Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/2fjaiQ_7UlKXzThMw6x_kPpwoyo.roa
File: 2fjaiQ_7UlKXzThMw6x_kPpwoyo.roa (raw, json)
Hash identifier: 94g+VVUodHaqauOEmjWSS33F/RJExqWzCcxa0Y5fVho=
Subject key identifier: D9:F8:DA:89:0F:FB:52:52:97:CD:38:4C:C3:AC:7F:90:FA:70:A3:2A
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 193F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2fjaiQ_7UlKXzThMw6x_kPpwoyo.roa
Signing time: Fri 22 Aug 2025 09:02:54 +0000
ROA not before: Fri 22 Aug 2025 09:02:54 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 198949
IP address blocks: 210.242.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6463 (0x193f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 22 09:02:54 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=D9F8DA890FFB525297CD384CC3AC7F90FA70A32A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:3f:62:74:9b:0f:b8:fb:59:e3:81:f0:b5:
c3:cc:a0:b0:ca:f6:d7:f2:12:f1:55:a4:ae:4b:af:
56:77:4d:f1:0a:70:9a:66:dd:16:c0:9c:4f:f9:57:
64:87:b6:5c:3d:60:99:70:72:cd:fd:f5:71:46:d9:
7d:79:a2:ac:2c:b1:ab:89:ea:9a:af:64:a2:35:3d:
04:b0:18:c7:d3:2c:62:4a:b4:f2:93:ad:07:7e:94:
96:76:9f:15:05:fc:1b:bc:f8:02:19:33:07:9c:e0:
74:a6:b9:06:e5:97:f5:54:29:3d:8a:98:a1:9d:ab:
9e:ec:13:22:4c:ca:a8:b2:cf:0e:9e:6f:07:bb:ca:
e8:62:95:0b:c4:6a:ee:f0:a6:51:02:29:a7:f5:4a:
ee:60:26:66:22:a9:5b:88:74:90:de:b8:72:6b:16:
23:7b:6a:5e:66:ad:c0:83:61:d0:9a:f6:38:cb:0e:
97:e8:26:b2:c6:ea:65:77:b6:fe:4a:ef:e3:fd:ad:
01:2c:b7:3a:af:ab:f5:c2:50:06:13:25:b9:0c:33:
36:36:73:04:3d:15:e5:d9:2e:c0:b9:09:ef:28:39:
a7:dc:1d:e9:04:63:d7:91:bc:8b:61:70:e6:ae:7a:
3d:52:16:31:d5:16:57:42:18:47:cb:aa:e4:53:94:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F8:DA:89:0F:FB:52:52:97:CD:38:4C:C3:AC:7F:90:FA:70:A3:2A
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2fjaiQ_7UlKXzThMw6x_kPpwoyo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.83.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1d:b5:e0:f7:77:f4:58:48:17:c2:a1:6e:96:da:ec:70:8c:
fa:9a:fe:cd:c3:ab:5e:3c:77:7e:f8:c4:54:15:a9:d5:56:79:
3b:41:83:92:04:d9:99:14:e1:f1:b1:43:49:28:cb:68:24:81:
23:f2:03:42:f0:e4:8b:52:cd:51:23:ee:53:9a:45:ce:c9:57:
05:ce:50:cd:6f:9f:bc:24:99:07:de:6a:97:e4:21:ad:04:1e:
2d:0c:29:73:60:a9:58:fd:26:11:bb:4a:a5:b2:50:ac:2d:81:
b9:4b:99:4a:53:75:c2:c6:f8:11:fe:68:26:a9:61:4a:cb:bf:
5a:90:df:23:d4:ec:65:0c:de:9b:4e:43:af:1f:ed:15:80:ad:
26:38:a9:43:10:b0:93:68:99:03:49:76:fa:21:5b:77:b8:61:
e5:67:fc:7e:3b:6b:2f:e0:a6:22:0c:e1:99:0f:ba:ca:95:83:
59:f8:35:93:f0:70:b5:0c:1b:fe:a7:5c:74:5d:57:2e:7d:c5:
10:7f:69:06:35:c3:91:5c:df:dd:9e:42:37:ac:fd:44:6b:13:
da:ec:c7:e6:69:b3:65:f4:77:66:58:71:07:16:d5:6a:52:5e:
4e:f9:32:b8:a7:58:a0:ec:b4:af:cb:a8:eb:4c:69:42:aa:19:
78:1c:49:35
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICGT8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw
OTAyNTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ5RjhEQTg5MEZGQjUy
NTI5N0NEMzg0Q0MzQUM3RjkwRkE3MEEzMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBxj9idJsPuPtZ44HwtcPMoLDK9tfyEvFVpK5Lr1Z3TfEKcJpm
3RbAnE/5V2SHtlw9YJlwcs399XFG2X15oqwssauJ6pqvZKI1PQSwGMfTLGJKtPKT
rQd+lJZ2nxUF/Bu8+AIZMwec4HSmuQbll/VUKT2KmKGdq57sEyJMyqiyzw6ebwe7
yuhilQvEau7wplECKaf1Su5gJmYiqVuIdJDeuHJrFiN7al5mrcCDYdCa9jjLDpfo
JrLG6mV3tv5K7+P9rQEstzqvq/XCUAYTJbkMMzY2cwQ9FeXZLsC5Ce8oOafcHekE
Y9eRvIthcOauej1SFjHVFldCGEfLquRTlEIHAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU2fjaiQ/7UlKXzThMw6x/kPpwoyowHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8yZmphaVFfN1VsS1h6VGhNdzZ4
X2tQcHdveW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0vJT
MA0GCSqGSIb3DQEBCwUAA4IBAQA/HbXg93f0WEgXwqFultrscIz6mv7Nw6tePHd+
+MRUFanVVnk7QYOSBNmZFOHxsUNJKMtoJIEj8gNC8OSLUs1RI+5TmkXOyVcFzlDN
b5+8JJkH3mqX5CGtBB4tDClzYKlY/SYRu0qlslCsLYG5S5lKU3XCxvgR/mgmqWFK
y79akN8j1OxlDN6bTkOvH+0VgK0mOKlDELCTaJkDSXb6IVt3uGHlZ/x+O2sv4KYi
DOGZD7rKlYNZ+DWT8HC1DBv+p1x0XVcufcUQf2kGNcORXN/dnkI3rP1EaxPa7Mfm
abNl9HdmWHEHFtVqUl5O+TK4p1ig7LSvy6jrTGlCqhl4HEk1
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:30:54 2025 by rpki-client