Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/_0a9FVJc9a1J29w7ib7fgGQHsdQ.roa
File: _0a9FVJc9a1J29w7ib7fgGQHsdQ.roa (raw, json)
Hash identifier: cznv+qH1z4uXLeZDC+cpb9R9U59xIMu34CTvJU8YfGk=
Subject key identifier: FF:46:BD:15:52:5C:F5:AD:49:DB:DC:3B:89:BE:DF:80:64:07:B1:D4
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 138F
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/_0a9FVJc9a1J29w7ib7fgGQHsdQ.roa
Signing time: Thu 02 Apr 2026 02:58:21 +0000
ROA not before: Thu 02 Apr 2026 02:58:21 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9416
IP address blocks: 121.254.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5007 (0x138f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 2 02:58:21 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=FF46BD15525CF5AD49DBDC3B89BEDF806407B1D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:27:c1:c1:69:33:a8:77:70:be:ef:12:bd:
9c:c2:a8:b0:be:1c:11:38:02:9e:6b:15:a4:92:b4:
0a:c0:2a:b0:90:f1:10:68:c9:f7:8d:00:1b:99:ed:
60:e4:85:47:98:e2:a6:c1:26:12:91:6a:e2:00:67:
ca:f5:69:0d:ac:7f:aa:0a:35:85:0b:bb:eb:c3:b3:
1a:47:1b:ed:b6:6d:56:22:e1:c9:2a:ad:14:a1:5b:
4f:17:d6:99:9d:92:e1:b9:12:2f:00:10:af:82:9e:
c7:f4:be:4e:23:98:74:da:92:ae:2f:91:d6:e9:a7:
59:c4:51:32:29:27:63:09:78:09:f0:a3:8d:86:95:
10:d2:e7:b4:d6:30:cd:19:75:66:bb:7f:2c:0c:09:
a9:50:e9:91:d1:b9:36:74:72:c8:f4:b9:90:e8:90:
e5:ef:f2:3d:a9:36:06:f0:ca:69:96:76:e2:51:0c:
c6:e0:27:f9:20:86:71:77:f0:da:d8:c7:d2:88:17:
e6:f8:1f:d5:3b:6b:64:3f:27:67:38:cc:2b:05:90:
d4:88:d0:0c:29:db:60:64:42:3f:f6:af:22:60:0c:
20:d8:a9:ed:73:0c:0e:bf:b6:fa:c4:5d:e0:29:bd:
33:08:9f:92:55:83:c7:22:fc:fa:51:fb:92:00:7a:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:46:BD:15:52:5C:F5:AD:49:DB:DC:3B:89:BE:DF:80:64:07:B1:D4
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/_0a9FVJc9a1J29w7ib7fgGQHsdQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.64.0/18
Signature Algorithm: sha256WithRSAEncryption
47:1e:24:f3:26:2d:01:bc:3f:7e:83:a5:f6:51:ef:0c:c8:f6:
62:52:19:4f:38:1f:ed:ab:4c:d5:5b:0d:b6:9d:32:38:09:00:
8b:05:59:e8:6a:ef:6b:d5:4c:d2:0e:31:9a:17:4f:84:8d:bd:
46:17:8f:0a:b5:2d:50:5c:e5:a4:f1:db:b4:b1:46:cc:a2:c5:
2d:30:47:69:0f:b3:f3:a0:f7:56:eb:3c:5a:52:73:66:3a:0f:
2b:2d:23:31:00:1e:d1:3f:c4:e0:ef:e1:4b:ee:91:7e:e4:ac:
7b:9d:e3:cc:fe:94:b5:d1:8c:ca:69:fb:dc:a3:0c:cd:2e:fa:
05:ed:50:80:9c:17:09:5d:a4:7d:7c:8f:02:58:54:27:90:fc:
18:61:be:3c:cf:21:e9:78:35:ac:ea:58:05:24:bb:56:ef:a4:
52:76:61:34:bb:59:18:52:86:ec:3d:cf:83:7d:de:98:1c:d8:
9c:10:2e:c2:9f:ac:8f:6b:ad:02:2e:72:6b:c5:21:5f:59:46:
f0:02:fd:38:8b:02:af:4f:27:60:b5:b7:b3:f5:32:27:da:d4:
29:f1:5d:10:fc:a4:23:c4:9b:f8:1a:27:88:88:91:7a:f6:47:
59:84:08:6b:95:0e:e6:df:b9:7e:92:10:d2:07:81:22:67:8f:
5f:49:5a:82
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICE48wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNjA0MDIw
MjU4MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZGNDZCRDE1NTI1Q0Y1
QUQ0OURCREMzQjg5QkVERjgwNjQwN0IxRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC31ifBwWkzqHdwvu8SvZzCqLC+HBE4Ap5rFaSStArAKrCQ8RBo
yfeNABuZ7WDkhUeY4qbBJhKRauIAZ8r1aQ2sf6oKNYULu+vDsxpHG+22bVYi4ckq
rRShW08X1pmdkuG5Ei8AEK+Cnsf0vk4jmHTakq4vkdbpp1nEUTIpJ2MJeAnwo42G
lRDS57TWMM0ZdWa7fywMCalQ6ZHRuTZ0csj0uZDokOXv8j2pNgbwymmWduJRDMbg
J/kghnF38NrYx9KIF+b4H9U7a2Q/J2c4zCsFkNSI0Awp22BkQj/2ryJgDCDYqe1z
DA6/tvrEXeApvTMIn5JVg8ci/PpR+5IAepOrAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU/0a9FVJc9a1J29w7ib7fgGQHsdQwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvXzBhOUZWSmM5YTFKMjl3N2liN2Zn
R1FIc2RRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnn+QDAN
BgkqhkiG9w0BAQsFAAOCAQEARx4k8yYtAbw/foOl9lHvDMj2YlIZTzgf7atM1VsN
tp0yOAkAiwVZ6Grva9VM0g4xmhdPhI29RhePCrUtUFzlpPHbtLFGzKLFLTBHaQ+z
86D3Vus8WlJzZjoPKy0jMQAe0T/E4O/hS+6RfuSse53jzP6UtdGMymn73KMMzS76
Be1QgJwXCV2kfXyPAlhUJ5D8GGG+PM8h6Xg1rOpYBSS7Vu+kUnZhNLtZGFKG7D3P
g33emBzYnBAuwp+sj2utAi5ya8UhX1lG8AL9OIsCr08nYLW3s/UyJ9rUKfFdEPyk
I8Sb+BoniIiRevZHWYQIa5UO5t+5fpIQ0geBImePX0lagg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:25 2026 by rpki-client