Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Yu2klPkJm4gVJJ6p7THuDZQHg4U.roa
File: Yu2klPkJm4gVJJ6p7THuDZQHg4U.roa (raw, json)
Hash identifier: JjaxhGDKNMZXk/TKhNWt5kJUpn3zb31YCa4uXdlOF84=
Subject key identifier: 62:ED:A4:94:F9:09:9B:88:15:24:9E:A9:ED:31:EE:0D:94:07:83:85
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 145B
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Yu2klPkJm4gVJJ6p7THuDZQHg4U.roa
Signing time: Fri 22 Aug 2025 09:00:19 +0000
ROA not before: Fri 22 Aug 2025 09:00:19 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9311
IP address blocks: 203.79.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5211 (0x145b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 22 09:00:19 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=62EDA494F9099B8815249EA9ED31EE0D94078385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:ee:9f:6a:a8:95:60:51:59:86:e3:f9:a6:
1e:d2:a1:2b:80:65:28:66:4e:8a:c0:8f:b3:fd:da:
98:d4:eb:b3:ca:0e:d9:60:2f:c1:5c:22:ab:f2:53:
54:8b:30:df:d3:f9:ac:fb:26:c8:58:08:95:e9:c5:
30:ad:b5:6f:9f:b8:b6:26:cd:76:1a:4a:6e:c6:fe:
8f:fa:88:61:5e:30:10:d4:9f:82:92:50:c7:25:19:
7b:20:f0:57:c9:67:68:59:44:cb:ed:da:ec:11:13:
82:61:f0:e0:11:0c:b3:d3:2d:f0:c6:e2:ed:25:75:
c7:e3:47:27:f3:86:b2:8b:fc:48:b5:93:95:dd:8d:
6b:10:f0:aa:51:67:a4:1b:ab:30:dd:f7:d3:70:aa:
6a:8f:af:96:f8:d2:c0:2e:30:10:c5:20:9c:c0:81:
83:33:95:a6:1d:7c:42:81:b9:0d:d5:3b:ac:c3:a2:
eb:cf:2c:e8:e5:d8:c0:cc:06:1a:aa:67:bc:db:62:
19:55:7e:9f:b7:08:5c:2b:1b:33:1f:13:25:4d:61:
85:4b:26:1b:f8:78:6b:9a:7d:30:f5:4a:86:df:08:
25:a5:3a:a9:2d:6e:cd:9a:ac:76:71:5b:44:6e:eb:
f2:93:f7:5a:86:e3:76:4f:58:2e:7e:ff:1f:f1:01:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:ED:A4:94:F9:09:9B:88:15:24:9E:A9:ED:31:EE:0D:94:07:83:85
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Yu2klPkJm4gVJJ6p7THuDZQHg4U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.235.0/24
Signature Algorithm: sha256WithRSAEncryption
12:42:6a:34:91:0d:34:9c:90:a9:e0:41:55:84:06:03:bd:2a:
22:b9:aa:ec:2f:b3:c0:38:f9:4b:4c:83:97:23:15:0a:54:74:
df:c3:54:71:ea:6b:db:5d:f3:af:b4:db:f3:bf:e4:d2:d5:2f:
25:f2:39:25:9c:d5:36:5c:93:fe:9f:27:7c:ca:a6:1c:70:d1:
df:d6:4a:cb:6f:38:42:5d:e3:50:c3:31:ac:63:65:c6:65:95:
43:58:0c:dd:9c:c3:a0:5e:d3:50:26:42:d8:10:ca:8c:aa:ef:
26:7c:45:2f:d2:4a:0d:2f:b9:8c:bf:6b:e9:44:34:29:80:8f:
0d:a6:00:96:f3:cc:9e:d6:07:b9:0c:da:52:2e:23:b9:38:33:
d5:47:97:6c:23:30:d8:64:b3:80:1f:ec:fd:f9:d0:f7:d1:05:
c0:c0:64:44:6f:11:70:59:64:d1:5a:08:47:b1:3d:7c:a5:64:
2d:7c:25:5e:c0:d1:5a:64:78:4e:58:2d:36:a5:9b:d7:f2:fd:
46:39:f4:b2:42:2b:08:21:76:ec:dd:dd:56:34:24:f4:fd:b0:
15:39:05:03:29:86:e2:92:f3:5a:bb:a6:98:45:0b:71:b2:74:
b4:6e:46:36:1d:c2:36:97:ab:58:9d:29:54:a1:9b:1a:5c:c0:
df:00:f9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:42 2025 by rpki-client