Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/bbOTtq9OQMji2TAvDIa0FSusOWA.roa
File: bbOTtq9OQMji2TAvDIa0FSusOWA.roa (raw, json)
Hash identifier: MIvLmCvaM5pJmhNJZF7oYOfrMhSEPTu0o5zHKW+NcDw=
Subject key identifier: 6D:B3:93:B6:AF:4E:40:C8:E2:D9:30:2F:0C:86:B4:15:2B:AC:39:60
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 1395
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/bbOTtq9OQMji2TAvDIa0FSusOWA.roa
Signing time: Thu 02 Apr 2026 03:05:36 +0000
ROA not before: Thu 02 Apr 2026 03:05:36 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9416
IP address blocks: 203.222.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5013 (0x1395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 2 03:05:36 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=6DB393B6AF4E40C8E2D9302F0C86B4152BAC3960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:4a:45:91:93:34:62:14:a6:aa:4a:28:b1:
19:14:fc:13:d1:55:81:4d:a9:17:40:88:71:5c:91:
54:d8:5d:ba:19:37:3e:a7:6a:76:3d:3a:80:7e:0c:
3b:8d:6b:06:59:76:40:be:5e:96:ec:6c:6f:01:fa:
78:db:3c:fe:52:36:44:fd:c1:37:91:c9:29:11:ba:
f7:2a:b9:b7:87:96:92:26:be:01:c8:95:d5:1b:76:
d4:f4:e4:84:cd:52:cd:08:83:c1:27:1d:b6:08:53:
4e:65:15:f5:e2:f3:6e:cc:4e:de:82:3b:49:8b:35:
ca:4a:ef:5f:18:c9:c0:87:de:c5:c6:7a:ed:c3:1f:
e0:56:ed:55:83:3f:84:58:d3:2a:99:d2:75:aa:a1:
1f:c0:76:fb:00:f8:bd:6d:52:45:65:99:ae:82:67:
1a:29:34:4e:a1:be:45:1e:39:fe:99:f2:0c:1f:46:
28:c2:99:71:b7:74:c6:74:7f:a5:2b:fc:b9:d6:1b:
a7:eb:aa:13:4b:04:ea:8a:54:25:d8:95:de:63:b6:
b5:29:b1:18:fc:d5:0d:00:23:72:fb:e6:62:7c:5f:
9b:36:77:62:96:03:bc:8a:6a:f7:09:4d:e8:05:e0:
e1:cb:6a:a4:7a:5e:1d:5f:48:e4:3b:b3:96:7f:55:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B3:93:B6:AF:4E:40:C8:E2:D9:30:2F:0C:86:B4:15:2B:AC:39:60
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/bbOTtq9OQMji2TAvDIa0FSusOWA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.0.0/19
Signature Algorithm: sha256WithRSAEncryption
86:15:c8:0f:16:48:ca:85:f2:eb:58:08:ba:ab:1b:9a:f3:f6:
29:ed:05:24:3d:e7:59:05:e0:c1:ee:c9:4a:3a:c0:3f:ca:98:
67:7c:70:c6:c3:66:35:17:3d:13:51:ae:05:4a:14:a6:81:12:
00:46:df:f8:76:84:df:4d:47:af:f2:af:63:cf:3b:93:5a:d6:
51:85:9a:bd:0b:1f:88:ae:1d:50:a8:ca:d1:17:58:d7:18:c6:
43:8a:50:70:b9:b9:c7:d5:ad:87:51:a4:b2:f4:8d:e8:87:54:
26:5d:7a:8f:21:83:45:6d:a4:b8:c8:af:9b:86:fb:08:1c:2e:
bc:4e:7e:1f:7f:c3:55:46:4b:ed:7f:9c:03:56:0c:16:3b:a7:
81:31:eb:35:a6:0c:e8:74:b7:06:7e:47:f4:66:39:77:ff:7f:
cc:54:3f:87:39:64:a3:3f:2c:3c:be:d6:51:bc:3c:7a:1a:b9:
c2:5e:54:47:5a:50:d4:1d:2a:19:88:a1:5d:40:4e:6b:f5:d3:
0e:4b:de:a6:d1:ed:1a:3d:b6:0d:81:d6:a6:e1:ee:9b:88:a5:
06:56:9d:76:d0:13:1d:e5:98:91:86:32:0e:ab:5d:ed:c4:e2:
7f:67:27:9c:2b:53:41:6d:9a:34:82:b2:bc:4e:2a:46:db:97:
11:45:9a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:45 2026 by rpki-client