Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/wp9BItlpLmWtwFMQVsHDS47fIGc.roa
File: wp9BItlpLmWtwFMQVsHDS47fIGc.roa (raw, json)
Hash identifier: DAaqeW2ghKJAx7ZqyZGNgxqzMBqsJqrOQrhC5ZL4ffM=
Subject key identifier: C2:9F:41:22:D9:69:2E:65:AD:C0:53:10:56:C1:C3:4B:8E:DF:20:67
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0F82
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/wp9BItlpLmWtwFMQVsHDS47fIGc.roa
Signing time: Fri 22 Aug 2025 08:51:26 +0000
ROA not before: Fri 22 Aug 2025 08:51:26 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18429
IP address blocks: 27.147.8.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3970 (0xf82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Aug 22 08:51:26 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=C29F4122D9692E65ADC0531056C1C34B8EDF2067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:bc:20:4f:95:16:73:3b:34:cc:59:67:f6:
e4:b5:e1:be:24:36:4b:e9:12:84:6b:75:b8:8c:03:
8f:0a:a3:55:3b:1c:51:ae:ee:5f:68:75:fa:0e:f0:
b6:65:46:20:f3:5f:5a:08:78:a7:07:ea:e5:46:d0:
fc:b5:62:14:64:8c:5a:4b:a0:a8:88:f1:84:70:a2:
97:81:2a:a4:f4:65:c3:ab:f7:32:43:67:36:a6:f2:
45:55:e8:c8:3f:97:48:b0:c5:f9:16:a0:de:d5:79:
a8:df:ad:76:58:e7:3c:b9:d4:f0:3a:2d:42:45:2f:
70:50:67:b1:69:70:0a:d8:3e:a4:87:e3:3b:2e:6a:
8d:de:9b:d0:ad:6d:ab:70:c9:ca:fa:72:b5:e3:ae:
d8:29:e2:e6:77:6f:54:60:0c:ff:61:e6:0a:ae:1c:
e7:17:69:eb:0f:2f:cc:57:02:e4:e9:ac:53:67:ff:
7e:a2:19:c3:32:fb:a1:eb:f5:ca:7f:96:e6:fe:88:
fc:cc:21:99:3a:6b:76:2f:5a:a4:d9:ef:92:d1:09:
86:37:dc:7e:43:83:18:03:91:90:a1:2d:d0:3d:8d:
67:71:68:93:d3:b6:d8:93:af:b5:51:34:7e:ae:84:
c9:18:44:dd:35:ae:47:d5:da:74:c7:17:83:11:14:
88:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9F:41:22:D9:69:2E:65:AD:C0:53:10:56:C1:C3:4B:8E:DF:20:67
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/wp9BItlpLmWtwFMQVsHDS47fIGc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.8.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:bf:44:89:e0:2c:c8:3e:be:4d:46:9e:3f:65:e0:2b:d0:ea:
20:1f:01:6b:f3:2d:39:59:c5:ab:a6:e7:81:f9:17:f2:78:e4:
c5:93:2f:8a:46:c6:ef:22:0c:8e:71:14:ba:bd:64:98:34:de:
21:07:69:a2:b6:72:a9:95:c0:8b:16:b7:3f:26:c2:90:82:01:
73:4d:e6:cb:08:56:87:58:4d:fc:4a:bb:49:89:5b:75:93:03:
c3:77:b4:44:4a:d2:82:76:dc:c7:ad:4c:bb:d3:13:ad:a3:50:
61:67:91:b6:c5:c8:d1:fd:d4:f0:b8:ae:e6:83:6e:bb:f0:0b:
13:8d:28:03:d7:ff:3f:c7:d7:69:7f:86:16:6c:b9:30:04:f7:
3b:f6:21:e3:e8:cb:22:8b:d3:b2:42:7a:25:65:96:b7:31:d7:
78:37:7c:1c:80:f7:0b:7a:b0:9b:e0:5a:c3:e3:3a:9e:66:4d:
f1:a9:93:08:91:43:11:0a:e4:c4:0c:38:53:c2:c3:ab:2a:3d:
8d:de:37:b8:bc:a4:21:d6:ba:88:ba:a7:18:01:ff:da:75:76:
42:76:4e:c1:9b:3b:56:48:c7:33:9f:3c:43:83:81:f8:3a:b6:
8b:0e:7a:28:3f:68:c2:b5:6f:e1:5e:11:ed:91:c9:73:ab:21:
9a:c3:8f:51
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICD4IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx
RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTA4MjIw
ODUxMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEMyOUY0MTIyRDk2OTJF
NjVBREMwNTMxMDU2QzFDMzRCOEVERjIwNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKGLwgT5UWczs0zFln9uS14b4kNkvpEoRrdbiMA48Ko1U7HFGu
7l9odfoO8LZlRiDzX1oIeKcH6uVG0Py1YhRkjFpLoKiI8YRwopeBKqT0ZcOr9zJD
Zzam8kVV6Mg/l0iwxfkWoN7VeajfrXZY5zy51PA6LUJFL3BQZ7FpcArYPqSH4zsu
ao3em9Ctbatwycr6crXjrtgp4uZ3b1RgDP9h5gquHOcXaesPL8xXAuTprFNn/36i
GcMy+6Hr9cp/lub+iPzMIZk6a3YvWqTZ75LRCYY33H5DgxgDkZChLdA9jWdxaJPT
ttiTr7VRNH6uhMkYRN01rkfV2nTHF4MRFIjnAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUwp9BItlpLmWtwFMQVsHDS47fIGcwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0
X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv
WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC93cDlCSXRscExtV3R3Rk1RVnNI
RFM0N2ZJR2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDG5MI
MA0GCSqGSIb3DQEBCwUAA4IBAQBdv0SJ4CzIPr5NRp4/ZeAr0OogHwFr8y05WcWr
pueB+RfyeOTFky+KRsbvIgyOcRS6vWSYNN4hB2mitnKplcCLFrc/JsKQggFzTebL
CFaHWE38SrtJiVt1kwPDd7REStKCdtzHrUy70xOto1BhZ5G2xcjR/dTwuK7mg267
8AsTjSgD1/8/x9dpf4YWbLkwBPc79iHj6Msii9OyQnolZZa3Mdd4N3wcgPcLerCb
4FrD4zqeZk3xqZMIkUMRCuTEDDhTwsOrKj2N3je4vKQh1rqIuqcYAf/adXZCdk7B
mztWSMcznzxDg4H4OraLDnooP2jCtW/hXhHtkclzqyGaw49R
-----END CERTIFICATE-----
Generated at Sat Oct 25 17:39:03 2025 by rpki-client