Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/F8Ej3zvFXPhjlz1S2o0V2a2BKK4.roa
File: F8Ej3zvFXPhjlz1S2o0V2a2BKK4.roa (raw, json)
Hash identifier: 9QGXfk6/5HXF22kaKHWKK3/sroxQmdkwQ65spIngzMc=
Subject key identifier: 17:C1:23:DF:3B:C5:5C:F8:63:97:3D:52:DA:8D:15:D9:AD:81:28:AE
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 146E
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/F8Ej3zvFXPhjlz1S2o0V2a2BKK4.roa
Signing time: Fri 22 Aug 2025 09:00:25 +0000
ROA not before: Fri 22 Aug 2025 09:00:25 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18419
IP address blocks: 124.218.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5230 (0x146e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 22 09:00:25 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=17C123DF3BC55CF863973D52DA8D15D9AD8128AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:94:14:ce:7c:d0:15:65:65:47:e1:e5:f7:81:
12:a6:39:44:68:cf:86:9c:aa:22:4c:d6:7e:4b:55:
3d:c0:7f:bf:b6:27:a1:92:fc:30:ec:23:37:9b:d8:
07:cf:01:9a:e6:12:42:8a:8b:3d:89:f4:9f:ca:b4:
c2:ac:64:f7:ac:3c:0a:13:b1:a7:30:df:af:10:3b:
30:d1:80:73:85:12:48:62:69:0c:00:ec:64:7f:74:
4c:62:80:5a:b7:3e:6b:87:6b:cb:c0:6a:da:d2:6c:
4f:5a:a8:3b:17:f0:49:5f:b7:4b:08:86:68:c9:a5:
c6:53:a2:ec:66:24:35:bb:5d:93:8f:a5:81:a4:f7:
3d:07:45:b5:14:b0:bf:67:59:be:02:4b:dc:94:1a:
06:15:39:6d:f7:21:1a:a9:69:ef:2c:b2:2a:7b:2f:
c9:03:10:88:ac:43:4b:a1:51:59:c2:6e:36:b5:a6:
40:ed:37:81:a8:11:59:df:f4:91:3c:f4:5b:2d:fb:
ab:e2:6b:d4:0d:ce:7d:65:41:b4:93:58:75:8d:5d:
eb:a0:55:be:80:60:bc:37:b8:16:1f:4a:87:56:6e:
c3:17:b8:ba:93:53:72:a0:08:c0:05:d5:4f:8d:62:
b1:eb:2f:f7:0f:ff:6b:1d:72:65:73:4c:19:74:17:
df:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C1:23:DF:3B:C5:5C:F8:63:97:3D:52:DA:8D:15:D9:AD:81:28:AE
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/F8Ej3zvFXPhjlz1S2o0V2a2BKK4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.224.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:bf:8f:6c:ba:2c:cd:79:5f:48:89:c0:7a:2c:48:9f:df:17:
c3:af:cd:1f:f4:87:2f:7e:d1:6f:fe:f7:3c:50:de:06:a9:19:
c6:70:4e:d8:79:16:04:e7:92:2c:07:69:46:60:c2:e3:8b:c5:
7e:a6:cc:b6:dc:9a:85:fd:e2:1d:19:e3:1e:1c:9f:8b:83:54:
c0:9f:c0:cc:9c:4b:c4:ff:f4:0e:1e:9b:51:57:0c:04:74:7e:
09:f7:c4:36:0f:bc:3f:17:7b:eb:6e:e5:a2:61:ff:22:12:bf:
8f:98:6e:e1:d5:41:da:ae:3e:61:f9:d2:00:b4:13:65:5d:c4:
cb:0b:6a:b1:ab:c7:a1:fc:0c:58:f9:00:84:b2:b3:aa:89:36:
20:33:d5:2c:0d:84:e9:78:8d:2c:44:3b:6a:46:d8:a3:66:86:
25:d1:07:0b:b2:76:eb:8a:91:3f:de:6b:ad:7d:80:6c:89:af:
7f:a1:91:34:af:44:c3:cc:56:9a:1d:7d:a6:70:fe:36:cb:83:
62:cb:16:06:ab:f1:11:e6:db:0c:69:ca:5b:7a:42:e3:d1:11:
a2:b8:d8:b0:22:b8:3f:63:0b:93:11:0e:64:83:0f:5b:0d:f8:
f1:89:18:88:19:e9:ec:39:0f:95:a6:43:64:6d:9c:8e:ed:db:
f9:90:0f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:39 2025 by rpki-client