Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLOUDBASE/aMR2DRj0Z54X3ubzFeDHeHI1Vyg.roa
File: aMR2DRj0Z54X3ubzFeDHeHI1Vyg.roa (raw, json)
Hash identifier: lFq4fs3TGjBKbtdnmDZmt74WmFZVzfzyQSiARAA3R8E=
Subject key identifier: 68:C4:76:0D:18:F4:67:9E:17:DE:E6:F3:15:E0:C7:78:72:35:57:28
Certificate issuer: /CN=49FD819BDAC01662B73EAC9005088CD6A3B88762
Certificate serial: 04FC
Authority key identifier: 49:FD:81:9B:DA:C0:16:62:B7:3E:AC:90:05:08:8C:D6:A3:B8:87:62
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Sf2Bm9rAFmK3PqyQBQiM1qO4h2I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDBASE/aMR2DRj0Z54X3ubzFeDHeHI1Vyg.roa
Signing time: Fri 13 Feb 2026 01:53:45 +0000
ROA not before: Fri 13 Feb 2026 01:53:45 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 213430
IP address blocks: 165.101.28.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1276 (0x4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49FD819BDAC01662B73EAC9005088CD6A3B88762
Validity
Not Before: Feb 13 01:53:45 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=68C4760D18F4679E17DEE6F315E0C77872355728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:67:ea:15:61:d4:04:de:8f:b1:60:9b:81:e6:
1d:65:7e:7f:bc:4c:cf:10:44:95:3b:c7:c3:1c:20:
42:a4:22:59:ed:3f:54:e6:61:01:a4:2d:77:6a:2a:
d6:37:ec:d5:de:92:7f:ae:64:53:71:e6:ca:0e:eb:
82:e8:98:ed:2a:03:19:b9:38:c2:8a:2a:9a:f8:e6:
3b:41:21:62:da:d3:cf:dd:40:ae:ef:04:32:b3:ad:
79:3a:56:a1:22:2d:c1:de:15:29:3c:e4:de:a3:2f:
10:c5:22:0d:ca:9a:ae:8e:54:30:f9:a3:7f:c8:78:
c1:f9:35:35:04:26:95:34:c0:d5:e8:1a:91:eb:2a:
72:c3:ed:35:77:47:d5:54:67:64:9a:52:1e:ef:42:
83:9b:86:ab:82:1c:98:bc:25:18:1c:0d:2c:f7:3f:
87:4d:44:21:b9:5a:32:db:cf:3d:62:be:ba:a6:05:
ab:e8:07:0d:f7:26:8d:4a:86:94:1b:9e:01:c8:b6:
01:35:8b:b5:90:8e:e1:66:f1:ba:9f:36:0a:84:9f:
8e:ed:32:fa:36:1d:2e:8e:85:8f:b2:d1:1c:b4:e9:
0d:f9:f5:a6:3f:46:b4:85:24:4b:1e:f4:01:a5:d5:
44:89:ae:22:7d:1b:39:2b:6d:e8:38:29:f8:2c:88:
3e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C4:76:0D:18:F4:67:9E:17:DE:E6:F3:15:E0:C7:78:72:35:57:28
X509v3 Authority Key Identifier:
keyid:49:FD:81:9B:DA:C0:16:62:B7:3E:AC:90:05:08:8C:D6:A3:B8:87:62
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDBASE/Sf2Bm9rAFmK3PqyQBQiM1qO4h2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Sf2Bm9rAFmK3PqyQBQiM1qO4h2I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDBASE/aMR2DRj0Z54X3ubzFeDHeHI1Vyg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.28.0/23
Signature Algorithm: sha256WithRSAEncryption
93:97:30:07:b4:09:e6:22:34:57:c0:0b:a4:dd:15:61:3e:bb:
7d:a6:3c:a4:47:bc:68:47:23:2e:4d:6a:13:8b:3a:8b:84:18:
ec:88:01:4e:9a:51:df:d2:37:c9:d6:81:87:7c:59:f4:4e:91:
62:2f:d6:5f:ec:52:99:54:ca:ba:b5:86:bc:2e:1d:de:6e:79:
fb:ca:13:c5:35:c2:ec:21:e3:fa:11:f5:45:da:da:25:b9:dc:
cf:74:24:68:e7:5b:e9:66:2f:49:04:d1:6b:cd:02:26:f2:57:
ff:9c:29:e9:ad:25:f8:79:1a:ac:a2:09:32:7f:99:ff:5b:9b:
39:9e:ca:d8:44:8f:c1:13:ed:62:b6:4f:6a:8d:b7:ef:e5:0d:
08:0f:c9:ef:e9:d9:a4:27:fd:27:9c:b8:22:96:62:9b:67:66:
c3:30:d5:ef:cd:66:33:72:96:69:c9:9f:f7:fd:e7:19:3c:dd:
98:67:af:dc:60:b1:e9:36:69:b6:f0:65:f7:c3:97:aa:ad:d9:
c6:25:80:ca:04:6e:e8:eb:1f:55:d2:a9:50:b2:63:6c:d5:34:
3f:5e:e1:b7:de:ca:07:06:3f:c8:94:17:41:f4:74:e0:bd:06:
f4:c0:e4:bb:35:18:98:c2:37:83:53:af:e6:a2:b6:35:5e:19:
ee:86:26:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:31 2026 by rpki-client