Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/MeSnDkveUHki7x33-BPejYOo0h0.roa
File: MeSnDkveUHki7x33-BPejYOo0h0.roa (raw, json)
Hash identifier: xVWReYWzQ3Def41EjS/9OU+AR3j8MKb9o9tnGr6xTWs=
Subject key identifier: 31:E4:A7:0E:4B:DE:50:79:22:EF:1D:F7:F8:13:DE:8D:83:A8:D2:1D
Certificate issuer: /CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Certificate serial: 8D
Authority key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/MeSnDkveUHki7x33-BPejYOo0h0.roa
Signing time: Wed 28 Jan 2026 08:04:40 +0000
ROA not before: Wed 28 Jan 2026 08:04:40 +0000
ROA not after: Wed 30 Dec 2026 15:30:20 +0000
asID: 152612
IP address blocks: 2402:43e0:7::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Validity
Not Before: Jan 28 08:04:40 2026 GMT
Not After : Dec 30 15:30:20 2026 GMT
Subject: CN=31E4A70E4BDE507922EF1DF7F813DE8D83A8D21D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:97:e9:b3:2d:50:a4:f4:5c:81:a4:37:e0:
c3:2e:ed:0d:00:a2:39:50:30:fb:95:c0:8c:a1:99:
b1:46:69:0b:1a:27:38:cb:24:7e:d0:57:71:f1:79:
5e:ba:57:d8:3c:14:dd:9a:6c:a3:73:d2:6f:b7:e3:
03:96:07:4e:c9:a2:18:82:3e:05:70:90:30:93:79:
97:d3:67:82:c5:31:d8:b9:77:46:86:6e:7a:1c:ad:
25:78:6a:24:6b:8c:91:d9:27:24:0b:6f:ef:93:73:
e3:9f:8d:60:3e:b0:90:a1:72:91:39:99:3b:86:9c:
28:ba:08:5d:02:e2:42:df:ab:a7:48:d6:38:6d:7f:
ca:28:0b:f0:f1:17:b7:c4:8c:12:18:58:7d:9c:1f:
bf:a6:30:66:d3:a8:f2:80:e5:32:31:9e:a5:43:af:
2d:24:13:fa:05:1c:7a:4b:98:69:39:c4:89:fd:76:
36:fe:1a:e3:80:49:e7:2d:30:4a:bb:24:4c:da:6e:
d9:fe:21:87:4d:d2:53:19:8e:42:34:17:4f:8e:8d:
3a:b5:a7:03:37:0f:98:61:01:5f:c6:e8:08:c6:25:
21:cf:78:c1:61:77:e3:f4:b5:15:2e:d7:9f:78:ea:
85:d2:70:3b:ab:1c:2f:e4:d5:c3:ef:55:cf:04:ca:
6d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E4:A7:0E:4B:DE:50:79:22:EF:1D:F7:F8:13:DE:8D:83:A8:D2:1D
X509v3 Authority Key Identifier:
keyid:FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/MeSnDkveUHki7x33-BPejYOo0h0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:43e0:7::/48
Signature Algorithm: sha256WithRSAEncryption
6c:c1:34:a4:61:a1:05:39:bd:e3:7b:90:f4:30:48:6d:0d:a6:
1b:99:bd:8d:a5:4a:14:b1:fb:3a:01:55:1d:c9:7b:a2:bb:1f:
c1:71:a3:e7:d7:8a:d9:46:77:5f:4a:26:7a:92:be:f8:b8:ca:
4a:e5:6a:69:af:c8:77:ac:d5:6a:dd:c8:e1:11:05:10:db:e9:
79:3b:e3:88:a4:ea:fe:fe:0c:d6:b4:ff:e7:13:3a:18:0d:b0:
2c:7b:df:84:e5:6d:f6:5c:23:74:ea:4d:9e:d1:5e:e5:f4:d4:
41:40:9f:e5:55:74:8e:a3:fa:7a:9a:e3:46:80:27:58:b1:74:
39:83:10:f8:6a:fd:a9:ef:99:c2:ae:3c:74:ec:e0:e6:ea:19:
b4:02:42:9d:43:ea:b3:eb:27:d7:cc:17:97:dd:31:85:a0:7c:
ad:b1:8e:76:aa:13:59:14:88:33:e0:87:c0:1e:ed:95:fd:13:
4e:de:b8:98:3a:ea:5c:a0:53:86:e3:6f:82:b8:3a:53:ae:9b:
d6:93:f1:bc:77:14:b8:10:ec:37:47:f0:6c:7a:3d:fd:26:fc:
ec:91:09:3e:05:7a:09:29:f3:95:89:f4:c9:d7:a6:44:fb:2d:
ba:1b:05:77:38:21:a5:4d:4c:0c:62:3a:c6:93:3d:c2:f7:d9:
91:cc:96:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:09:24 2026 by rpki-client