Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/yPar7qgsaT06IZHHXyk0z_cjvUk.roa
File: yPar7qgsaT06IZHHXyk0z_cjvUk.roa (raw, json)
Hash identifier: /3YzvliYUFGICf81R45/jiTAL8FEbAcIYTcLzsUNe3M=
Subject key identifier: C8:F6:AB:EE:A8:2C:69:3D:3A:21:91:C7:5F:29:34:CF:F7:23:BD:49
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 147B
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/yPar7qgsaT06IZHHXyk0z_cjvUk.roa
Signing time: Fri 22 Aug 2025 09:00:28 +0000
ROA not before: Fri 22 Aug 2025 09:00:28 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18419
IP address blocks: 124.218.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5243 (0x147b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 22 09:00:28 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=C8F6ABEEA82C693D3A2191C75F2934CFF723BD49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:e2:e0:61:57:5f:27:40:0f:52:6e:ea:36:
eb:b6:55:15:20:1c:65:86:d7:a3:ef:85:f8:5e:93:
ba:9c:cb:bf:62:2c:fd:64:70:39:90:7c:58:a8:18:
b7:25:6b:a9:23:f5:5e:f1:2b:13:09:bc:12:29:82:
d3:a7:91:bb:07:19:bc:20:fe:eb:56:c4:7c:fe:f3:
c8:d8:51:c4:5a:74:a7:7c:fe:b0:f9:86:2b:6f:6b:
49:bb:8e:b7:2a:84:b6:2c:a4:b7:87:ce:46:11:05:
c2:04:cb:a6:4c:fd:20:e5:46:aa:5c:7e:b1:86:81:
d1:8b:af:32:ef:d6:2f:94:6c:46:1e:e2:88:9d:c1:
28:b8:57:3a:74:42:4b:0f:54:c7:fc:4d:1a:1b:c8:
ce:46:0b:9e:5c:8f:e4:db:73:ff:5e:64:9e:5d:a1:
33:ae:13:75:67:de:e4:d3:f3:9c:00:03:46:88:33:
1b:66:bc:ac:09:37:82:14:a9:e2:6c:ae:5f:cf:52:
ce:0d:d0:55:22:de:70:8a:a8:e1:2d:7f:36:42:3c:
02:e1:98:fb:2b:05:08:ad:8c:fb:2c:1a:bb:1a:91:
11:ac:33:af:5b:58:04:33:ec:3b:90:22:ce:35:2d:
4e:6a:3b:70:ea:fa:a3:e5:19:8c:52:5d:dc:29:90:
5e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F6:AB:EE:A8:2C:69:3D:3A:21:91:C7:5F:29:34:CF:F7:23:BD:49
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/yPar7qgsaT06IZHHXyk0z_cjvUk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.96.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:44:1a:4e:27:fc:87:d4:89:c2:19:3a:13:38:41:9f:7d:0d:
3b:45:b0:8e:1a:55:16:65:b2:54:39:5f:da:64:e6:26:23:46:
5e:e7:96:c7:e5:98:9c:47:2e:2d:8e:b7:2d:28:12:f7:fb:36:
c6:cb:8f:03:52:7c:12:09:a6:1e:db:b1:82:55:69:9b:5e:b6:
9c:17:16:c4:72:43:4d:33:ef:80:fb:11:d2:dd:e3:f2:f6:99:
77:6e:b4:44:db:4d:07:80:5a:d5:ca:ba:0c:a7:8d:b4:ca:71:
78:c0:67:5b:a9:75:51:ad:7f:d7:8a:12:d5:0d:d8:45:66:0f:
17:6a:26:6e:5b:e4:fe:72:bd:b9:f2:c8:a5:df:10:5f:21:9d:
bd:50:19:9d:74:c5:8f:1a:81:f8:3a:be:d3:50:05:e2:53:fc:
a3:95:97:6d:30:97:1e:29:41:19:a1:33:33:66:a2:a6:87:ec:
e2:dd:7e:8b:3f:91:c4:f0:55:a5:78:04:17:3d:83:93:c3:be:
77:f6:93:59:9b:d5:8a:22:af:6e:b9:9e:7c:2a:37:e0:6a:93:
f2:2c:26:67:d2:0d:3d:c9:a3:24:06:90:c3:13:26:28:36:6e:
16:c0:08:c7:a0:88:cb:05:48:f8:e0:cf:65:9e:25:93:33:ed:
a5:22:4f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:53:08 2025 by rpki-client