Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/uCaOEGeG0U-GzRw-p2gg40LvakI.roa
File:                     uCaOEGeG0U-GzRw-p2gg40LvakI.roa (raw, json)
Hash identifier:          4GCiogB8tNP9YtMnzzK3o76nmmr5vjomMHMVfP+5f/E=
Subject key identifier:   B8:26:8E:10:67:86:D1:4F:86:CD:1C:3E:A7:68:20:E3:42:EF:6A:42
Certificate issuer:       /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Certificate serial:       0347
Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/uCaOEGeG0U-GzRw-p2gg40LvakI.roa
Signing time:             Mon 27 Apr 2026 06:07:21 +0000
ROA not before:           Mon 27 Apr 2026 06:07:21 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     215595
IP address blocks:        202.160.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 839 (0x347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
        Validity
            Not Before: Apr 27 06:07:21 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B8268E106786D14F86CD1C3EA76820E342EF6A42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5c:67:15:4b:31:4e:3f:a6:07:c8:10:46:5d:
                    7c:d5:4a:5a:f8:56:2c:b8:15:55:12:a4:b3:dd:fc:
                    d3:76:e9:c6:15:52:72:86:c7:98:f8:56:26:70:cf:
                    b1:1a:f5:0b:64:75:dc:09:66:83:0e:00:46:e2:fd:
                    a6:3a:1a:94:5f:e9:0b:2c:48:ca:22:2c:bf:e2:aa:
                    60:f1:62:cb:81:ee:2f:1c:dc:65:d6:4e:67:e2:20:
                    d6:70:1f:ab:76:d9:10:5b:5f:da:fb:04:b6:02:bd:
                    f4:e2:47:fd:86:6b:ae:a7:25:7a:66:7e:cf:27:9b:
                    39:3f:9d:a0:6d:67:e5:32:3f:ef:1b:b0:0b:cd:a2:
                    bd:2c:f1:aa:79:63:20:45:64:8d:35:83:8e:df:8b:
                    5b:ab:21:4f:25:9d:af:3a:90:67:30:10:11:cd:d7:
                    55:4a:3a:81:2f:98:0f:00:c0:fd:13:f6:6f:7c:3d:
                    f9:e6:1c:dd:95:39:86:66:c4:3e:46:dc:d4:2e:a3:
                    72:69:08:d2:ce:c9:d3:79:34:b3:7e:2f:c8:52:53:
                    68:12:13:36:61:e4:e6:08:0a:08:36:ee:82:35:40:
                    53:b5:77:60:32:3b:7f:ce:ae:a6:c1:cd:bf:c8:48:
                    76:86:94:3a:b5:c1:d4:21:98:89:f7:b2:59:d8:39:
                    d0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:26:8E:10:67:86:D1:4F:86:CD:1C:3E:A7:68:20:E3:42:EF:6A:42
            X509v3 Authority Key Identifier:
                keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/uCaOEGeG0U-GzRw-p2gg40LvakI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:85:a6:22:ee:88:6c:fd:8c:e3:3e:af:98:87:97:f5:67:78:
         3e:ec:57:d0:1f:38:5a:a6:92:6c:ff:50:c7:55:7b:85:d1:f7:
         2e:c6:8a:de:35:c9:2b:db:b1:50:e2:c7:fc:ab:b7:93:a6:28:
         a8:ca:28:ef:4f:5d:66:75:0e:e8:7d:c2:47:1d:b6:23:d1:d5:
         7f:9a:29:5a:79:42:38:33:2a:d2:7a:56:01:07:eb:9d:4e:fc:
         db:82:fc:1f:5c:fa:f8:60:4a:0d:76:46:28:ab:e5:e0:0f:19:
         b1:5a:71:63:c9:29:96:71:8f:b4:22:6b:cc:40:95:3b:0b:63:
         50:11:42:c7:9a:48:14:7f:45:d2:55:17:91:6f:57:e2:3d:65:
         9a:5b:96:9e:01:39:df:4d:2e:76:99:59:83:79:52:59:c4:69:
         f3:52:a4:2a:3a:19:7e:a5:4e:df:e0:7c:cf:c8:69:96:70:64:
         15:b2:05:cb:45:cc:27:9f:60:12:06:1d:3c:7f:f7:3f:c2:32:
         02:45:ac:ad:db:58:35:bd:6b:ad:57:f1:eb:76:05:bf:f3:34:
         87:2a:8e:9d:ce:8c:de:ca:c9:80:91:21:11:d5:8f:08:5e:28:
         dd:01:5f:3d:e9:0e:1e:6e:c1:ff:22:fe:b0:80:91:00:17:9d:
         7c:8f:57:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 15:31:32 2026 by rpki-client