![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/VBwRnigHm7-g8JfFAzky33XmiLQ.roa
File: VBwRnigHm7-g8JfFAzky33XmiLQ.roa (raw, json)
Hash identifier: nEyrsFtW85qNrpgTuMJxnzqgU+wii5an1KpLU2lAIT0=
Subject key identifier: 54:1C:11:9E:28:07:9B:BF:A0:F0:97:C5:03:39:32:DF:75:E6:88:B4
Certificate issuer: /CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
Certificate serial: 0914
Authority key identifier: 4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/VBwRnigHm7-g8JfFAzky33XmiLQ.roa
Signing time: Wed 29 Sep 2021 02:44:21 +0000
ROA not before: Wed 29 Sep 2021 02:44:21 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131149
IP address blocks: 2403:81c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2324 (0x914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
Validity
Not Before: Sep 29 02:44:21 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=541C119E28079BBFA0F097C5033932DF75E688B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:88:f9:18:67:d2:b6:84:5a:15:c9:e9:7e:
bf:df:68:18:4b:a5:ce:6d:0f:ea:65:9b:5e:9a:10:
cc:34:9e:de:e4:a5:c1:15:27:84:67:24:36:a9:af:
e5:2e:b7:a9:8e:66:c5:b0:7b:7c:9d:4f:52:c3:e2:
83:85:2e:ca:b3:bb:66:8c:e4:89:4a:47:7f:03:23:
00:45:33:e1:21:3c:c4:e8:fa:77:ce:af:eb:d1:0e:
25:87:89:93:d3:ac:2e:8f:ae:03:00:33:f1:97:f2:
c2:f6:d5:49:e0:00:e8:44:49:92:8d:f4:ec:88:16:
30:da:0d:31:21:00:aa:92:f2:86:63:cb:6f:7c:32:
02:27:d5:47:8d:e1:c3:2f:82:6f:c7:43:c8:75:b0:
9a:a9:3b:ca:3f:9f:97:2f:d7:3a:6d:e8:d4:4c:d7:
72:67:61:7b:10:57:8f:7b:3a:ad:32:9a:fa:9e:bd:
93:6a:56:d0:97:b3:00:5e:f9:26:a5:99:e7:7a:90:
2c:ca:3d:e4:a9:ca:80:07:00:79:b4:5a:8f:95:3c:
91:9d:5c:90:60:8e:2a:f5:cb:29:b0:80:3d:f0:ef:
83:e6:0c:67:c2:01:70:15:12:97:79:f9:1b:0a:2f:
d0:79:19:f0:ad:26:c0:6b:24:c4:a9:58:13:b1:8c:
9a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1C:11:9E:28:07:9B:BF:A0:F0:97:C5:03:39:32:DF:75:E6:88:B4
X509v3 Authority Key Identifier:
keyid:4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/TmCbp0GG0LDjoanAENod8FWaGYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/VBwRnigHm7-g8JfFAzky33XmiLQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:81c0::/32
Signature Algorithm: sha256WithRSAEncryption
99:a3:cc:a9:bb:40:97:ca:65:89:f3:53:02:7d:92:93:cc:34:
c0:7d:97:4f:95:1e:0d:ed:2f:48:2e:4a:a6:b0:de:84:0c:75:
b1:5f:e2:52:a4:c5:89:b1:aa:60:c9:aa:0a:15:61:aa:16:12:
f8:9f:28:28:af:6a:5e:70:e6:4a:c5:2a:fa:1d:59:5b:22:3a:
25:8b:08:33:75:f6:44:2b:d1:12:0d:c7:d2:12:12:bc:15:3e:
ab:ee:10:37:6b:33:30:6f:d4:fa:bd:e9:a5:67:dd:ec:6a:cd:
5f:7e:f0:99:80:15:a4:d3:9d:47:f4:a9:91:a7:72:d6:c1:18:
41:0e:fe:64:62:13:35:18:c6:67:86:91:54:d2:a6:1f:9a:e3:
88:25:89:da:7a:22:f8:fd:94:08:1b:5e:32:e9:0c:af:82:4f:
50:85:74:00:e9:38:82:8d:36:75:a9:20:42:a8:1f:96:31:96:
8d:67:81:14:5f:de:1c:7d:2d:74:d3:a9:d9:ec:3c:3a:06:9d:
29:63:b5:7c:3c:0f:3d:24:2d:6b:25:53:36:57:d9:bb:c1:f7:
55:0c:c8:c9:a6:d8:b9:78:e1:ed:7f:59:93:46:a4:36:d7:de:
98:2d:f7:f1:50:bd:e3:58:ad:06:42:e5:3e:8f:5a:67:6f:f2:
ad:25:35:18
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgICCRQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEU2
MDlCQTc0MTg2RDBCMEUzQTFBOUMwMTBEQTFERjA1NTlBMTk4MjAeFw0yMTA5Mjkw
MjQ0MjFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDU0MUMxMTlFMjgwNzlC
QkZBMEYwOTdDNTAzMzkzMkRGNzVFNjg4QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDa7Ij5GGfStoRaFcnpfr/faBhLpc5tD+plm16aEMw0nt7kpcEV
J4RnJDapr+Uut6mOZsWwe3ydT1LD4oOFLsqzu2aM5IlKR38DIwBFM+EhPMTo+nfO
r+vRDiWHiZPTrC6PrgMAM/GX8sL21UngAOhESZKN9OyIFjDaDTEhAKqS8oZjy298
MgIn1UeN4cMvgm/HQ8h1sJqpO8o/n5cv1zpt6NRM13JnYXsQV497Oq0ymvqevZNq
VtCXswBe+Salmed6kCzKPeSpyoAHAHm0Wo+VPJGdXJBgjir1yymwgD3w74PmDGfC
AXAVEpd5+RsKL9B5GfCtJsBrJMSpWBOxjJrnAgMBAAGjggH1MIIB8TAdBgNVHQ4E
FgQUVBwRnigHm7+g8JfFAzky33XmiLQwHwYDVR0jBBgwFoAUTmCbp0GG0LDjoanA
ENod8FWaGYIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVENP
TVRXL1RtQ2JwMEdHMExEam9hbkFFTm9kOEZXYUdZSS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvVG1DYnAwR0cwTERqb2FuQUVOb2Q4RldhR1lJLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVENPTVRXL1ZCd1JuaWdIbTct
ZzhKZkZBemt5MzNYbWlMUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC
MAcDBQAkA4HAMA0GCSqGSIb3DQEBCwUAA4IBAQCZo8ypu0CXymWJ81MCfZKTzDTA
fZdPlR4N7S9ILkqmsN6EDHWxX+JSpMWJsapgyaoKFWGqFhL4nygor2pecOZKxSr6
HVlbIjoliwgzdfZEK9ESDcfSEhK8FT6r7hA3azMwb9T6vemlZ93sas1ffvCZgBWk
051H9KmRp3LWwRhBDv5kYhM1GMZnhpFU0qYfmuOIJYnaeiL4/ZQIG14y6Qyvgk9Q
hXQA6TiCjTZ1qSBCqB+WMZaNZ4EUX94cfS1006nZ7Dw6Bp0pY7V8PA89JC1rJVM2
V9m7wfdVDMjJpti5eOHtf1mTRqQ2196YLffxUL3jWK0GQuU+j1pnb/KtJTUY
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:11 2025 by rpki-client