Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/-OItrmc9HeHrKW6q2cnkfLtuykY.roa
File: -OItrmc9HeHrKW6q2cnkfLtuykY.roa (raw, json)
Hash identifier: l1tkEy/JpOdq+Fh4zybY6jAWArt3Od3L1iZLXDHucgA=
Subject key identifier: F8:E2:2D:AE:67:3D:1D:E1:EB:29:6E:AA:D9:C9:E4:7C:BB:6E:CA:46
Certificate issuer: /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Certificate serial: 0349
Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/-OItrmc9HeHrKW6q2cnkfLtuykY.roa
Signing time: Mon 27 Apr 2026 06:17:35 +0000
ROA not before: Mon 27 Apr 2026 06:17:35 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 215595
IP address blocks: 202.160.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 841 (0x349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Validity
Not Before: Apr 27 06:17:35 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=F8E22DAE673D1DE1EB296EAAD9C9E47CBB6ECA46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:63:21:63:f4:7e:1d:9f:ad:60:0f:53:7b:
e1:37:97:b0:74:25:e1:53:ed:aa:4c:9e:38:22:cc:
35:a4:2c:5a:7e:60:38:0e:7f:7f:cf:a8:e0:59:2e:
67:aa:ac:d2:2a:7d:7e:06:fc:3c:9f:09:b7:73:91:
3a:d6:dc:1a:e9:5d:98:2f:1b:51:fe:b2:d6:dc:91:
45:a9:41:59:34:54:2c:ba:93:68:da:d2:f5:05:91:
bb:b0:5a:14:66:cb:e4:b9:79:cb:32:b5:04:b1:52:
8a:47:9e:3a:1e:94:05:1a:9a:37:9d:49:5e:75:53:
57:b7:49:66:f4:5a:ac:ec:52:51:cd:1a:09:d5:f3:
a1:af:a1:85:92:42:96:36:dd:ba:63:d6:28:df:a8:
e8:a7:bd:28:48:77:38:fe:3c:75:9e:b0:94:60:af:
89:53:f8:d5:0b:18:53:ac:b9:ee:9b:7b:77:51:01:
99:0a:a5:33:4d:64:cb:17:14:89:79:c0:22:d6:25:
28:b1:14:e4:e6:95:0f:26:56:54:ff:5a:ea:b7:ac:
7a:72:5c:49:dc:a7:5d:31:cd:fe:c0:b2:5d:53:94:
b1:a7:7a:62:cc:52:cf:59:ee:6f:41:1e:43:de:d2:
49:8e:8c:72:cf:cb:a4:7e:e4:e7:bc:7f:24:0a:97:
14:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E2:2D:AE:67:3D:1D:E1:EB:29:6E:AA:D9:C9:E4:7C:BB:6E:CA:46
X509v3 Authority Key Identifier:
keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/-OItrmc9HeHrKW6q2cnkfLtuykY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.160.89.0/24
Signature Algorithm: sha256WithRSAEncryption
03:cc:b6:56:81:7e:88:56:f8:98:2b:98:ca:9f:6f:f6:ae:8e:
53:b0:97:7f:65:e3:1f:a1:b6:76:2a:be:ff:da:21:ae:63:63:
03:83:eb:f0:fb:d5:de:f2:72:8b:9b:01:dd:dc:61:d1:22:17:
bc:b0:b5:88:75:ab:4a:d6:48:57:7f:66:d2:7f:dc:17:7e:c3:
5f:23:b3:f3:83:b0:bd:93:7f:19:c8:39:34:e6:04:2c:b6:b3:
b0:cc:cd:64:06:6c:82:89:34:34:4e:88:88:27:44:c6:68:91:
60:f6:b5:82:7e:d7:42:5a:81:bb:13:d2:ec:bd:ba:0f:5c:69:
9f:dd:ad:ee:46:fe:8b:97:f1:bc:8f:30:c2:6e:a8:8f:06:80:
46:09:6d:f2:75:60:de:ba:7b:74:8a:c2:2a:12:04:e4:fc:a1:
a1:7f:50:15:44:0d:86:6a:22:c4:6d:49:b5:04:eb:6a:25:77:
d2:a1:86:dc:d0:e4:c2:ef:ec:8f:73:1e:0f:10:6d:34:e4:bf:
c9:02:7f:5b:60:a5:66:da:39:2c:7a:c3:bc:60:91:c6:0e:a7:
69:47:d7:46:e8:0f:f3:fd:f2:97:bd:0a:2a:07:33:9a:dd:0b:
68:f2:a9:43:f8:b8:6e:a4:5e:32:12:2c:a0:a6:31:99:62:69:
49:e8:d3:95
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUNE
MkZEQzM4NTIyQTc0QTQyMkRFN0JEMUMwMjZENTVFMDhEOUU5QTAeFw0yNjA0Mjcw
NjE3MzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY4RTIyREFFNjczRDFE
RTFFQjI5NkVBQUQ5QzlFNDdDQkI2RUNBNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPFmMhY/R+HZ+tYA9Te+E3l7B0JeFT7apMnjgizDWkLFp+YDgO
f3/PqOBZLmeqrNIqfX4G/DyfCbdzkTrW3BrpXZgvG1H+stbckUWpQVk0VCy6k2ja
0vUFkbuwWhRmy+S5ecsytQSxUopHnjoelAUamjedSV51U1e3SWb0WqzsUlHNGgnV
86GvoYWSQpY23bpj1ijfqOinvShIdzj+PHWesJRgr4lT+NULGFOsue6be3dRAZkK
pTNNZMsXFIl5wCLWJSixFOTmlQ8mVlT/Wuq3rHpyXEncp10xzf7Asl1TlLGnemLM
Us9Z7m9BHkPe0kmOjHLPy6R+5Oe8fyQKlxSHAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQU+OItrmc9HeHrKW6q2cnkfLtuykYwHwYDVR0jBBgwFoAU7NL9w4Uip0pCLee9
HAJtVeCNnpowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxL
RVJBLzdOTDl3NFVpcDBwQ0xlZTlIQUp0VmVDTm5wby5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvN05MOXc0VWlwMHBDTGVlOUhBSnRWZUNObnBvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxLRVJBLy1PSXRybWM5SGVI
cktXNnEyY25rZkx0dXlrWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADKoFkwDQYJKoZIhvcNAQELBQADggEBAAPMtlaBfohW+JgrmMqfb/aujlOw
l39l4x+htnYqvv/aIa5jYwOD6/D71d7ycoubAd3cYdEiF7ywtYh1q0rWSFd/ZtJ/
3Bd+w18js/ODsL2TfxnIOTTmBCy2s7DMzWQGbIKJNDROiIgnRMZokWD2tYJ+10Ja
gbsT0uy9ug9caZ/dre5G/ouX8byPMMJuqI8GgEYJbfJ1YN66e3SKwioSBOT8oaF/
UBVEDYZqIsRtSbUE62old9KhhtzQ5MLv7I9zHg8QbTTkv8kCf1tgpWbaOSx6w7xg
kcYOp2lH10boD/P98pe9CioHM5rdC2jyqUP4uG6kXjISLKCmMZliaUno05U=
-----END CERTIFICATE-----
Generated at Tue Jun 16 15:31:32 2026 by rpki-client