Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/BHIS/1/3135312e3135382e362e302f32332d3234203d3e20313532363136.roa
File: 3135312e3135382e362e302f32332d3234203d3e20313532363136.roa (raw, json)
Hash identifier: i1SCJ8GhyQLw1P2Ps8s9Plw8FCUopeJLu1mfg5xNyLQ=
Subject key identifier: E5:9F:AF:D2:9B:3A:83:E4:F2:B1:49:01:CB:44:5B:7B:C9:14:A3:1A
Certificate issuer: /CN=9F397B838061280C2F2A887AC9D64012310492D8
Certificate serial: 23468EB7B79CDC5D247CCF9FFAABE0FD2C5F61FC
Authority key identifier: 9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/1/3135312e3135382e362e302f32332d3234203d3e20313532363136.roa
Signing time: Mon 11 May 2026 17:57:46 +0000
ROA not before: Mon 11 May 2026 17:52:46 +0000
ROA not after: Mon 10 May 2027 17:57:46 +0000
asID: 152616
IP address blocks: 151.158.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:46:8e:b7:b7:9c:dc:5d:24:7c:cf:9f:fa:ab:e0:fd:2c:5f:61:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F397B838061280C2F2A887AC9D64012310492D8
Validity
Not Before: May 11 17:52:46 2026 GMT
Not After : May 10 17:57:46 2027 GMT
Subject: CN=E59FAFD29B3A83E4F2B14901CB445B7BC914A31A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ff:7d:2c:bd:9b:6a:19:1c:e9:38:c7:c4:18:
0c:13:63:9b:9b:d0:33:d3:0d:e8:53:9d:6d:cd:62:
cc:03:5b:e2:40:4b:7b:8b:07:26:47:e3:3e:60:da:
dc:bf:7f:09:3d:0f:ce:e1:9f:f2:01:17:06:71:11:
d7:30:d0:61:4d:eb:19:dd:8f:19:96:7a:8e:b3:e1:
f4:2b:73:af:9f:bf:a6:2a:31:78:b0:1c:59:d9:d0:
99:c9:02:95:6b:06:8b:5b:89:bf:cd:7f:58:41:fd:
ef:1a:1f:e4:02:46:14:9e:bc:a7:df:a6:57:5c:3b:
9f:07:58:9a:4d:17:22:1a:63:7a:6e:c0:65:24:30:
da:a4:36:4d:8c:98:93:0f:c3:75:86:bf:dc:22:b5:
0f:6b:f4:03:88:e8:c7:58:97:90:e6:27:a0:af:e3:
9a:a1:8d:8f:55:29:9a:b2:38:63:9f:25:3a:1f:e7:
70:c1:85:6b:e5:23:49:22:76:83:55:64:e3:0e:95:
46:8c:55:40:c7:87:bb:ef:73:49:a0:12:ac:e9:89:
75:87:38:f9:48:66:6a:cb:2f:f6:9f:19:40:79:c7:
3d:11:a0:1b:56:2a:ef:a1:1b:3d:9c:f2:0b:21:b4:
90:5b:15:cc:25:56:31:9c:78:63:8d:04:78:c2:c9:
93:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9F:AF:D2:9B:3A:83:E4:F2:B1:49:01:CB:44:5B:7B:C9:14:A3:1A
X509v3 Authority Key Identifier:
keyid:9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/3135312e3135382e362e302f32332d3234203d3e20313532363136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.158.6.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:93:d3:b2:c4:e4:8a:c5:41:a1:c0:cf:28:f9:2e:2f:20:78:
39:9d:d2:b5:60:f8:1c:ae:ce:f4:75:88:7a:b9:12:59:7d:81:
2b:30:1a:1f:b3:69:81:86:d6:f0:92:dc:1a:c6:79:14:54:81:
2b:a3:73:2d:bc:d3:1a:12:d7:f6:a9:51:5d:7e:8c:4c:56:62:
2e:bc:b4:3f:ab:63:b0:b3:b7:e4:ff:f2:86:82:6d:b8:6f:2b:
05:73:cf:1b:51:55:42:29:eb:7b:89:c4:b2:a3:dd:a6:02:69:
df:27:ee:75:a4:c1:f5:81:a0:05:d9:ac:e4:23:cc:d7:c4:11:
ce:23:f1:f2:21:21:26:49:f1:66:f7:f1:80:ed:e2:53:10:54:
a7:a3:b7:b1:71:c8:95:9d:0a:0f:96:72:0f:b3:c6:f8:59:24:
be:12:db:ce:c4:f3:ad:61:85:4e:a4:dd:bf:df:05:fe:a4:0d:
8d:a9:23:da:e5:18:b2:d2:f6:90:61:14:af:92:41:dd:a6:88:
fe:4c:71:2f:d9:a6:34:d5:74:e1:30:4d:13:c9:d9:cf:e0:4d:
0a:c6:e8:ab:f9:f8:1e:d8:c9:ab:ea:a5:e0:50:48:22:0f:cd:
ea:cf:a2:8b:3a:65:a4:0f:5d:c4:3f:50:10:8b:a7:77:db:33:
ce:e5:5b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:50 2026 by rpki-client