Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/gKZ9rYhVRTGBE8igk-t0e2zy2c8.roa
File: gKZ9rYhVRTGBE8igk-t0e2zy2c8.roa (raw, json)
Hash identifier: KbAGC+m1Sq/GC+MOAl45LYGuODNz6TWFSyFo+xZzEC8=
Subject key identifier: 80:A6:7D:AD:88:55:45:31:81:13:C8:A0:93:EB:74:7B:6C:F2:D9:CF
Certificate issuer: /CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Certificate serial: 9B
Authority key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/gKZ9rYhVRTGBE8igk-t0e2zy2c8.roa
Signing time: Wed 28 Jan 2026 08:20:55 +0000
ROA not before: Wed 28 Jan 2026 08:20:55 +0000
ROA not after: Wed 30 Dec 2026 15:30:20 +0000
asID: 152612
IP address blocks: 2402:43e0:d::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Validity
Not Before: Jan 28 08:20:55 2026 GMT
Not After : Dec 30 15:30:20 2026 GMT
Subject: CN=80A67DAD885545318113C8A093EB747B6CF2D9CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:ae:b0:f8:c6:a4:00:05:d9:f4:2e:a0:4d:
f6:91:0d:f9:44:72:dd:3f:bd:46:0e:b5:cd:cc:4f:
8d:38:5f:f2:a4:1e:29:7c:ee:a1:33:dc:6a:40:58:
80:0b:9e:f0:7b:71:d0:59:1a:1b:06:e5:a0:8b:8f:
32:6c:b1:e4:96:1b:4c:a0:6b:73:d8:84:f1:db:3c:
c2:ef:74:a3:85:99:68:39:e3:63:c1:cf:f6:34:64:
b9:33:a9:0f:58:39:0c:bc:73:f5:38:07:43:d7:66:
81:ca:71:84:38:21:f1:b9:2d:b1:da:aa:08:73:ff:
31:20:6b:e9:97:7b:4f:12:a8:5d:fb:2d:70:66:1d:
28:17:bd:df:7d:68:ee:c0:14:2d:8a:83:84:ea:44:
dd:1d:12:e2:af:f8:7a:25:06:ac:69:ec:96:7b:ed:
b0:8c:5e:1e:63:df:8d:72:6f:14:8d:5f:99:1c:03:
fa:6d:18:d2:85:93:01:d6:31:f9:78:50:3e:5e:80:
b7:0e:d5:f1:2c:81:73:98:9a:aa:01:03:36:4d:b7:
e2:4d:19:6c:60:47:da:7a:a8:1e:68:96:9d:4c:a1:
bb:e9:a6:bb:5d:16:1a:4b:c6:ea:86:48:7f:8e:95:
5b:5c:c3:67:93:66:5b:70:6f:9e:f4:36:cb:7f:6c:
1d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A6:7D:AD:88:55:45:31:81:13:C8:A0:93:EB:74:7B:6C:F2:D9:CF
X509v3 Authority Key Identifier:
keyid:FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/gKZ9rYhVRTGBE8igk-t0e2zy2c8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:43e0:d::/48
Signature Algorithm: sha256WithRSAEncryption
24:a2:4e:45:42:e0:34:3e:46:b9:da:27:38:bd:5a:64:e9:e2:
2b:ff:3f:74:ae:f3:41:64:4d:60:66:bd:bb:3f:a2:c7:f8:46:
01:8e:66:49:3a:09:73:7b:f5:36:f8:1b:dc:dd:7e:2b:10:34:
d6:b3:06:10:56:56:ef:01:0a:cf:45:a5:b3:bc:e5:30:b9:5d:
7d:bd:33:72:fd:70:9e:d6:d7:02:00:c4:bc:34:d5:d4:e3:12:
8d:1e:ff:e7:de:56:34:6e:ae:79:90:02:42:6e:50:f9:2d:16:
17:dd:d3:c9:36:b2:5f:b3:af:26:80:05:ea:8b:3b:1f:c8:82:
71:cf:59:ba:84:f3:46:23:35:ec:64:f8:5b:bd:4a:44:42:63:
0b:0a:4b:4d:52:68:7b:76:a4:98:dd:02:32:a3:46:6f:d1:31:
fa:be:6b:96:a9:b0:2e:9c:88:dd:d9:18:b9:d2:bc:1a:cf:55:
2c:04:2b:53:39:ee:06:05:01:82:a8:36:b8:49:37:ed:54:15:
1b:85:75:ce:e3:43:07:9f:af:e5:d8:88:32:f4:8e:6a:90:c9:
13:eb:dc:d3:a7:56:1b:23:7b:2c:ea:00:b8:a0:76:eb:51:0f:
db:ed:33:d8:9b:8f:3c:22:7f:00:97:0c:6d:f3:c0:be:12:56:
82:ab:39:2d
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgICAJswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkM3
NTJDQTU5RUI4RUFFRjIzRDIyNURDNjdBQTA4NTIwMUYxRjc5QzAeFw0yNjAxMjgw
ODIwNTVaFw0yNjEyMzAxNTMwMjBaMDMxMTAvBgNVBAMTKDgwQTY3REFEODg1NTQ1
MzE4MTEzQzhBMDkzRUI3NDdCNkNGMkQ5Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxv66w+MakAAXZ9C6gTfaRDflEct0/vUYOtc3MT404X/KkHil8
7qEz3GpAWIALnvB7cdBZGhsG5aCLjzJsseSWG0yga3PYhPHbPMLvdKOFmWg542PB
z/Y0ZLkzqQ9YOQy8c/U4B0PXZoHKcYQ4IfG5LbHaqghz/zEga+mXe08SqF37LXBm
HSgXvd99aO7AFC2Kg4TqRN0dEuKv+HolBqxp7JZ77bCMXh5j341ybxSNX5kcA/pt
GNKFkwHWMfl4UD5egLcO1fEsgXOYmqoBAzZNt+JNGWxgR9p6qB5olp1Mobvpprtd
FhpLxuqGSH+OlVtcw2eTZltwb570Nst/bB3pAgMBAAGjggH1MIIB8TAdBgNVHQ4E
FgQUgKZ9rYhVRTGBE8igk+t0e2zy2c8wHwYDVR0jBBgwFoAU/HUspZ646u8j0iXc
Z6oIUgHx95wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQU9URVJO
RVQvX0hVc3BaNjQ2dThqMGlYY1o2b0lVZ0h4OTV3LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9fSFVzcFo2NDZ1OGowaVhjWjZvSVVnSHg5NXcuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BT1RFUk5FVC9nS1o5clloVlJUR0JF
OGlnay10MGUyenkyYzgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAJAJD4AANMA0GCSqGSIb3DQEBCwUAA4IBAQAkok5FQuA0Pka52ic4vVpk6eIr
/z90rvNBZE1gZr27P6LH+EYBjmZJOglze/U2+Bvc3X4rEDTWswYQVlbvAQrPRaWz
vOUwuV19vTNy/XCe1tcCAMS8NNXU4xKNHv/n3lY0bq55kAJCblD5LRYX3dPJNrJf
s68mgAXqizsfyIJxz1m6hPNGIzXsZPhbvUpEQmMLCktNUmh7dqSY3QIyo0Zv0TH6
vmuWqbAunIjd2Ri50rwaz1UsBCtTOe4GBQGCqDa4STftVBUbhXXO40MHn6/l2Igy
9I5qkMkT69zTp1YbI3ss6gC4oHbrUQ/b7TPYm488In8Alwxt88C+ElaCqzkt
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:11:05 2026 by rpki-client