![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCETECH/dqEvc27_bBvGC_DLFqiTu7nrWI8.roa
File: dqEvc27_bBvGC_DLFqiTu7nrWI8.roa (raw, json)
Hash identifier: gxOH4BAt3zIg+Cldbx42+J51xa/Hfx3WhRoDsmfBTyo=
Subject key identifier: 76:A1:2F:73:6E:FF:6C:1B:C6:0B:F0:CB:16:A8:93:BB:B9:EB:58:8F
Certificate issuer: /CN=7E9CEF27C8DED13506B3399D992ECFF626B57951
Certificate serial: 0484
Authority key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/dqEvc27_bBvGC_DLFqiTu7nrWI8.roa
Signing time: Mon 10 Feb 2025 13:57:46 +0000
ROA not before: Mon 10 Feb 2025 13:57:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 208223
IP address blocks: 160.25.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1156 (0x484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951
Validity
Not Before: Feb 10 13:57:46 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=76A12F736EFF6C1BC60BF0CB16A893BBB9EB588F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:e1:79:9c:b7:87:4f:b9:0d:fb:f2:d7:8f:
30:47:f5:ab:23:e8:94:9d:df:18:7d:33:1b:91:ac:
1a:87:1e:19:e7:86:fe:5c:13:bb:52:c7:a4:19:41:
36:0a:0a:fe:f9:54:93:01:bc:40:a2:c3:b9:43:38:
28:6c:db:62:cf:f4:d3:91:8d:a0:ba:57:1a:f7:a9:
2b:15:dc:72:9c:d0:a9:fc:a8:5a:04:65:16:65:23:
fc:d0:88:f6:2d:38:d1:02:27:0f:36:0f:02:2a:fd:
f6:0d:bd:40:fa:ed:fc:0a:4e:29:74:16:a0:68:f7:
5b:31:2d:9b:84:28:ba:3e:a0:ae:d7:ae:9d:e0:10:
73:d5:f7:b0:60:04:7f:67:83:42:a9:1b:43:b7:77:
d6:8b:fa:1c:68:43:21:f9:ec:0e:02:68:d1:db:bb:
5d:5d:3c:f7:f2:f2:c6:70:3f:68:fe:dd:9f:a5:49:
65:9a:0e:18:9c:b6:f4:2b:ee:4d:fe:64:73:dd:3e:
31:d3:e2:56:f4:79:ac:bc:ad:3e:80:5d:70:1b:3f:
3c:2f:03:ac:22:ac:a3:6a:fc:ae:36:52:29:3e:4b:
6a:1e:02:1f:15:3c:6e:4c:b6:cf:7b:c5:8a:42:64:
a2:5b:4b:12:53:0b:06:f1:4e:7b:fe:f3:ca:92:1d:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A1:2F:73:6E:FF:6C:1B:C6:0B:F0:CB:16:A8:93:BB:B9:EB:58:8F
X509v3 Authority Key Identifier:
keyid:7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/dqEvc27_bBvGC_DLFqiTu7nrWI8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.104.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:d8:26:5e:95:dc:ae:17:a7:4e:fd:1f:6d:b0:36:9b:e6:35:
b2:51:b7:f4:3f:5f:20:ef:c2:3b:c1:0c:96:bd:26:b1:77:c2:
20:28:f8:24:db:4d:d4:e1:ab:a9:b7:64:e5:0c:d6:84:82:03:
00:57:93:d9:d1:a1:76:9d:7f:c2:47:f4:af:ca:57:fd:53:53:
f0:e9:a0:e9:6d:5c:fd:c7:b1:42:19:91:6f:3d:1a:80:18:f7:
fd:87:a2:67:c7:c6:b7:5d:3c:35:1a:4d:74:de:a0:f4:63:8d:
8a:03:d0:d0:40:0f:36:c4:88:da:4d:2a:a2:3e:72:c3:63:6d:
e8:59:8d:e4:30:fa:78:6e:32:66:95:9c:f6:bf:6d:a9:09:aa:
e9:18:31:99:a9:4e:5b:fc:49:86:ad:8a:7c:30:fd:81:fa:7e:
2f:0d:17:98:8c:ea:20:4d:b7:2c:4a:51:1a:ec:aa:74:40:5d:
83:e7:f8:e2:ff:76:80:6a:5b:95:82:53:ab:17:58:75:02:6d:
1b:9b:2c:73:e8:3a:2e:27:70:8c:01:4f:f5:be:1e:d1:41:ff:
b1:74:01:12:11:34:94:46:4c:9f:ed:c9:d1:dc:d0:bd:dd:4f:
79:d4:c5:77:a1:af:15:f2:ed:54:a3:8a:a4:b9:e1:dc:6a:9d:
da:11:f4:44
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0U5
Q0VGMjdDOERFRDEzNTA2QjMzOTlEOTkyRUNGRjYyNkI1Nzk1MTAeFw0yNTAyMTAx
MzU3NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc2QTEyRjczNkVGRjZD
MUJDNjBCRjBDQjE2QTg5M0JCQjlFQjU4OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzzeF5nLeHT7kN+/LXjzBH9asj6JSd3xh9MxuRrBqHHhnnhv5c
E7tSx6QZQTYKCv75VJMBvECiw7lDOChs22LP9NORjaC6Vxr3qSsV3HKc0Kn8qFoE
ZRZlI/zQiPYtONECJw82DwIq/fYNvUD67fwKTil0FqBo91sxLZuEKLo+oK7Xrp3g
EHPV97BgBH9ng0KpG0O3d9aL+hxoQyH57A4CaNHbu11dPPfy8sZwP2j+3Z+lSWWa
DhictvQr7k3+ZHPdPjHT4lb0eay8rT6AXXAbPzwvA6wirKNq/K42Uik+S2oeAh8V
PG5Mts97xYpCZKJbSxJTCwbxTnv+88qSHVolAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUdqEvc27/bBvGC/DLFqiTu7nrWI8wHwYDVR0jBBgwFoAUfpzvJ8je0TUGszmd
mS7P9ia1eVEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NFVEVD
SC9mcHp2SjhqZTBUVUdzem1kbVM3UDlpYTFlVkUuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL2ZwenZKOGplMFRVR3N6bWRtUzdQOWlhMWVWRS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDRVRFQ0gvZHFFdmMyN19iQnZHQ19E
TEZxaVR1N25yV0k4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AKAZaDANBgkqhkiG9w0BAQsFAAOCAQEA3dgmXpXcrhenTv0fbbA2m+Y1slG39D9f
IO/CO8EMlr0msXfCICj4JNtN1OGrqbdk5QzWhIIDAFeT2dGhdp1/wkf0r8pX/VNT
8Omg6W1c/cexQhmRbz0agBj3/YeiZ8fGt108NRpNdN6g9GONigPQ0EAPNsSI2k0q
oj5yw2Nt6FmN5DD6eG4yZpWc9r9tqQmq6RgxmalOW/xJhq2KfDD9gfp+Lw0XmIzq
IE23LEpRGuyqdEBdg+f44v92gGpblYJTqxdYdQJtG5ssc+g6LidwjAFP9b4e0UH/
sXQBEhE0lEZMn+3J0dzQvd1PedTFd6GvFfLtVKOKpLnh3Gqd2hH0RA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:07 2025 by rpki-client