Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/vwmaSx5KMCPOAjR_DThSckk7UmE.roa
File: vwmaSx5KMCPOAjR_DThSckk7UmE.roa (raw, json)
Hash identifier: eijgA4qga/8e34MQyrb+F0VaPiVZpoZhdGU/rBT/qV4=
Subject key identifier: BF:09:9A:4B:1E:4A:30:23:CE:02:34:7F:0D:38:52:72:49:3B:52:61
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 13CA
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vwmaSx5KMCPOAjR_DThSckk7UmE.roa
Signing time: Fri 22 Aug 2025 08:59:43 +0000
ROA not before: Fri 22 Aug 2025 08:59:43 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18419
IP address blocks: 218.35.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5066 (0x13ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 22 08:59:43 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=BF099A4B1E4A3023CE02347F0D385272493B5261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:15:99:40:8a:87:05:d5:0c:f0:26:0d:16:a9:
75:e4:ec:c6:ce:b7:67:d7:7e:d6:2c:24:14:ad:33:
e1:1a:f1:e7:25:61:c6:c8:20:ef:99:5e:5a:07:43:
c9:4b:cb:a1:dd:e2:b2:e6:a4:21:90:8a:58:41:ee:
26:b9:b0:54:d4:2a:5f:f8:2c:25:ba:1f:24:e9:b3:
dc:f7:78:ad:6c:17:ed:2d:95:60:b9:99:15:70:d1:
3f:70:84:9e:5f:0c:d4:50:18:24:99:a9:02:60:1e:
ee:81:20:fa:f2:bb:88:3a:5d:95:b8:ed:cb:6a:6e:
b3:b0:ce:a1:74:09:54:e4:b8:bc:db:68:cb:b5:7f:
0c:bb:99:c6:6a:a4:75:08:d8:62:52:a8:59:d1:8c:
be:1c:fc:a0:0e:1f:c8:9f:1b:c0:0e:8a:de:5d:f1:
11:e6:e9:6f:97:f6:c5:e5:c1:bd:4a:4d:41:17:c6:
42:2d:1d:76:70:20:7a:e5:5d:ed:f5:b3:63:52:e1:
f3:08:46:70:cc:26:54:3a:90:9e:76:56:9b:f3:5a:
ff:23:0b:ee:5c:3a:16:7c:99:94:86:92:7e:d8:d3:
d9:2b:9b:7e:e0:ec:0f:01:c8:fc:f0:0f:10:1f:3b:
e3:dd:6d:95:6f:27:35:3b:a8:85:97:b3:5b:76:e7:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:09:9A:4B:1E:4A:30:23:CE:02:34:7F:0D:38:52:72:49:3B:52:61
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vwmaSx5KMCPOAjR_DThSckk7UmE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.0.0/21
Signature Algorithm: sha256WithRSAEncryption
94:d7:95:b9:b3:5d:89:1e:cf:63:3a:0a:23:5a:2f:f2:3c:79:
eb:cb:f2:e2:a0:c7:7c:c7:fe:37:7b:65:43:f4:e4:f5:6a:40:
d0:04:72:72:b1:d6:41:26:83:90:0a:1a:87:be:9c:36:1f:05:
ff:98:94:90:3f:d0:4d:90:bb:ef:eb:bf:ae:c2:3b:e4:f3:19:
eb:fe:a5:27:35:04:5c:77:3f:0f:ea:b5:47:cd:fd:b3:b4:6d:
ac:b8:d0:16:2a:fb:bf:fe:1d:34:13:78:28:27:3f:c8:de:1b:
94:6e:4f:e9:8e:eb:87:5e:5d:86:86:f9:58:10:5c:ae:41:d5:
c6:06:50:1a:80:81:a7:90:59:47:2d:a5:56:10:4f:58:4b:81:
2d:a3:e0:0d:68:42:68:d5:7b:86:42:43:46:f8:10:17:43:b8:
b9:b3:c0:b5:a4:9d:52:a0:37:fa:65:09:73:c4:90:ae:29:72:
70:bf:52:60:df:49:ad:a0:8e:29:f7:92:c9:ec:b2:0d:89:62:
83:16:76:30:5a:5b:fe:aa:af:2d:b4:32:9b:34:9c:6c:c7:3e:
97:f4:35:85:65:d9:af:81:70:7e:2f:e5:c4:46:b6:72:04:7b:
9c:17:70:40:38:7a:5a:61:bd:68:1f:c8:aa:fb:2e:95:41:1f:
a7:4c:57:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:53:07 2025 by rpki-client