Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TDC/UnilsQOu3i9J9TozVOCq1kn9VM8.roa
File: UnilsQOu3i9J9TozVOCq1kn9VM8.roa (raw, json)
Hash identifier: 9P2p8NW61PAAx268PMzLNhiOGIx7AtWRbwkijVsUGxo=
Subject key identifier: 52:78:A5:B1:03:AE:DE:2F:49:F5:3A:33:54:E0:AA:D6:49:FD:54:CF
Certificate issuer: /CN=063F818DACB171B835415ABD278993922F3CDC5D
Certificate serial: 033E
Authority key identifier: 06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/UnilsQOu3i9J9TozVOCq1kn9VM8.roa
Signing time: Thu 30 Apr 2026 08:06:58 +0000
ROA not before: Thu 30 Apr 2026 08:06:58 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 201217
IP address blocks: 103.220.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 830 (0x33e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063F818DACB171B835415ABD278993922F3CDC5D
Validity
Not Before: Apr 30 08:06:58 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=5278A5B103AEDE2F49F53A3354E0AAD649FD54CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:76:8c:45:a9:37:9d:ff:55:77:5f:1a:52:
f6:7b:d6:68:44:33:9b:cd:66:66:47:b2:cc:ac:f3:
cc:20:d2:de:03:4b:1c:d8:c2:6c:55:66:c3:ec:e6:
10:2d:9f:34:de:2b:14:a2:60:b3:c1:92:e1:99:31:
e6:7a:fa:f4:7c:55:a6:60:05:3f:6f:63:d1:28:48:
34:52:30:15:4e:d1:2d:24:6b:03:26:ea:cc:29:f9:
2a:93:99:d3:4d:af:d1:d0:79:10:9b:fe:84:c2:a3:
3c:57:7f:e3:48:12:6d:db:62:da:43:1b:0a:68:cf:
08:95:03:3a:55:0a:29:ef:5c:35:4e:46:81:99:2b:
88:fb:de:22:7a:6b:09:39:38:b5:23:74:e9:7b:cb:
e8:02:eb:a8:4c:da:7c:c8:8c:c5:53:e4:c5:be:f4:
1c:4c:90:b2:d1:77:98:f5:a5:75:f2:75:10:d3:ef:
b3:4d:cc:e9:07:31:06:3f:f0:61:4e:a0:dc:91:04:
1a:e9:26:83:92:0c:9c:4c:10:9c:70:71:78:40:6d:
48:cc:b6:48:a6:10:b0:a0:dd:ab:9a:69:f3:af:bc:
f0:0d:87:98:ef:a4:39:1e:2f:97:b6:aa:9a:bc:e3:
44:cc:f1:bb:b5:60:57:aa:c4:61:1f:4c:cb:f3:f7:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:78:A5:B1:03:AE:DE:2F:49:F5:3A:33:54:E0:AA:D6:49:FD:54:CF
X509v3 Authority Key Identifier:
keyid:06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/UnilsQOu3i9J9TozVOCq1kn9VM8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.220.218.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e7:b8:63:35:2a:df:ef:50:65:de:25:ec:5b:94:5f:42:f4:
f5:a0:cb:84:8a:81:65:fd:6c:6b:d2:f7:97:97:62:f5:a5:74:
6a:5f:8d:20:c4:a4:22:d1:76:0b:c8:86:84:db:66:91:71:7b:
a0:b6:b7:dc:f4:2e:d9:c5:3c:43:64:60:eb:b9:43:4d:ee:b9:
34:6a:eb:4f:4e:b5:dc:ba:3a:25:c5:56:08:e1:bd:c8:50:1d:
a2:24:00:e0:83:83:77:4a:33:e0:a9:a5:05:4f:38:74:49:3f:
47:17:85:af:ce:cc:a5:5e:99:3d:06:6b:cf:6b:18:64:58:63:
b6:49:c3:f4:9a:48:93:31:14:6c:66:65:36:59:50:04:0d:9c:
a5:c7:3a:cd:c0:5f:c4:93:05:d9:c7:90:9b:19:eb:43:a7:35:
b4:29:2f:37:0a:d3:a3:1e:69:c4:ec:08:77:0a:cd:1c:32:30:
6b:29:a3:bc:df:81:55:54:09:7f:5f:07:e3:f2:4f:c6:9c:c1:
a4:14:43:17:88:e6:d9:fa:7c:fa:9e:88:67:62:a6:38:59:0d:
ff:9e:18:12:c6:30:6b:a4:c3:cc:08:10:83:50:de:7e:31:2b:
d7:b2:dd:9b:9e:ab:69:2b:58:0c:6f:1c:50:3c:a2:05:39:fd:
2c:93:30:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 15:20:27 2026 by rpki-client