Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/_i6rrQUjHS9Px-yYNJJc6f3WLOU.roa
File: _i6rrQUjHS9Px-yYNJJc6f3WLOU.roa (raw, json)
Hash identifier: TZYFhaSsIhZfMWXgCLRnXKkaeygdodpBzwCSw6VnGRM=
Subject key identifier: FE:2E:AB:AD:05:23:1D:2F:4F:C7:EC:98:34:92:5C:E9:FD:D6:2C:E5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 18F6
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_i6rrQUjHS9Px-yYNJJc6f3WLOU.roa
Signing time: Fri 22 Aug 2025 09:02:39 +0000
ROA not before: Fri 22 Aug 2025 09:02:39 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 17714
IP address blocks: 114.30.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6390 (0x18f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 22 09:02:39 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=FE2EABAD05231D2F4FC7EC9834925CE9FDD62CE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:a1:7d:ae:fc:82:b4:7e:e7:a6:b8:e7:0d:
26:89:f2:71:b3:57:ea:7c:a4:9f:6e:56:92:6a:0a:
1b:08:39:ae:5c:18:5e:48:b8:a5:0e:51:03:c7:7d:
6e:82:99:1b:f8:b2:a6:b5:7a:29:52:e6:9d:8e:fc:
a8:82:90:45:4e:d0:c5:09:59:d6:d2:bc:48:7a:08:
c0:04:8d:08:dd:a1:14:20:a0:60:d0:81:89:47:b5:
f9:1f:84:bd:c4:48:1b:4a:d2:ae:c3:a1:dc:2a:62:
dc:c3:a0:de:4a:e6:66:db:22:cb:c3:a7:1a:3f:60:
5b:57:96:48:4b:c0:ac:7d:1f:3f:18:e4:ca:dc:6a:
75:a6:e3:57:7e:c9:1f:1d:f6:2a:52:6b:e2:6e:fc:
d3:f8:86:a0:ec:9c:ea:ea:ee:50:1a:45:ad:4f:18:
96:b4:23:8b:46:a4:f3:dc:0e:16:60:eb:74:a1:f5:
78:64:57:26:dd:88:70:84:ad:4b:a2:79:f4:94:a7:
f4:45:79:f2:fb:39:a5:f3:cb:be:6b:78:c9:f8:cb:
a8:f7:f3:e3:24:aa:21:3a:f1:b5:b8:ac:4c:90:3d:
e4:ed:6f:57:ac:26:77:a6:a8:d5:57:cd:3a:76:3e:
31:1e:77:4e:22:74:3c:e4:22:f0:9b:37:88:0f:2b:
5b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2E:AB:AD:05:23:1D:2F:4F:C7:EC:98:34:92:5C:E9:FD:D6:2C:E5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_i6rrQUjHS9Px-yYNJJc6f3WLOU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.30.35.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:dc:15:73:8f:7c:5e:19:43:65:91:d3:ca:05:58:62:f3:69:
ec:8b:20:a3:67:90:e9:48:48:ee:0d:90:fb:10:f4:97:4c:1b:
a2:f1:ee:b9:fe:a3:9a:5c:7e:89:e6:7f:63:96:35:3c:c8:8c:
b4:83:3f:da:35:ff:70:0c:87:dd:72:d2:19:69:27:57:1f:44:
f4:f0:e7:e7:f9:3a:ff:2f:6c:11:c6:27:29:13:a3:6d:34:6c:
68:34:8d:b2:80:a0:0c:38:87:79:5b:4e:46:7c:dd:bf:97:5d:
d5:29:bd:f2:28:9b:01:4b:17:95:00:a2:f7:56:ee:5e:48:1d:
49:42:d4:88:ae:57:a5:3a:5f:0d:1c:14:f9:78:ac:e3:bd:9d:
35:82:28:58:67:14:c8:f8:9c:24:97:c0:04:38:07:ef:88:5a:
ee:17:5d:b7:94:6d:5e:11:fb:c7:67:2e:1f:bd:78:e9:3e:07:
0c:90:12:96:8d:2f:bb:fb:92:9b:7e:8a:80:c2:63:b5:ff:52:
1b:83:14:b4:6a:45:c6:12:0f:87:4b:12:df:99:d5:11:4a:f3:
39:a9:cf:d3:77:5b:2d:b8:ac:52:e0:30:95:50:67:9e:80:88:
0c:2d:63:35:d2:23:ac:42:08:00:56:b3:b3:c6:a3:83:84:50:
9d:60:31:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:24:58 2025 by rpki-client