![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/pPNQiXBEaT9z_36TZX4M9ZaP1Gc.roa
File: pPNQiXBEaT9z_36TZX4M9ZaP1Gc.roa (raw, json)
Hash identifier: skXbnNkZBb6E5Pr2NbOTgJamQewyF5LYiZR/qaewRs4=
Subject key identifier: A4:F3:50:89:70:44:69:3F:73:FF:7E:93:65:7E:0C:F5:96:8F:D4:67
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C39
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/pPNQiXBEaT9z_36TZX4M9ZaP1Gc.roa
Signing time: Sun 07 Feb 2021 11:35:19 +0000
ROA not before: Sun 07 Feb 2021 11:35:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9311
IP address blocks: 210.63.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3129 (0xc39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:35:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A4F350897044693F73FF7E93657E0CF5968FD467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:06:28:aa:7c:19:5c:b6:a8:69:79:ba:3c:
9a:76:a6:55:93:e6:6e:5e:63:66:d3:c6:12:b7:71:
df:b8:84:a6:0f:fe:ae:d7:bd:92:93:d6:a2:db:77:
6b:7e:56:8c:f1:43:05:9d:98:fb:e4:9b:6a:13:b3:
03:74:f9:87:e5:49:34:7b:12:96:1f:8b:87:72:06:
31:ad:d6:18:ab:60:68:b0:50:6e:67:c6:fe:6f:fd:
6e:b3:6c:d6:29:0a:1e:08:de:03:05:94:50:10:db:
d2:73:5c:ff:18:90:08:e6:99:32:6c:f9:b7:c9:b1:
08:8b:d4:2b:31:9a:03:95:63:30:f7:53:6b:f6:31:
e2:bb:4b:56:12:4a:57:28:f1:7a:e6:ff:83:e5:d6:
af:0a:8a:8f:b7:04:35:c9:29:9e:20:60:2e:de:f9:
94:87:b3:a8:8f:5d:53:d8:75:93:6a:04:16:e6:9e:
2f:8c:cd:a0:d0:ca:35:dc:5a:84:d5:de:9d:2b:92:
5d:d2:de:76:c3:bf:9a:75:1c:35:73:8c:15:7b:61:
34:a7:72:73:6b:f3:d6:20:85:a9:54:f3:60:07:d3:
a2:88:f2:97:35:f4:8f:db:f0:08:61:07:ec:cd:59:
db:a5:58:7f:f4:b2:60:94:6b:48:b0:27:81:e1:3c:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F3:50:89:70:44:69:3F:73:FF:7E:93:65:7E:0C:F5:96:8F:D4:67
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/pPNQiXBEaT9z_36TZX4M9ZaP1Gc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.240.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:d7:b2:2d:be:d7:7d:0a:02:a8:03:db:55:e8:1a:05:90:8a:
d8:70:ea:79:df:69:85:71:4c:87:47:dd:7c:c9:be:da:5b:f5:
0e:65:b9:b4:7c:af:81:3c:08:a6:12:e7:5e:cc:f4:a4:99:13:
da:e2:99:2e:2d:72:3b:c4:6b:70:6a:76:c0:9d:e8:6e:08:96:
bf:a3:4e:73:60:ce:1b:5b:b0:d3:5a:49:a6:01:05:79:83:b5:
c5:2a:47:38:08:b8:11:b4:84:9f:ea:2a:78:7e:54:fd:61:eb:
39:6b:1f:66:f8:69:17:78:6c:5f:0c:0b:5a:29:a4:48:9d:97:
b6:5b:ba:bf:53:03:d4:3a:dd:91:09:f2:14:42:35:31:28:ab:
c0:3c:30:bc:60:88:62:2e:29:af:b3:c6:66:ac:7c:38:39:db:
31:6a:b1:7d:1c:d2:6c:0d:28:aa:b0:14:49:d5:cd:d2:7f:d3:
1f:9d:58:16:90:46:3a:3b:db:8d:f0:35:71:7c:4d:7e:33:b8:
fc:7c:63:10:17:66:a6:6b:8d:ce:80:b6:50:a3:92:79:e3:ef:
a5:6b:f1:b0:31:2f:9b:99:40:91:99:f2:5b:b1:84:6e:a5:aa:
66:6f:1b:bd:28:65:7c:0d:48:b0:25:62:9f:ff:80:9e:c4:8a:
f4:a2:12:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:18 2025 by rpki-client