Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SECUNET/6TmHMcAxp9-NDGrC8fYhJU0GZy8.roa
File: 6TmHMcAxp9-NDGrC8fYhJU0GZy8.roa (raw, json)
Hash identifier: PDU6ESSJG0GRFGDSMDmMEyt2+d8vufxFBv5pOBDsHa8=
Subject key identifier: E9:39:87:31:C0:31:A7:DF:8D:0C:6A:C2:F1:F6:21:25:4D:06:67:2F
Certificate issuer: /CN=3F4E063886AD351FF822805AF8D569944B8DE517
Certificate serial: 0310
Authority key identifier: 3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/6TmHMcAxp9-NDGrC8fYhJU0GZy8.roa
Signing time: Mon 02 Mar 2026 05:47:01 +0000
ROA not before: Mon 02 Mar 2026 05:47:01 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 7536
IP address blocks: 103.198.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 784 (0x310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F4E063886AD351FF822805AF8D569944B8DE517
Validity
Not Before: Mar 2 05:47:01 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=E9398731C031A7DF8D0C6AC2F1F621254D06672F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:bf:a2:b3:47:39:0a:60:3c:ad:fb:93:8d:
db:60:6c:1f:40:52:8d:8b:06:c6:0c:e1:50:72:ee:
7c:d9:16:4f:d3:f3:28:0e:04:8e:72:a7:41:bb:11:
b7:e3:df:e6:de:20:7e:0f:70:ca:df:0c:47:6e:94:
38:02:be:64:5d:02:2f:01:49:7d:17:46:7f:c0:e1:
eb:4a:eb:05:8b:37:b2:4e:0e:6b:74:4f:f4:70:5c:
49:6b:28:21:c5:9f:dc:55:ab:25:41:88:06:2f:78:
96:3b:d0:1e:df:5b:71:74:ba:14:77:e1:c3:b3:c3:
8a:a6:1c:6a:dd:aa:54:87:73:9f:b3:cb:89:ed:94:
f1:0a:fb:15:89:c8:69:68:6e:1e:2f:dc:c5:6a:01:
21:a3:ef:b3:eb:15:41:9b:3f:bf:b2:8a:08:6b:b6:
b4:39:04:d6:be:d6:74:ea:c0:ba:6d:4e:4a:eb:28:
dc:22:3c:c4:b8:1e:7b:a6:b1:ed:16:37:00:dd:c7:
4a:95:f3:2e:21:78:eb:e5:4e:43:5f:05:25:1f:d7:
8c:92:7d:bd:b4:7a:0d:f1:a4:8d:d1:bb:79:51:19:
ab:1b:db:73:4e:bb:52:5f:f8:0e:4c:b8:e7:6d:81:
10:ae:7e:e9:59:b3:be:e4:ab:ff:85:f5:e9:dc:2c:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:39:87:31:C0:31:A7:DF:8D:0C:6A:C2:F1:F6:21:25:4D:06:67:2F
X509v3 Authority Key Identifier:
keyid:3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/6TmHMcAxp9-NDGrC8fYhJU0GZy8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.198.152.0/23
Signature Algorithm: sha256WithRSAEncryption
79:66:d4:e8:00:b7:71:99:d3:30:29:49:4b:a8:71:d7:5a:4d:
b5:ab:06:58:7c:14:9a:ce:a8:a5:09:52:ab:3c:1e:9a:48:7f:
66:db:29:d6:28:e2:aa:d6:b0:95:80:b2:10:8f:f7:42:4e:e8:
50:9f:a5:f6:2d:ff:32:fd:b2:b6:b4:68:37:f8:42:80:56:b1:
8b:09:11:6d:a8:1b:4e:29:6c:27:3c:77:b3:ef:6a:eb:07:b2:
88:2b:5c:86:4d:a7:87:bf:f4:01:04:e6:05:a7:1e:bb:77:cd:
60:0a:a7:11:3a:4e:42:03:d0:7e:a5:bd:74:82:46:95:6d:d3:
b0:d5:f1:39:b4:72:89:5a:f0:11:97:68:5f:6b:5b:f0:c9:dd:
ad:b3:99:35:06:96:48:30:ad:55:1b:ba:91:2c:3e:8d:76:1a:
a0:30:64:5a:13:9c:f7:ba:84:51:be:fb:09:53:48:57:d1:2a:
c5:df:0f:c3:2d:0a:af:38:4a:5a:dd:37:c5:3e:c2:c3:b2:0b:
2e:5d:4f:b5:f7:1d:4f:f1:4e:59:55:a0:87:cf:34:76:31:39:
2f:fe:b5:65:9f:7a:71:4e:6b:5d:7a:58:f7:16:a9:ff:e0:57:
af:b0:05:3f:c3:66:ab:0c:f9:a4:5a:e9:c7:b5:f3:18:6b:c0:
35:6c:c8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:35:28 2026 by rpki-client