Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/UzV90e6UjzfZc79RG51z0hxwr40.roa
File: UzV90e6UjzfZc79RG51z0hxwr40.roa (raw, json)
Hash identifier: kEpb2yJWOEVzRzsyTyLJtl9sZXXjbYwMMxKEnSznnMY=
Subject key identifier: 53:35:7D:D1:EE:94:8F:37:D9:73:BF:51:1B:9D:73:D2:1C:70:AF:8D
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1398
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/UzV90e6UjzfZc79RG51z0hxwr40.roa
Signing time: Fri 22 Aug 2025 08:59:28 +0000
ROA not before: Fri 22 Aug 2025 08:59:28 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9311
IP address blocks: 210.200.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5016 (0x1398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 22 08:59:28 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=53357DD1EE948F37D973BF511B9D73D21C70AF8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:b1:49:92:be:8e:00:60:13:da:e9:2d:6f:
28:0d:29:f3:38:48:0f:ee:c8:a7:63:86:c0:c8:e8:
ae:2f:f8:ff:0b:24:35:20:29:9d:10:87:8b:9f:13:
44:1f:3f:8c:c2:9c:7b:77:ac:b1:0b:1b:d1:79:2d:
4c:03:65:01:f2:34:4e:1f:98:54:5a:5f:9b:e1:ce:
32:0c:17:2d:44:0d:6c:9a:7d:38:1e:e3:2c:79:4b:
1f:7a:13:a4:18:70:69:b8:ec:34:d5:f6:7b:5b:1d:
dc:46:f0:38:ea:ad:fa:da:2c:61:d8:6e:be:27:4c:
13:90:93:98:f2:29:8e:07:d4:b5:a4:af:36:18:d2:
94:75:f9:62:9c:2e:47:ac:a4:1e:06:18:10:e0:1b:
d9:34:2d:97:6c:36:64:5b:9c:f7:0a:d1:6e:73:fb:
b0:67:0d:e6:3a:c8:29:9d:d0:95:70:65:ff:43:f1:
a4:85:e6:5c:96:79:32:a3:dd:20:14:0e:33:e1:d2:
a2:85:0b:98:d9:9d:0b:85:95:5c:34:2b:bd:fa:59:
9e:77:62:c9:d2:fa:85:b6:73:67:87:e3:52:9f:ef:
40:77:5f:6d:9c:25:23:0c:fb:26:d2:18:c0:14:33:
0b:0e:e5:ff:fd:0b:26:ca:67:6d:ec:d9:cb:c1:1b:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:35:7D:D1:EE:94:8F:37:D9:73:BF:51:1B:9D:73:D2:1C:70:AF:8D
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/UzV90e6UjzfZc79RG51z0hxwr40.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
87:4c:6b:96:4e:79:9f:a2:a7:c8:c4:28:70:0c:ad:47:bd:49:
23:7b:da:70:e4:7a:b4:e9:fc:06:bc:26:10:c3:cf:b7:6d:94:
69:5e:85:a9:e7:86:27:d0:8f:08:a3:22:1d:88:58:ca:8f:87:
8a:ae:d0:b0:bc:62:05:47:b5:3a:47:9e:57:2b:45:48:a6:09:
94:54:05:27:da:65:a3:c8:9d:e0:a3:b5:81:ca:f1:a5:f5:8b:
2e:a1:f0:64:6f:7d:fc:3e:cf:d5:28:2e:03:29:8c:a1:ee:c7:
14:9f:cc:0d:ec:a1:1a:70:07:b8:a6:72:39:8a:5a:76:29:52:
ab:a9:42:69:90:3f:3a:b9:36:1e:99:0d:0f:6e:c1:fb:dd:b8:
d7:27:2b:44:a3:0c:54:db:6f:ba:51:ac:fd:90:3d:fd:7c:84:
8a:44:b9:b3:cc:c4:ad:70:20:1d:38:70:75:0c:6a:de:59:7e:
54:3c:f4:bb:cf:a6:f5:ce:c0:b5:eb:88:83:45:c5:74:46:16:
07:8b:6c:ba:07:0f:6c:31:9d:0b:ff:85:f8:79:3f:b2:6a:ef:
c3:6e:7c:77:e3:26:fa:db:43:18:cf:e5:ca:53:9f:5f:67:b7:
12:25:5e:1c:18:af:e9:6e:ce:74:cc:b9:4b:e1:3a:24:2d:b5:
7a:c5:2a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:41 2025 by rpki-client