Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/ND0ge7NSwEbBHKhrasgvlULQ2eM.roa
File: ND0ge7NSwEbBHKhrasgvlULQ2eM.roa (raw, json)
Hash identifier: an26diQqV4PVlHlMsGUQKrExIZ7tUOE9TwJJ5hz0VbU=
Subject key identifier: 34:3D:20:7B:B3:52:C0:46:C1:1C:A8:6B:6A:C8:2F:95:42:D0:D9:E3
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 13BD
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ND0ge7NSwEbBHKhrasgvlULQ2eM.roa
Signing time: Fri 22 Aug 2025 08:59:40 +0000
ROA not before: Fri 22 Aug 2025 08:59:40 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18419
IP address blocks: 124.218.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5053 (0x13bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 22 08:59:40 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=343D207BB352C046C11CA86B6AC82F9542D0D9E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:56:2b:83:81:41:46:1f:13:38:80:76:f9:76:
a0:54:c7:48:44:fd:81:95:b5:f5:ee:08:5b:30:50:
bf:ce:c0:44:01:3a:af:37:f6:b8:7c:99:75:d1:82:
7e:2d:46:49:48:54:b5:70:e2:13:97:dc:29:b9:c4:
00:bd:64:4b:d6:85:63:27:99:dd:ec:72:6a:a9:e9:
33:a4:4f:e6:96:28:1b:f8:75:65:df:c8:51:d3:af:
df:8b:a3:48:f7:e3:cb:b5:1b:aa:d3:4b:63:15:b8:
3b:f0:cb:78:68:e1:2b:82:38:76:84:cb:cf:a9:22:
d8:2e:e8:04:61:4a:92:24:51:92:b1:e1:4a:2c:09:
5f:1b:4b:ef:bb:22:ef:3c:3f:1d:d1:af:e7:04:ab:
37:62:60:76:0d:7d:9b:2c:77:5e:6a:96:f3:a2:3c:
4b:b7:64:6e:ba:f5:f6:20:76:f8:24:6c:d8:db:8a:
72:59:e4:6d:5d:88:c1:8b:ba:ee:22:1f:78:58:e7:
ec:9f:66:fd:ba:bd:27:fc:11:7f:4b:10:5a:bb:9b:
90:0a:a0:a5:21:6e:20:87:25:9c:8a:b6:0c:0b:53:
ce:68:ba:0e:27:d4:8b:3d:36:dc:dd:9a:37:29:08:
a3:6f:55:4d:3d:b6:7d:af:2e:9c:1d:80:96:c0:eb:
df:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3D:20:7B:B3:52:C0:46:C1:1C:A8:6B:6A:C8:2F:95:42:D0:D9:E3
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ND0ge7NSwEbBHKhrasgvlULQ2eM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.192.0/19
Signature Algorithm: sha256WithRSAEncryption
66:23:71:4e:1a:ab:02:51:4b:9a:e7:90:91:1a:14:56:d3:79:
48:cf:1d:97:be:c2:91:49:98:51:68:53:e4:f0:fc:d8:31:a6:
4b:6b:be:de:e8:c9:f2:c9:6c:ee:74:8a:be:4e:a3:ea:21:62:
d6:dc:e7:1f:57:1a:db:a9:22:20:1d:a7:9c:93:a2:e1:ab:22:
36:48:6d:c6:18:89:95:94:5a:0b:91:5b:ee:6f:27:fb:38:7d:
48:fe:b8:77:a1:ea:70:17:49:39:58:e7:d3:23:cd:37:a5:44:
11:81:a7:af:2b:be:0e:71:cd:08:08:ae:a6:59:d4:5e:1d:61:
7e:a6:27:95:e8:22:ae:0e:fa:37:78:7d:d4:75:66:d0:77:28:
0c:80:b4:d8:b6:11:68:9a:1d:4b:fb:ba:03:71:4f:b0:a5:35:
3a:c3:11:eb:9e:b9:11:cb:5d:0a:69:ba:0d:ad:1e:bb:aa:f9:
32:a5:5d:d6:5d:98:5d:5b:0a:71:59:34:51:ad:e7:c5:82:ca:
92:fa:6a:88:6f:da:b6:4b:61:18:9f:2b:b3:35:4e:e2:8c:99:
84:a0:de:40:63:21:13:fa:a6:f9:d4:08:2f:30:8a:b6:5f:96:
14:c8:27:a7:f9:d4:49:f2:41:00:88:a2:68:c4:17:87:95:e6:
7d:17:c9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:40 2025 by rpki-client