Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/tX1F8WlhGo12Jg9SbdEainUVwTM.roa
File: tX1F8WlhGo12Jg9SbdEainUVwTM.roa (raw, json)
Hash identifier: AjNSQIsB9NprSX45gxw0mdVddWmvwE86vivt2edZdhM=
Subject key identifier: B5:7D:45:F1:69:61:1A:8D:76:26:0F:52:6D:D1:1A:8A:75:15:C1:33
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1480
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/tX1F8WlhGo12Jg9SbdEainUVwTM.roa
Signing time: Fri 22 Aug 2025 09:00:29 +0000
ROA not before: Fri 22 Aug 2025 09:00:29 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18419
IP address blocks: 218.34.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5248 (0x1480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 22 09:00:29 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=B57D45F169611A8D76260F526DD11A8A7515C133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:fe:dd:f0:17:c5:23:31:2f:99:c9:42:a1:
64:6b:10:08:8d:6b:12:4e:fa:1e:7f:a5:9a:ab:72:
42:68:d7:f4:74:48:43:b2:ab:e7:76:a3:69:ac:8f:
c1:f5:e4:23:9d:da:73:92:a1:37:14:9c:d0:10:89:
b4:72:a9:5f:f0:e0:c2:19:02:d5:74:2e:09:66:c7:
01:e8:77:01:0b:5d:4e:a1:be:cf:95:4c:22:50:09:
cd:1e:40:92:c9:5d:57:a2:e6:54:e1:50:a2:cb:29:
9a:92:9e:84:ad:2f:b0:55:da:83:bf:e1:11:3b:ba:
9f:36:32:98:d5:e0:b1:ad:ca:a2:81:8f:de:8b:17:
ac:2c:62:f5:b2:9e:47:ab:9b:e6:ed:a4:b4:53:1c:
f4:58:44:18:2e:0a:ac:70:ca:64:d5:27:e0:e8:c0:
4c:a8:c6:eb:f1:47:53:44:f9:95:fc:0e:78:a6:f9:
17:6d:10:d9:5c:e5:47:5c:dd:92:01:d1:90:e6:2b:
05:5b:58:a4:15:79:6d:74:9a:9b:35:4e:3d:0a:07:
80:e7:1d:ca:a9:8f:f2:82:fa:cd:f9:ea:b8:17:2a:
0c:09:c2:46:8a:94:47:19:1a:fa:a5:2f:8a:3c:9a:
f1:3d:12:4e:d6:dc:a2:f8:e5:6f:b2:93:50:57:99:
72:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7D:45:F1:69:61:1A:8D:76:26:0F:52:6D:D1:1A:8A:75:15:C1:33
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/tX1F8WlhGo12Jg9SbdEainUVwTM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.34.96.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:e4:79:a8:98:1d:66:6f:b2:f9:ee:12:44:f5:f8:bb:a9:b3:
b0:ec:44:6b:77:8c:07:a0:b2:21:f1:47:25:32:d5:f9:17:af:
e3:b2:61:d1:a4:03:d5:e2:dd:13:77:02:b4:a1:a5:20:e3:08:
24:5e:60:ae:84:6b:fe:36:4d:a2:e0:5c:1e:b4:3c:41:60:67:
db:14:c9:8d:3e:11:7b:93:98:c0:0b:69:c1:4c:ff:02:33:73:
81:32:5c:1a:62:1c:0e:22:e3:73:f5:da:35:b9:a0:c9:42:e6:
43:e3:f6:0a:55:ae:4d:19:f1:89:00:03:7c:7e:94:68:05:b0:
64:75:7a:27:bf:50:18:58:54:ec:3e:41:8b:e1:a5:94:39:c5:
52:ed:60:6e:5b:07:d4:ac:aa:61:80:68:24:24:60:86:35:e4:
c2:45:67:28:c1:9e:2b:82:3c:2c:62:e0:13:44:d3:ec:b6:63:
16:4e:a3:e5:64:6b:f6:0a:23:ab:86:b3:d0:c3:b9:86:19:22:
14:36:87:5a:36:f0:af:30:e5:60:89:cc:bd:13:24:b3:df:7e:
a8:3b:43:b7:e8:73:9d:95:13:81:cf:ab:03:27:29:05:95:48:
89:5b:c0:24:d9:eb:62:81:ec:db:ca:3b:d0:fb:21:6b:d5:5c:
95:42:e3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:53:28 2025 by rpki-client