Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/LHZdnjmFLvcoy5UEaPDsnLgfxXM.roa
File: LHZdnjmFLvcoy5UEaPDsnLgfxXM.roa (raw, json)
Hash identifier: avEe5Y+K/gn+GEKfRW2YxLs/v6KS/DozZ3SzGQEe1r8=
Subject key identifier: 2C:76:5D:9E:39:85:2E:F7:28:CB:95:04:68:F0:EC:9C:B8:1F:C5:73
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 1397
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/LHZdnjmFLvcoy5UEaPDsnLgfxXM.roa
Signing time: Thu 02 Apr 2026 03:06:54 +0000
ROA not before: Thu 02 Apr 2026 03:06:54 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9416
IP address blocks: 211.79.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5015 (0x1397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 2 03:06:54 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=2C765D9E39852EF728CB950468F0EC9CB81FC573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:cc:c6:40:56:df:f5:d3:b3:77:dd:1d:bd:
13:01:c4:f2:bd:31:07:b4:8f:95:93:40:b0:3e:99:
b1:3c:85:1b:6f:c0:1a:84:2a:99:b1:7e:91:6f:bb:
9c:71:2f:d7:22:4c:5d:c9:50:23:03:d8:68:a4:2e:
c0:77:08:d6:52:0d:83:a4:3b:28:3d:63:78:53:ce:
33:ad:0a:40:c2:b8:3a:9f:b8:d5:db:ce:fc:48:02:
24:31:0f:17:a3:c4:93:31:bd:28:c0:02:f3:01:49:
2b:72:40:9e:df:20:11:ad:3f:ce:f6:1c:1a:83:ba:
cf:07:28:4f:cc:56:b9:df:7d:4b:66:e5:2d:57:89:
d4:09:79:34:2f:50:9f:56:fb:8e:49:eb:91:bd:6e:
3d:fc:6d:ae:d5:b4:2f:4b:40:e2:ae:ff:77:a8:09:
bb:a1:ff:17:46:a3:0e:27:88:d6:b7:59:6b:66:f0:
38:45:5d:08:fd:15:d1:1b:c4:5e:1a:61:7a:bc:4b:
b3:8b:53:2a:aa:3b:a4:55:b7:9f:08:a8:a7:ac:75:
94:12:1c:ed:18:1b:93:11:8e:28:b1:06:01:af:fe:
cb:1b:b6:b9:b5:97:1b:46:7e:e8:69:74:42:00:34:
66:45:94:e2:55:92:29:4d:95:f0:8e:4e:27:10:5c:
49:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:76:5D:9E:39:85:2E:F7:28:CB:95:04:68:F0:EC:9C:B8:1F:C5:73
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/LHZdnjmFLvcoy5UEaPDsnLgfxXM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.79.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:66:5e:03:26:c6:41:e6:2f:fd:ca:ba:2b:17:66:b4:b2:48:
05:18:f7:c0:d2:31:79:1d:30:f2:27:bb:07:d8:7f:85:e0:36:
0e:1e:bb:a6:9b:10:4e:67:00:a0:a0:4f:f9:96:ab:50:92:fb:
58:75:72:a6:90:0f:fc:3f:57:80:5c:ee:9f:b8:30:fc:18:e4:
8c:54:f3:2c:67:6f:47:ed:ec:fa:9a:86:73:3a:2d:55:2c:bd:
bc:7a:45:c7:b7:f5:22:d2:b9:f4:79:a0:ff:de:45:6a:54:84:
46:4b:ad:42:45:97:bf:a8:89:c5:e7:c6:aa:16:e0:aa:2b:88:
71:0c:74:ee:31:43:32:d0:a2:ef:ce:69:11:ca:ba:57:be:3d:
62:83:b9:6f:12:95:e4:6d:11:0a:e3:ec:dd:5e:2c:39:01:bb:
66:af:ab:87:0e:47:13:21:94:3a:75:6b:bb:86:0f:be:1e:37:
c6:2b:76:fb:93:fb:89:d8:05:29:fb:45:61:c6:33:98:aa:31:
3e:c1:27:44:ff:48:1b:50:d3:51:53:d5:80:73:bd:1b:d0:b4:
da:d2:94:a6:da:7f:8f:17:94:cb:f3:96:ad:03:d0:b6:9f:cf:
83:47:eb:a8:73:71:1e:4f:7b:30:ae:d7:c5:21:14:8d:ab:c2:
13:0f:26:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:48 2026 by rpki-client