![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LM_upifEbe52ssbF3K9Se0fBKZY.roa
File: LM_upifEbe52ssbF3K9Se0fBKZY.roa (raw, json)
Hash identifier: ZSl+1w3cHUdkATSx7MDuWfxN90Aa4owEh662NiMv78I=
Subject key identifier: 2C:CF:EE:A6:27:C4:6D:EE:76:B2:C6:C5:DC:AF:52:7B:47:C1:29:96
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 339A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LM_upifEbe52ssbF3K9Se0fBKZY.roa
Signing time: Mon 10 Feb 2025 13:51:35 +0000
ROA not before: Mon 10 Feb 2025 13:51:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13210 (0x339a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2CCFEEA627C46DEE76B2C6C5DCAF527B47C12996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:d5:2d:0c:7e:d1:46:75:15:59:2e:c0:ef:
ad:90:51:7c:be:07:e1:0b:2c:bf:f0:91:29:5a:b6:
41:5b:75:71:ec:27:a5:c0:f0:c9:de:19:e1:97:fa:
7c:0a:5d:c8:a5:b6:ea:00:70:15:3f:74:20:96:7c:
6f:88:9e:e8:76:45:13:b4:cd:c0:8e:0a:01:22:9c:
08:2b:44:b2:16:3f:56:f3:73:c4:ff:ff:74:b8:fd:
1d:7c:57:be:1e:2e:6e:f8:f3:d4:b6:7f:c6:24:ee:
4b:81:cc:d1:32:09:1f:34:65:3a:76:e9:be:0a:ef:
56:68:fa:7b:aa:8d:2d:31:a1:f2:79:ab:61:dc:88:
e2:fa:f0:32:a0:15:7c:a0:01:87:26:54:19:dc:a9:
eb:32:78:5b:30:1e:20:ad:54:ff:cb:67:0a:b5:bd:
1d:d1:39:1b:79:62:71:95:e3:b0:40:e9:24:75:b1:
1d:89:33:d4:aa:42:f8:99:de:05:0a:a6:63:21:11:
5d:73:44:a8:11:74:8c:0f:89:bd:dc:29:72:49:e0:
ff:94:b8:f3:f5:dc:56:6d:06:f4:79:b0:db:f4:eb:
e8:aa:a8:c6:58:d2:62:4e:33:d2:22:8d:50:2b:d0:
d8:c0:1f:a6:0b:a9:50:64:7c:9c:b8:02:2a:da:a1:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CF:EE:A6:27:C4:6D:EE:76:B2:C6:C5:DC:AF:52:7B:47:C1:29:96
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LM_upifEbe52ssbF3K9Se0fBKZY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:59:da:21:ce:d2:1f:98:be:68:4b:62:1f:c6:f7:16:49:fb:
40:b6:32:d6:8d:92:0b:66:d7:9f:14:c0:9a:79:77:28:a1:ae:
96:28:4b:53:18:4c:2e:28:11:d0:4d:b1:57:dc:02:72:5f:d8:
d4:de:fa:45:b7:1a:cb:57:c0:57:c5:b6:88:b0:dd:04:58:64:
67:81:a4:a1:e2:05:14:de:51:70:3a:9d:17:73:c0:7c:51:59:
f1:ec:d9:2c:58:9a:bb:6b:36:4a:b7:7f:99:23:6d:a1:68:c1:
22:ef:90:3a:d4:e5:1c:b6:88:09:1e:47:2c:da:b3:4c:61:b4:
0d:67:f4:06:e4:1d:7d:65:07:ba:b9:ba:ba:a3:e8:b3:84:69:
0c:c1:68:d9:42:00:1f:06:51:9b:81:b5:dd:19:e9:84:e5:8e:
ac:bf:c6:a6:f9:70:8c:73:86:08:b9:e1:67:00:82:c2:f0:a3:
d9:36:73:56:20:6d:cc:f6:1b:1f:ba:1e:c7:7e:5a:5c:87:d5:
e8:18:d5:58:b9:60:73:c4:c5:91:02:4c:13:0b:01:cb:42:8d:
7b:eb:ff:48:ea:a7:c5:09:bc:a2:6e:d8:9d:d0:59:db:4b:17:
0f:ec:9e:13:c9:a2:ee:86:ed:8b:bb:21:89:78:42:f9:d7:d2:
5f:19:da:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:23 2025 by rpki-client