Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZAT/QeUl2Q8_akZEDhU_4o3dv4fjZS8.roa
File: QeUl2Q8_akZEDhU_4o3dv4fjZS8.roa (raw, json)
Hash identifier: MGO1jOHQ/hPBCjhs7FCpFWjD0XTjHtuHF359B6qlD+M=
Subject key identifier: 41:E5:25:D9:0F:3F:6A:46:44:0E:15:3F:E2:8D:DD:BF:87:E3:65:2F
Certificate issuer: /CN=41D608336CCF0EDFEA4A24614F1D7234884E8991
Certificate serial: 02D1
Authority key identifier: 41:D6:08:33:6C:CF:0E:DF:EA:4A:24:61:4F:1D:72:34:88:4E:89:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/QdYIM2zPDt_qSiRhTx1yNIhOiZE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/QeUl2Q8_akZEDhU_4o3dv4fjZS8.roa
Signing time: Thu 30 Apr 2026 08:09:09 +0000
ROA not before: Thu 30 Apr 2026 08:09:09 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 201217
IP address blocks: 210.79.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721 (0x2d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41D608336CCF0EDFEA4A24614F1D7234884E8991
Validity
Not Before: Apr 30 08:09:09 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=41E525D90F3F6A46440E153FE28DDDBF87E3652F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:aa:3e:03:bb:48:c5:c9:0a:be:8d:aa:31:
ba:90:f1:f1:13:32:fe:9f:a9:6c:11:2d:81:d0:0a:
ba:1b:14:f0:c8:7d:24:a6:32:f3:4f:86:40:42:fe:
dd:e1:ee:1c:c5:3e:81:6a:3b:a0:e7:29:1c:07:d0:
de:bb:39:41:9e:b3:39:34:fb:37:36:0c:f5:cd:29:
d4:63:b2:37:65:74:5b:c0:52:ac:f7:6a:14:75:d7:
b0:a1:ea:74:20:9c:ae:8e:7c:58:e8:94:66:1f:cd:
3a:fe:76:3e:8b:ee:20:41:4a:1a:99:39:e0:dc:42:
12:58:4c:e1:c9:19:bb:07:ea:78:00:88:dd:e5:07:
8e:05:dc:f9:4a:4a:a7:fd:1d:74:09:b2:1a:8f:70:
d4:ce:48:db:b0:5f:e5:b6:d9:2f:7d:4d:9b:a2:00:
eb:11:b7:f7:04:17:36:d4:2e:05:e4:0d:aa:ef:7c:
b2:30:04:c6:46:e2:73:6d:22:ab:48:dc:f1:f6:2b:
59:32:28:39:ee:e1:c2:43:bd:4a:73:c8:d0:bc:77:
2b:d1:6e:be:88:4f:b1:97:ea:0d:f8:e7:9c:6a:f9:
19:04:e7:a1:a9:bc:55:5e:a4:40:a1:8e:a6:26:f6:
a6:fb:78:5e:8c:12:48:75:be:71:d5:91:59:d8:6e:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E5:25:D9:0F:3F:6A:46:44:0E:15:3F:E2:8D:DD:BF:87:E3:65:2F
X509v3 Authority Key Identifier:
keyid:41:D6:08:33:6C:CF:0E:DF:EA:4A:24:61:4F:1D:72:34:88:4E:89:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/QdYIM2zPDt_qSiRhTx1yNIhOiZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QdYIM2zPDt_qSiRhTx1yNIhOiZE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/QeUl2Q8_akZEDhU_4o3dv4fjZS8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.151.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:bb:e8:5e:66:85:9c:45:16:be:33:66:e7:03:43:25:4b:83:
82:99:de:ae:c4:46:ca:3d:d6:46:ed:98:61:0c:a2:ae:82:01:
06:4f:be:52:4f:6c:ae:06:d5:f1:cd:c2:29:1f:10:db:8e:51:
4c:68:86:c6:47:78:b3:db:96:4e:df:2e:cd:04:25:fe:09:06:
57:89:18:41:60:23:83:91:21:82:36:e3:a1:5a:4a:fa:aa:ec:
16:4a:e1:6f:e7:0f:fb:bc:91:e8:c0:7f:b9:84:5e:cf:b0:fe:
2c:66:66:ca:91:b9:44:c5:31:a9:96:f7:13:a2:5a:4c:04:f1:
2c:ae:9f:a5:67:a1:b5:59:2d:81:35:43:9a:7e:93:96:23:ab:
8d:f2:e7:09:24:e3:33:5b:d1:c7:25:d7:b7:3e:ea:b8:fd:15:
00:72:61:9f:71:e0:f6:23:97:7a:52:11:b4:35:7e:05:36:82:
fd:a9:c7:5c:1e:f8:6d:83:75:04:31:d1:0e:10:7f:14:f2:95:
2b:3a:52:25:57:2f:e8:ad:10:c5:ce:ea:d7:1a:52:24:85:fa:
f7:0e:18:c4:fd:c0:e6:74:8e:df:48:38:40:65:fb:1a:cd:b3:
aa:73:e9:04:b2:46:73:e0:68:cc:ba:b7:14:e9:b1:f4:83:17:
78:da:3c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 15:20:28 2026 by rpki-client