Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/Hod9ZCHmELmeOXVSWgnfG4HdWW4.roa
File: Hod9ZCHmELmeOXVSWgnfG4HdWW4.roa (raw, json)
Hash identifier: zotqIdGtaVwTYnA8hySEK9doQB+uveme1FKlUfLCgI0=
Subject key identifier: 1E:87:7D:64:21:E6:10:B9:9E:39:75:52:5A:09:DF:1B:81:DD:59:6E
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0F7A
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/Hod9ZCHmELmeOXVSWgnfG4HdWW4.roa
Signing time: Fri 22 Aug 2025 08:51:25 +0000
ROA not before: Fri 22 Aug 2025 08:51:25 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18429
IP address blocks: 123.50.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3962 (0xf7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Aug 22 08:51:25 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=1E877D6421E610B99E3975525A09DF1B81DD596E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:09:3e:fa:04:c3:6d:b0:f2:8e:69:41:fd:
31:2c:87:10:1e:a8:f9:f9:67:40:a8:b3:d1:6c:4b:
d3:bd:a3:bb:6d:88:87:3d:08:cc:8d:c4:94:8f:cc:
07:b6:3f:7a:31:c9:fa:a1:8b:b2:fb:7f:51:b2:a2:
32:90:85:41:aa:5f:1b:f1:83:8e:45:5c:b6:38:84:
3f:4c:a8:a9:a6:fa:b7:9f:a0:1d:cb:33:e7:eb:8c:
12:4f:08:16:b0:ba:02:d8:1b:42:bd:d5:f0:d5:58:
c7:71:c7:5d:60:37:a9:09:d4:73:b3:73:ed:a6:32:
b7:e9:99:92:14:95:8f:57:45:f9:f7:56:ad:4d:fb:
fd:32:c3:d4:71:d8:14:24:1d:51:4a:d4:fb:66:ed:
0e:8b:52:12:4f:c8:15:28:7e:7d:20:4a:e3:06:88:
ec:25:77:06:7b:a1:4e:05:22:96:9f:d7:e7:d0:e4:
d6:44:a4:ad:69:4b:e6:84:b8:a1:08:1d:ab:ac:50:
3f:7d:a0:02:67:9f:4f:ea:d3:9d:c6:02:d8:1a:03:
11:1a:0d:77:55:51:69:b3:32:8d:b6:17:ae:db:b8:
6b:5d:84:49:a9:0a:c1:d3:fe:84:b5:db:3f:ce:38:
41:ba:cb:2d:83:99:81:3d:5f:73:86:3d:d3:d4:2d:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:87:7D:64:21:E6:10:B9:9E:39:75:52:5A:09:DF:1B:81:DD:59:6E
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/Hod9ZCHmELmeOXVSWgnfG4HdWW4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.50.56.0/21
Signature Algorithm: sha256WithRSAEncryption
51:e5:83:40:35:4f:2f:f7:03:fd:72:2c:9e:47:36:18:de:6b:
37:cb:3a:d3:6f:4e:e3:a2:25:47:dd:d6:6e:12:db:f3:e3:1b:
14:89:82:8a:df:5c:91:84:c7:00:c5:2f:e0:ae:d7:ff:38:3e:
a6:14:be:60:5b:43:f7:56:be:cb:b3:39:34:86:65:93:20:39:
96:39:28:86:85:41:8f:7b:4d:50:59:d1:86:e9:76:20:19:83:
95:c3:60:16:58:5f:64:a0:80:03:6c:f7:f2:32:35:d1:16:f7:
b3:d5:59:57:19:dc:d3:98:8a:33:53:29:6f:7a:18:35:2f:af:
c3:b5:08:b9:1c:3b:ce:e1:b4:97:25:25:cf:69:9a:ba:b9:99:
4c:c1:40:0d:51:99:5a:46:9b:8e:65:e4:64:a8:32:6f:30:01:
0a:0a:2d:3d:d0:d2:f8:23:61:f3:2a:69:ec:3e:ec:4b:97:1e:
01:55:3c:d9:18:cb:24:6f:03:68:f7:3b:27:c9:d2:de:e7:1b:
1a:c2:d3:47:97:0f:e2:5c:a2:97:f1:e8:3b:71:15:fa:07:9a:
20:fd:50:c1:e2:40:b0:fe:63:ab:3c:2b:1b:75:25:3b:c0:59:
37:1f:21:60:a9:f5:2b:ee:99:27:f6:35:fc:0f:8e:36:05:1d:
01:1b:b3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 17:42:02 2025 by rpki-client