Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/_OWHrChZjUufPWCz3WZXBcK4ZKg.roa
File: _OWHrChZjUufPWCz3WZXBcK4ZKg.roa (raw, json)
Hash identifier: xAZSryo4w+zuf8hV+KmyuHi9BWCNp9b+DtWsFUFtlbs=
Subject key identifier: FC:E5:87:AC:28:59:8D:4B:9F:3D:60:B3:DD:66:57:05:C2:B8:64:A8
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 1399
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/_OWHrChZjUufPWCz3WZXBcK4ZKg.roa
Signing time: Thu 02 Apr 2026 03:07:25 +0000
ROA not before: Thu 02 Apr 2026 03:07:25 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9416
IP address blocks: 111.67.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5017 (0x1399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 2 03:07:25 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=FCE587AC28598D4B9F3D60B3DD665705C2B864A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:3a:2d:5d:1a:5f:0c:eb:f8:57:53:51:1f:
26:47:28:d5:ba:de:17:c2:4a:56:98:a5:2a:bb:25:
d9:76:20:d0:85:1d:d3:c6:d0:f5:68:28:9d:1b:45:
19:99:2e:a2:0c:15:3e:bc:9d:52:33:72:e6:cc:a9:
d8:4e:d7:3a:d2:35:a5:e5:90:61:79:cc:28:52:87:
ad:6e:48:cb:b9:0e:9f:ea:8b:ed:48:50:68:03:78:
fd:70:7b:09:78:1b:82:91:9f:cc:36:0c:af:73:cf:
bc:a6:5a:03:4f:92:ec:04:26:50:6a:ed:99:ab:f3:
29:23:0b:c1:6f:a5:ec:bb:59:cc:89:37:7a:8e:99:
23:c6:6a:55:77:6c:21:75:1d:1e:77:80:e2:2e:3e:
5b:ff:ac:ea:87:df:eb:55:94:66:f2:78:d9:2d:2b:
39:9a:62:4c:5f:08:26:ac:d3:5b:22:2a:8b:28:1c:
1b:0a:02:28:5b:35:bc:12:52:e2:c3:b6:de:8f:ff:
7f:23:97:45:3c:5d:6c:d9:a5:46:ac:be:ec:1d:5a:
36:7f:ab:34:39:b2:86:9b:1e:fe:59:b6:df:61:12:
7a:94:23:72:6f:5b:6e:da:c4:2c:34:27:a1:ef:0a:
84:35:dd:95:50:3e:98:3d:87:e4:1e:0e:bf:40:87:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E5:87:AC:28:59:8D:4B:9F:3D:60:B3:DD:66:57:05:C2:B8:64:A8
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/_OWHrChZjUufPWCz3WZXBcK4ZKg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.67.48.0/20
Signature Algorithm: sha256WithRSAEncryption
61:c8:18:fb:a3:0f:5a:93:ca:82:84:9c:61:69:31:8a:6c:8a:
92:ff:f0:34:c5:29:a0:21:99:28:52:54:e3:8c:18:4d:d5:84:
b1:a8:f4:66:64:e4:2d:26:f0:5c:3a:07:cb:7d:f3:e1:5d:fd:
00:8c:09:ce:0c:59:85:72:34:96:e4:de:33:c0:dc:46:ee:01:
3c:01:93:12:e5:ac:8a:af:ef:a4:29:c7:d0:24:56:a7:6d:55:
e9:79:68:38:e4:2c:ef:ec:6d:4f:77:79:ac:31:06:27:7c:f3:
98:20:37:84:96:be:56:4c:c4:d9:9a:4a:5a:3c:0a:6f:e2:54:
9d:00:b4:df:9a:29:f2:a5:2f:e7:ed:bc:bd:cd:2f:1b:31:98:
79:30:b8:33:31:d7:f5:da:c1:12:e4:80:e7:73:82:10:96:6e:
fc:f1:5c:79:27:4f:c1:38:7e:83:f3:a4:d5:50:d2:b8:46:74:
57:6e:0c:21:a0:40:59:15:fd:d8:bb:64:f9:13:f6:6b:d8:b5:
02:aa:ec:ef:55:91:81:90:7b:03:0c:f4:5d:9e:43:36:13:0a:
47:ea:e9:cd:8e:ee:58:db:2b:b7:85:14:fe:1b:ba:26:8b:29:
44:07:ac:a4:09:f1:25:50:3c:5b:31:ed:08:13:81:0e:b7:a2:
e2:f6:bf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:26 2026 by rpki-client