![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/UrqNp-Vz1DhCy1ma5kLETdhm26Q.roa
File: UrqNp-Vz1DhCy1ma5kLETdhm26Q.roa (raw, json)
Hash identifier: KSCjpD8a+s74vUrgzErrhB3fTuxqf066BkpMhm1J0g0=
Subject key identifier: 52:BA:8D:A7:E5:73:D4:38:42:CB:59:9A:E6:42:C4:4D:D8:66:DB:A4
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E1C
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/UrqNp-Vz1DhCy1ma5kLETdhm26Q.roa
Signing time: Wed 29 Sep 2021 02:39:59 +0000
ROA not before: Wed 29 Sep 2021 02:39:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7482
IP address blocks: 210.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3612 (0xe1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:59 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=52BA8DA7E573D43842CB599AE642C44DD866DBA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:b6:d2:a5:b5:62:ef:0e:5b:03:f7:fa:d0:
e5:23:96:46:e6:14:f4:ed:c3:7c:cf:5c:36:d5:19:
28:d4:3e:fa:02:6a:b3:04:66:03:b4:a4:eb:05:90:
14:9f:f4:1a:cd:e0:91:ad:b7:80:0f:26:32:ac:22:
bd:69:b4:db:5b:b4:95:95:0c:ed:4a:cf:f7:cc:b0:
58:ce:ea:c7:db:42:1a:98:35:4c:ca:61:76:cd:7d:
a4:ee:17:6d:5c:7b:c3:ff:21:c4:5f:0f:5a:c2:92:
32:89:6e:8a:94:c5:6e:07:6a:ee:dd:84:13:a6:20:
17:bf:0d:5b:38:39:84:ce:c6:a4:03:42:b0:ab:47:
43:08:07:5d:70:84:c6:d9:67:12:63:e5:e2:6b:b8:
5c:ba:01:f6:19:60:ef:f6:3b:98:9f:50:4a:23:23:
a1:1c:1f:f7:4c:90:7e:94:95:0f:4e:44:05:d5:66:
c3:e2:ff:42:cf:6f:f2:50:5a:f2:e1:65:fc:a8:08:
e9:cf:6a:89:bd:84:90:77:2e:49:7d:62:14:eb:79:
69:7a:94:0f:34:e6:f0:04:1a:a4:7b:5e:e1:03:c5:
5d:1b:bb:5f:f9:5f:38:b5:e6:89:cb:33:7e:47:f9:
73:17:b8:81:77:af:cb:cc:b4:b0:e8:f3:34:28:01:
96:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BA:8D:A7:E5:73:D4:38:42:CB:59:9A:E6:42:C4:4D:D8:66:DB:A4
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/UrqNp-Vz1DhCy1ma5kLETdhm26Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:76:10:e1:56:ad:a4:cf:66:f8:34:b6:86:ce:21:05:df:30:
f3:3c:fa:c3:3e:4d:a6:08:38:7c:77:0e:95:d9:99:18:35:db:
a1:f6:79:89:82:fa:f0:c4:22:d7:3e:15:f1:2f:bd:e6:41:7e:
ca:c2:2f:f1:a7:14:bd:47:88:0d:a8:13:5d:72:35:f3:97:7a:
e7:44:3e:d5:88:e0:90:8d:e3:bd:58:c7:56:8b:1b:b7:72:e8:
a6:f5:38:8d:bf:f1:bb:4a:b3:0d:32:ec:2b:d5:78:f3:9f:59:
be:17:af:5c:8e:e0:e1:fd:97:ad:f6:53:e1:e0:94:36:a5:aa:
6f:a7:88:88:61:fc:2f:c2:a7:0e:4d:2c:07:27:53:20:f4:7d:
9b:4b:fe:ca:83:48:82:ac:6f:21:a6:fc:7f:ac:66:11:07:59:
48:ee:71:8c:9d:5e:a3:31:27:2a:bc:86:5e:cd:1d:50:fd:10:
01:ed:f9:60:d1:ff:e7:f0:e3:57:1a:f8:d4:af:09:c5:d4:dd:
2a:fb:b6:5d:c3:8d:ed:24:95:a2:b6:50:53:e5:b5:94:e9:c4:
04:1e:c2:e4:d2:3e:a8:9a:3d:0a:fa:cc:d3:f3:f5:33:04:06:
15:25:de:f9:4c:01:15:f3:6e:46:b7:9f:b0:d9:9c:7f:bc:61:
e0:59:78:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:04:15 2025 by rpki-client