:f0:94:26:f6:83:84:28:48:bc:97:fc:11:81:
57:03:19:4c:05:a5:a0:ea:91:f0:c6:d1:f9:6e:fb:
2a:f7:4a:43:d5:ce:dc:dd:00:2a:5b:d0:41:57:1d:
29:1b:73:57:76:5e:ac:10:6a:a3:13:ab:d3:7b:12:
7b:ec:5e:85:e6:5e:1c:c4:22:19:6b:0b:d8:58:39:
c5:c7:f5:fe:49:53:74:69:cb:45:bd:48:5f:c0:60:
a9:06:44:f1:f1:f5:c0:8f:6d:83:31:e1:fe:c6:c8:
38:f0:a6:27:95:36:e6:50:67:c2:30:ef:a9:fb:66:
44:d6:1c:c6:7a:d9:78:7e:9a:6d:db:4a:a5:04:c9:
31:cc:81:0f:f8:b7:a5:3f:00:36:5d:5d:83:28:c5:
df:c3:7c:f0:2d:8e:ef:96:fd:74:9c:d8:f1:fa:95:
d9:a2:d5:07:4e:f1:33:ad:1c:55:88:9f:eb:b7:d9:
3c:1f:8d:e8:13:ea:e3:be:7f:d7:55:3d:8a:0e:b9:
2b:af:46:0a:bc:6a:df:df:da:5e:85:17:e3:4e:ff:
17:90:97:27:59:31:80:4f:9e:d8:eb:6f:ea:44:d1:
05:a5:b3:d7:c9:00:96:6f:b5:97:4e:56:61:28:bb:
ba:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:41:93:80:9C:A3:09:6E:61:03:1B:C8:9B:66:5F:F5:C6:B5:DD:0F
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/7EGTgJyjCW5hAxvIm2Zf9ca13Q8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.168.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:c3:61:94:67:f1:47:fb:b2:03:64:0b:d2:c0:a4:07:45:13:
11:a1:9e:ac:01:8d:dd:94:79:8c:75:30:be:4b:bb:f1:c9:2d:
73:00:10:41:73:d6:32:51:93:af:51:5b:b2:94:2f:0e:4e:45:
ba:d2:fd:42:9d:ce:b8:d7:06:4e:26:1d:9f:2c:83:52:ef:d1:
cf:29:6a:5f:36:be:9d:93:b2:72:a1:d7:97:87:bf:79:70:64:
ef:7d:70:69:70:bc:ca:ec:cd:91:6c:31:31:d2:4e:90:99:58:
e0:b4:bf:81:52:41:7e:5a:01:f5:07:33:2c:2a:91:01:64:a6:
f3:ef:1d:95:fe:0c:5e:53:5e:27:cf:33:20:08:84:6e:97:27:
d4:6b:df:a4:8b:b6:ec:a7:14:67:a3:92:4e:f4:41:05:74:b2:
21:e4:d8:d7:49:84:36:48:21:29:bb:8b:cf:8f:c8:ae:c0:7c:
d5:7c:e0:cf:57:ba:84:8d:08:57:26:8d:1f:9e:2c:8a:d4:4c:
87:e7:4c:3d:9c:0d:63:0b:63:95:78:57:72:5e:df:43:7a:38:
bb:5b:16:35:ba:2e:54:31:07:dd:fa:6a:3b:df:2b:1d:6c:22:
10:ad:2a:58:34:7e:43:b8:4b:8e:3c:90:ad:7a:d2:38:07:ce:
8f:c8:2e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 17:39:51 2025 by rpki-client