![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/6RvWsISyjOPwYxRdGWvZ-97hY8s.roa
File: 6RvWsISyjOPwYxRdGWvZ-97hY8s.roa (raw, json)
Hash identifier: ozi/dkstsCNa5mG3vh6ld4AzM+wK71TkKf2q9BFjNGQ=
Subject key identifier: E9:1B:D6:B0:84:B2:8C:E3:F0:63:14:5D:19:6B:D9:FB:DE:E1:63:CB
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DDF
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/6RvWsISyjOPwYxRdGWvZ-97hY8s.roa
Signing time: Wed 29 Sep 2021 02:39:39 +0000
ROA not before: Wed 29 Sep 2021 02:39:39 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9311
IP address blocks: 210.201.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3551 (0xddf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:39 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E91BD6B084B28CE3F063145D196BD9FBDEE163CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:a2:f3:56:d7:45:07:06:6a:eb:c2:6b:4b:
75:9d:9a:f1:d9:48:22:29:5e:04:43:f7:52:f0:d7:
42:93:c1:1f:58:c7:fa:d6:ed:8c:55:1e:81:37:af:
9c:d2:91:c2:a5:1f:5b:57:70:2a:77:ea:7f:bc:e7:
2c:a9:ea:f0:fe:97:8c:6f:0f:87:c9:22:21:20:8d:
fb:c2:ab:df:6f:59:bc:6f:28:4d:96:ad:e5:4e:a4:
05:b7:24:d4:c7:2b:3d:b8:31:71:eb:34:ca:4c:71:
19:52:d7:c4:47:94:6f:30:27:89:a3:ea:a2:e7:78:
3b:31:0b:c0:09:d5:b0:fb:d4:ce:97:32:bc:79:e4:
ed:99:39:69:ba:8b:7d:b9:7f:52:5d:97:77:81:e7:
c6:79:85:70:3e:96:0b:01:c9:b4:ea:24:94:7d:89:
c0:60:de:fa:9a:c0:f3:01:df:ff:81:ee:f7:c5:b4:
dc:d4:f0:23:f7:ee:e0:1b:31:f8:81:66:18:e9:3c:
0a:8e:95:69:75:09:9f:e4:df:aa:4f:1d:4c:9f:60:
87:32:ae:3f:93:34:c1:9d:fc:97:66:be:df:49:35:
fb:ae:e2:3b:c6:29:85:79:12:79:c2:28:75:5b:f0:
ba:a5:8a:6a:92:b3:9a:fa:20:e1:82:80:e6:5f:9a:
53:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1B:D6:B0:84:B2:8C:E3:F0:63:14:5D:19:6B:D9:FB:DE:E1:63:CB
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/6RvWsISyjOPwYxRdGWvZ-97hY8s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.74.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:ad:0f:3f:d5:a1:f1:fb:e1:a3:e6:f9:c3:c0:cf:0c:35:38:
a7:d9:9d:0f:c0:77:56:b6:07:9a:04:cc:44:ba:fd:f0:87:7c:
8d:26:74:8a:e5:c8:c1:91:d0:81:d3:1d:40:a3:22:4f:92:e9:
42:07:98:29:1b:61:ff:2f:d6:37:a4:24:69:52:e7:d2:b1:e4:
ee:31:fd:da:70:c0:49:06:eb:62:46:e3:21:0f:ca:b6:57:9c:
a9:78:94:61:37:c6:e0:26:15:5c:61:1a:06:9f:ee:99:7e:bf:
8d:cf:b1:1e:de:90:31:9d:11:3d:ee:9f:aa:fb:6d:28:b6:1a:
28:49:fd:07:ec:88:d5:b0:34:68:c2:25:d7:35:d4:e7:62:c8:
32:0f:23:72:81:46:ed:2c:eb:f1:7c:30:42:43:1f:d2:b5:ab:
ad:0a:8c:ea:90:73:1c:7a:99:43:c0:f4:97:c7:af:58:6c:08:
eb:86:dc:20:9f:30:49:7a:f2:bf:1b:ac:09:d5:a8:15:6a:07:
19:7e:8a:0d:d0:b6:10:2b:3d:59:78:37:1e:f3:d6:f5:6b:58:
0b:9c:6d:66:e9:6b:e6:30:d8:35:96:14:05:6b:14:23:c3:05:
47:ef:a1:19:28:2d:97:c4:b0:b6:94:6f:a1:f7:0a:bb:47:8e:
6b:86:15:50
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDd8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTA5Mjkw
MjM5MzlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEU5MUJENkIwODRCMjhD
RTNGMDYzMTQ1RDE5NkJEOUZCREVFMTYzQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVFaLzVtdFBwZq68JrS3WdmvHZSCIpXgRD91Lw10KTwR9Yx/rW
7YxVHoE3r5zSkcKlH1tXcCp36n+85yyp6vD+l4xvD4fJIiEgjfvCq99vWbxvKE2W
reVOpAW3JNTHKz24MXHrNMpMcRlS18RHlG8wJ4mj6qLneDsxC8AJ1bD71M6XMrx5
5O2ZOWm6i325f1Jdl3eB58Z5hXA+lgsBybTqJJR9icBg3vqawPMB3/+B7vfFtNzU
8CP37uAbMfiBZhjpPAqOlWl1CZ/k36pPHUyfYIcyrj+TNMGd/Jdmvt9JNfuu4jvG
KYV5EnnCKHVb8LqlimqSs5r6IOGCgOZfmlMxAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU6RvWsISyjOPwYxRdGWvZ+97hY8swHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvNlJ2V3NJU3lqT1B3WXhSZEdXdlot
OTdoWThzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdLJSjAN
BgkqhkiG9w0BAQsFAAOCAQEAL60PP9Wh8fvho+b5w8DPDDU4p9mdD8B3VrYHmgTM
RLr98Id8jSZ0iuXIwZHQgdMdQKMiT5LpQgeYKRth/y/WN6QkaVLn0rHk7jH92nDA
SQbrYkbjIQ/KtlecqXiUYTfG4CYVXGEaBp/umX6/jc+xHt6QMZ0RPe6fqvttKLYa
KEn9B+yI1bA0aMIl1zXU52LIMg8jcoFG7Szr8XwwQkMf0rWrrQqM6pBzHHqZQ8D0
l8evWGwI64bcIJ8wSXryvxusCdWoFWoHGX6KDdC2ECs9WXg3HvPW9WtYC5xtZulr
5jDYNZYUBWsUI8MFR++hGSgtl8SwtpRvofcKu0eOa4YVUA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:45 2025 by rpki-client