Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TW1033/qoAaFseApoYSt0Zi4KthZ1NyXu8.roa
File: qoAaFseApoYSt0Zi4KthZ1NyXu8.roa (raw, json)
Hash identifier: /k1L5O+d1APsTmlT54/61etHCnGdgGGXuj1TwFsFp0w=
Subject key identifier: AA:80:1A:16:C7:80:A6:86:12:B7:46:62:E0:AB:61:67:53:72:5E:EF
Certificate issuer: /CN=4C770AC7C271DA5B2915CA01B95988D0414F407C
Certificate serial: 1A
Authority key identifier: 4C:77:0A:C7:C2:71:DA:5B:29:15:CA:01:B9:59:88:D0:41:4F:40:7C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/qoAaFseApoYSt0Zi4KthZ1NyXu8.roa
Signing time: Sun 15 Feb 2026 13:53:50 +0000
ROA not before: Sun 15 Feb 2026 13:53:50 +0000
ROA not after: Wed 10 Feb 2027 15:30:20 +0000
asID: 142046
IP address blocks: 151.158.168.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C770AC7C271DA5B2915CA01B95988D0414F407C
Validity
Not Before: Feb 15 13:53:50 2026 GMT
Not After : Feb 10 15:30:20 2027 GMT
Subject: CN=AA801A16C780A68612B74662E0AB616753725EEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:9c:49:c4:85:2e:66:32:2d:2d:02:c9:95:
8e:7b:09:b3:ae:2f:6a:d7:75:65:2e:2d:b2:2d:37:
14:5f:46:e9:91:61:0e:b3:72:34:ac:d7:2c:73:ef:
15:f2:87:5c:96:36:ad:b2:35:55:bc:e3:c7:3d:77:
49:2b:17:7b:ce:45:4c:64:37:12:31:eb:7a:dd:3b:
b2:6e:b0:ff:c1:05:9b:e9:56:11:bf:28:6b:d0:82:
83:21:fe:1e:31:60:e9:da:9d:3c:83:67:af:40:ce:
d9:16:e3:cf:3f:09:28:a6:06:55:e3:44:ab:35:cb:
49:d5:fe:de:6e:83:03:7c:b0:0a:ae:a1:a6:43:f0:
6a:73:7a:d3:a5:e8:7d:2c:ce:78:d3:fd:ea:fb:fc:
d2:68:9e:6b:50:f4:59:ea:da:7d:2e:d9:ae:f2:ba:
24:33:83:77:ea:eb:70:db:03:30:12:50:94:39:ed:
9d:0e:35:b4:f0:34:ac:68:60:53:45:86:ae:b1:cf:
ab:d2:fc:d1:07:d8:fc:3d:78:7e:42:9c:e1:32:6c:
f2:38:f3:fe:65:8c:27:8e:88:ff:51:26:13:ef:96:
47:90:99:d2:46:e2:9f:67:af:54:2a:29:e1:5f:59:
fa:a3:47:74:4a:2e:d7:46:8a:6f:a6:72:57:9d:10:
01:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:80:1A:16:C7:80:A6:86:12:B7:46:62:E0:AB:61:67:53:72:5E:EF
X509v3 Authority Key Identifier:
keyid:4C:77:0A:C7:C2:71:DA:5B:29:15:CA:01:B9:59:88:D0:41:4F:40:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/qoAaFseApoYSt0Zi4KthZ1NyXu8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.168.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:85:c1:b5:b6:dd:72:90:64:f3:e7:52:83:68:c8:1c:ee:2b:
e6:40:58:da:38:57:76:82:64:c8:24:05:b7:98:80:f0:ae:2c:
f0:13:9a:59:21:cd:10:58:11:13:9e:b4:00:3f:4c:98:b7:be:
ff:96:8d:d8:6a:13:7c:01:af:ca:27:75:68:c4:58:b9:48:9c:
5d:d6:31:d6:e7:23:c4:31:86:0b:3e:29:13:65:ff:e9:16:9c:
bd:48:55:38:93:d1:f6:2b:11:cc:9f:78:37:ee:af:00:5a:07:
2f:a8:bf:83:99:9d:36:2f:95:d8:39:71:3d:43:6d:68:de:fa:
1f:76:6a:24:3c:99:f3:33:2e:82:f2:bc:b2:95:0c:5e:1e:d0:
21:06:16:2c:b2:5a:51:06:36:95:7b:6d:e0:79:75:df:e8:c3:
c7:ce:c3:8b:b8:f5:cc:69:ef:2b:a4:c0:40:87:5d:b8:8b:bb:
fb:08:67:ec:7d:5a:d8:14:57:96:35:29:08:90:3a:9c:ff:59:
90:f8:55:77:c2:f4:6d:44:53:08:12:1b:a7:a1:c2:b6:89:79:
1a:22:bb:50:77:04:f2:76:f6:ef:f5:8c:91:bc:ca:ed:a0:62:
10:3a:e1:98:05:a4:24:15:06:96:37:92:be:29:02:43:cd:85:
13:0a:52:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:48 2026 by rpki-client