Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/OTAmdcEXUz1llVC74C3MB13FF0s.roa
File: OTAmdcEXUz1llVC74C3MB13FF0s.roa (raw, json)
Hash identifier: hi4C0qUv9j1j26d/QoZpA3R89OVc8UUlfNgN8nGeqM4=
Subject key identifier: 39:30:26:75:C1:17:53:3D:65:95:50:BB:E0:2D:CC:07:5D:C5:17:4B
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0F71
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/OTAmdcEXUz1llVC74C3MB13FF0s.roa
Signing time: Fri 22 Aug 2025 08:51:22 +0000
ROA not before: Fri 22 Aug 2025 08:51:22 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18429
IP address blocks: 27.147.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3953 (0xf71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Aug 22 08:51:22 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=39302675C117533D659550BBE02DCC075DC5174B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:5d:f3:4a:a4:6a:5e:28:35:91:e6:0d:32:
0e:6a:b2:d7:d2:42:f1:a2:f5:e0:84:3f:87:08:3b:
c9:4e:b1:5e:2a:48:b8:5f:d7:fa:db:5d:87:20:7f:
4d:56:31:f5:8a:6d:d9:e6:37:c8:88:ce:99:cd:c7:
68:81:ed:da:cd:90:a3:c2:7f:7e:04:73:fe:10:95:
39:0e:10:ea:02:ea:62:93:26:e5:53:e8:24:25:7d:
14:9b:d8:a4:4c:53:f2:7d:a6:27:9c:8f:95:9d:2a:
6e:29:3e:ff:ca:74:3b:3c:50:c0:ac:7f:88:b3:f7:
a4:6c:44:37:76:0a:c9:23:3c:91:a8:8c:25:09:62:
69:fb:3e:d6:a2:af:78:8b:48:28:c9:32:12:1b:36:
e8:07:de:ae:99:97:c8:42:26:e0:79:92:76:d0:76:
90:ee:87:07:44:35:03:43:c8:41:f5:c4:24:61:cf:
b1:00:fa:94:d6:71:dc:45:84:0a:25:52:3e:ec:f9:
6b:d6:66:1d:7f:9c:c2:81:7a:3b:83:99:0c:6a:23:
d1:b3:06:81:8a:17:c8:29:0d:af:ee:23:d8:21:9c:
08:af:8c:b0:5e:1f:0e:57:c0:21:5b:98:a4:12:a9:
b6:6b:5b:7a:56:f8:1f:c7:06:10:58:ba:01:f1:d8:
eb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:30:26:75:C1:17:53:3D:65:95:50:BB:E0:2D:CC:07:5D:C5:17:4B
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/OTAmdcEXUz1llVC74C3MB13FF0s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.56.0/21
Signature Algorithm: sha256WithRSAEncryption
05:b8:d0:03:e4:f8:e8:bb:46:2e:2b:95:4c:fe:d5:04:e9:59:
96:c1:62:a5:9d:0b:9a:2a:b3:6c:1c:83:64:53:a3:dd:79:09:
1d:d4:5f:62:f5:a9:96:63:a5:f2:f1:95:88:e2:5e:29:2f:bb:
f1:09:e5:9e:44:6a:25:d2:15:24:95:43:00:5e:01:32:1a:0a:
f9:e7:92:c4:f3:10:7d:27:ca:ea:46:49:4f:ca:db:5d:7d:f1:
f5:12:a3:78:11:3f:24:0e:4d:2c:ce:b7:7c:0e:a3:4a:4d:7e:
10:d5:a8:91:c1:d6:1b:d1:f2:11:23:c1:f6:fb:41:64:67:fd:
ea:06:08:73:d8:47:91:32:37:68:d0:23:57:5c:c8:3e:f7:13:
87:e0:5c:17:7f:82:ac:e4:a8:f8:b4:b8:79:01:13:17:6c:51:
20:52:2b:34:00:9b:6b:9b:55:36:90:f7:97:01:c6:83:6a:cf:
62:dd:43:86:53:64:5e:77:43:7e:74:28:96:84:65:3f:db:ce:
03:48:59:95:65:dc:c1:45:2e:12:b7:5d:a7:36:62:9a:fb:50:
26:78:84:6d:56:85:a9:4d:40:c5:76:92:51:3e:ec:2e:2c:8c:
3f:6d:a2:c4:ef:97:2f:68:30:4d:63:a3:46:50:dd:5f:6f:27:
ed:4c:83:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 17:41:28 2025 by rpki-client