![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/PCuNpb5WqkY-m2Y-nbFaca2bElU.roa
File: PCuNpb5WqkY-m2Y-nbFaca2bElU.roa (raw, json)
Hash identifier: y33HaJZ2j93IzZmtTfH/RgTw5ZPrynnPXusIAwD4V7k=
Subject key identifier: 3C:2B:8D:A5:BE:56:AA:46:3E:9B:66:3E:9D:B1:5A:71:AD:9B:12:55
Certificate issuer: /CN=364776C68F9B6CDCA080E26B01F3187E072F5C99
Certificate serial: 099E
Authority key identifier: 36:47:76:C6:8F:9B:6C:DC:A0:80:E2:6B:01:F3:18:7E:07:2F:5C:99
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Nkd2xo-bbNyggOJrAfMYfgcvXJk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/PCuNpb5WqkY-m2Y-nbFaca2bElU.roa
Signing time: Tue 29 Sep 2020 10:03:03 +0000
ROA not before: Tue 29 Sep 2020 10:03:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131670
IP address blocks: 103.140.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2462 (0x99e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=364776C68F9B6CDCA080E26B01F3187E072F5C99
Validity
Not Before: Sep 29 10:03:03 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3C2B8DA5BE56AA463E9B663E9DB15A71AD9B1255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6f:20:f1:a2:a5:85:1c:ee:d7:78:ec:3e:89:
1f:a8:7b:61:1c:f6:74:13:51:cb:fc:b8:2b:a1:e8:
ce:eb:0d:2c:f1:2b:47:8d:4c:de:56:ee:e7:cc:bc:
93:4d:74:7c:1c:9b:87:2d:ca:9b:6d:e7:45:7f:84:
d2:22:41:b0:c1:44:9e:42:66:77:78:a7:21:ae:da:
bc:6c:6e:43:6c:76:70:3e:4b:89:5b:96:04:83:5f:
b6:6a:22:d7:6a:c0:9c:c5:41:d2:71:72:11:6f:9f:
24:aa:5b:c0:c3:a8:a9:62:ca:3f:ca:aa:c0:14:62:
54:1f:fc:a0:ab:90:59:9a:ac:49:d7:f7:52:fe:0d:
2a:4d:c2:43:26:f2:9b:98:5f:26:0d:17:35:2a:d8:
c3:da:8f:71:d5:c0:35:67:c9:d1:84:28:d1:ed:3a:
fb:3d:62:7f:69:e8:b2:a3:1d:1b:5e:3f:3a:cc:15:
b1:6e:fe:e1:1c:ff:38:84:5f:dd:93:c7:fe:52:19:
56:0b:90:d7:ea:e7:43:d7:6d:ad:96:d4:20:05:0a:
b7:81:f3:95:cb:5a:05:8c:a3:7b:64:ee:d3:ab:6b:
57:19:4b:17:46:15:a7:11:35:ea:c3:e8:4f:f3:ff:
07:74:31:91:69:24:04:92:b1:3c:96:b6:1a:1f:91:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2B:8D:A5:BE:56:AA:46:3E:9B:66:3E:9D:B1:5A:71:AD:9B:12:55
X509v3 Authority Key Identifier:
keyid:36:47:76:C6:8F:9B:6C:DC:A0:80:E2:6B:01:F3:18:7E:07:2F:5C:99
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/Nkd2xo-bbNyggOJrAfMYfgcvXJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nkd2xo-bbNyggOJrAfMYfgcvXJk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/PCuNpb5WqkY-m2Y-nbFaca2bElU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.111.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:9b:aa:c3:ea:51:5d:49:a3:31:f1:98:29:0c:fa:8e:28:e9:
3d:b8:4d:4c:a8:4d:13:94:cf:f8:5b:cf:9e:db:2a:ef:cd:ba:
72:d7:2e:1d:8b:0f:c3:0a:43:ad:d1:d6:8e:11:23:d0:76:bf:
47:55:1d:62:8f:92:5a:2b:f5:76:a3:dc:f7:21:c5:2a:f4:6f:
65:88:02:99:da:9b:94:46:d8:30:a0:b8:b1:65:c1:f7:51:c6:
f1:ed:4a:dd:bf:49:6d:70:fb:8a:ec:8c:a1:45:e7:b9:8f:75:
a1:fc:44:bd:50:66:ab:b4:f0:af:62:06:6b:26:78:2d:9a:73:
32:e2:af:d5:88:5b:e6:48:72:7c:1b:c2:7d:cb:6c:be:a4:f9:
96:b1:13:0e:9f:bf:a2:46:84:a8:5c:16:fd:40:2e:ac:9c:6b:
ab:f5:fc:5e:3e:90:81:62:3d:9f:44:87:43:15:b3:ea:63:03:
eb:73:f6:c6:0e:de:29:08:f6:71:c5:d3:9a:3f:e1:ba:bd:ac:
4d:3d:03:c9:70:18:c6:64:fd:ae:28:f7:cc:52:74:90:27:73:
eb:1a:05:5b:c9:17:b8:ed:56:d0:32:9e:1a:44:9d:ec:7d:49:
a9:e5:80:c3:c5:84:84:1a:3a:b3:5c:48:e1:b1:b6:61:63:99:
65:15:f3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:45 2025 by rpki-client