Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wsC_kT7m4KMmv8QY7L0-unqoOjk.roa
File: wsC_kT7m4KMmv8QY7L0-unqoOjk.roa (raw, json)
Hash identifier: qnvYkGDq5edaWjXOujUGaB2K4PuurFi/KTtwLNIG4Mg=
Subject key identifier: C2:C0:BF:91:3E:E6:E0:A3:26:BF:C4:18:EC:BD:3E:BA:7A:A8:3A:39
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1582
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wsC_kT7m4KMmv8QY7L0-unqoOjk.roa
Signing time: Thu 29 Jan 2026 01:54:25 +0000
ROA not before: Thu 29 Jan 2026 01:54:25 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 19551
IP address blocks: 124.108.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5506 (0x1582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Jan 29 01:54:25 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=C2C0BF913EE6E0A326BFC418ECBD3EBA7AA83A39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:20:68:01:7d:04:ed:53:22:67:6e:74:b5:
36:4c:5e:5e:51:e2:e7:fd:6b:d7:f9:18:53:e8:08:
fd:a1:5e:3b:e4:9f:ca:a1:0f:cc:9d:c4:e3:d3:17:
c1:92:e8:32:c0:54:ba:4c:ff:aa:9e:04:0d:f8:49:
e4:a6:44:20:e6:23:98:a9:9a:78:60:6d:fb:ab:e6:
bc:9c:7b:a2:97:b1:09:51:8e:d8:1b:7b:50:a2:ba:
77:b4:0c:da:4b:0f:da:60:0c:03:5f:5a:95:9e:ad:
9c:c2:4b:68:59:1f:43:f9:11:6c:b0:e8:d1:47:91:
02:8f:16:18:d8:63:76:13:4c:79:bc:f6:31:72:f8:
4a:3d:07:3b:31:1d:ec:d0:f5:1b:ad:5e:fd:8a:9d:
a7:b7:9e:35:64:69:d3:e2:82:24:0d:6a:f7:c5:eb:
0f:57:c2:6a:60:2f:12:f3:d5:38:b7:33:8d:d8:60:
4b:52:be:63:7c:14:d6:61:60:3a:11:4e:08:f5:ad:
78:bc:90:d6:d2:72:f8:2b:62:70:13:0e:c3:09:b7:
00:e3:d5:dc:97:de:52:cb:ea:95:4f:9f:21:47:7c:
42:20:c4:87:2e:0a:c3:f2:a1:d3:9a:53:a3:36:55:
34:e3:45:53:ed:a3:2e:29:87:d3:bb:a5:c1:4a:6a:
9a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C0:BF:91:3E:E6:E0:A3:26:BF:C4:18:EC:BD:3E:BA:7A:A8:3A:39
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wsC_kT7m4KMmv8QY7L0-unqoOjk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.108.137.0/24
Signature Algorithm: sha256WithRSAEncryption
04:4b:c8:d0:c9:0b:f9:26:52:1c:af:d7:9c:ce:06:3f:bc:1f:
fc:a6:a7:61:76:de:4c:00:e9:1d:14:3e:7d:9a:e0:95:35:e4:
64:77:90:82:4d:bb:0f:42:a5:2e:a8:78:2d:6b:86:48:2b:f7:
99:7d:23:fd:66:7e:19:0b:87:db:49:f0:2c:98:77:9a:f4:91:
5d:09:e3:90:73:cb:ed:4d:8f:64:5b:a8:fe:2d:7a:f2:18:a0:
23:d6:02:ab:b3:03:77:e9:54:44:10:ed:de:58:ff:ff:94:54:
43:f3:f8:57:ef:d5:d3:52:b3:ff:26:66:bc:19:c2:f5:fc:e5:
09:1f:1b:ec:00:3e:98:84:20:92:ac:08:7f:25:ab:a3:cd:73:
68:9e:5c:25:93:d7:7d:c6:95:90:43:b5:4e:9e:cc:d1:4b:f4:
66:58:24:65:18:a7:dc:38:7d:84:29:9d:b6:84:0b:40:39:ab:
52:53:7a:29:8c:3a:40:81:cd:6a:c1:b6:c5:28:be:7b:5a:79:
79:61:1e:36:2a:9b:a0:65:20:64:b6:14:61:4f:34:64:5a:df:
21:1d:99:5a:eb:d8:37:7b:f9:9e:e9:a6:a9:ad:dd:c6:a7:2d:
81:92:c1:e9:5c:ec:e0:27:ff:83:0b:db:b2:b3:d4:5c:25:b8:
8c:b7:df:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:34 2026 by rpki-client