Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/BHIS/1/3135312e3135382e362e302f32332d3234203d3e20323132393639.roa
File: 3135312e3135382e362e302f32332d3234203d3e20323132393639.roa (raw, json)
Hash identifier: g66apYgbNhFQA/s/Xvj16zu4hXDJuL5Fa8ux6Zav1qQ=
Subject key identifier: 57:4C:19:AE:9B:8A:E2:8A:12:4C:70:05:92:11:FE:E4:43:42:34:CF
Certificate issuer: /CN=9F397B838061280C2F2A887AC9D64012310492D8
Certificate serial: 703EE58E97B3FD9057ED429D4A41EB88AFB7E936
Authority key identifier: 9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/1/3135312e3135382e362e302f32332d3234203d3e20323132393639.roa
Signing time: Mon 11 May 2026 17:57:47 +0000
ROA not before: Mon 11 May 2026 17:52:47 +0000
ROA not after: Mon 10 May 2027 17:57:47 +0000
asID: 212969
IP address blocks: 151.158.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:3e:e5:8e:97:b3:fd:90:57:ed:42:9d:4a:41:eb:88:af:b7:e9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F397B838061280C2F2A887AC9D64012310492D8
Validity
Not Before: May 11 17:52:47 2026 GMT
Not After : May 10 17:57:47 2027 GMT
Subject: CN=574C19AE9B8AE28A124C70059211FEE4434234CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:bf:58:bd:7b:93:92:f6:19:59:a3:7e:e8:
fe:ef:8d:c6:4e:9a:8f:1c:e1:8e:fc:2f:f7:52:ba:
03:98:65:5a:29:c6:0d:73:bf:af:dc:07:04:cc:18:
5d:91:6f:3e:53:1f:d1:a3:7b:90:21:50:62:56:87:
e1:c7:7b:f0:3e:b7:43:c7:12:84:0c:8f:a7:25:71:
c6:c2:7d:39:e6:ad:ef:ef:60:65:cf:86:ba:86:b6:
d5:5c:68:10:7a:84:e6:3a:5c:5a:82:1a:5d:b2:1e:
5e:e6:64:0b:1c:45:ff:56:0a:2a:fa:4a:9f:68:a8:
44:cb:03:90:1b:19:83:36:fd:5f:68:cf:5b:5e:a0:
49:fc:2c:92:4d:ad:89:ab:4c:b3:0f:26:15:7e:5a:
b9:37:70:2d:6b:d0:16:19:74:8c:15:b8:9b:a9:0a:
6f:33:5f:05:f8:fe:07:a5:ea:9c:55:7f:3a:e3:10:
5a:94:46:d2:71:2f:fe:8f:75:2a:e0:f2:13:22:d1:
55:42:45:7d:26:2b:3a:d5:dd:b9:53:e2:58:90:4f:
16:cd:4b:ac:25:eb:ab:a6:9b:cd:74:05:e9:84:2c:
08:2a:d3:6d:85:9c:6c:45:e8:a6:e0:7d:91:8d:12:
b4:fb:93:36:be:14:26:72:b9:43:1c:a3:bb:ab:16:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4C:19:AE:9B:8A:E2:8A:12:4C:70:05:92:11:FE:E4:43:42:34:CF
X509v3 Authority Key Identifier:
keyid:9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/3135312e3135382e362e302f32332d3234203d3e20323132393639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.158.6.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:b7:90:af:23:64:99:3b:00:a0:12:48:ad:3d:3a:03:3a:c8:
4e:d9:67:65:41:40:46:6f:eb:23:7a:9e:51:e9:d3:10:80:76:
7b:a4:88:78:f6:ad:c8:93:ae:82:c9:e3:5b:fa:43:36:c6:40:
c6:a1:17:9b:4d:ee:2b:ae:fa:b4:65:aa:0b:c4:06:3a:ba:e1:
06:ad:5a:2e:11:cd:18:69:b8:fe:d4:2e:99:46:c2:61:14:6a:
61:48:b5:74:79:06:da:0c:ca:8e:49:65:ef:e3:0f:6e:b0:ef:
71:f5:28:32:36:46:46:5e:e2:ef:8a:77:75:b8:08:fe:9f:5a:
58:a3:4f:b7:1d:63:2b:35:e2:46:50:d9:3f:0a:60:44:a2:fc:
80:5f:bd:10:eb:4a:a4:5b:cb:0c:d3:de:24:52:5f:f0:59:1d:
59:ba:23:e8:6d:ca:4a:da:9c:80:2d:c0:77:17:e4:55:57:2c:
58:9c:a7:d1:0d:f1:15:4c:73:f6:e0:4e:10:80:35:d5:51:0d:
28:ec:df:d3:80:f4:32:07:91:3e:2c:f8:5a:0b:7d:07:3d:f7:
61:64:ae:af:15:52:97:46:2c:3a:9a:41:df:b6:4d:fb:3c:e6:
10:a0:81:b9:16:1a:8c:b9:9a:8c:72:9c:2c:3c:7e:6d:67:b2:
83:45:00:8e
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUcD7ljpez/ZBX7UKdSkHriK+36TYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQwMTIz
MTA0OTJEODAeFw0yNjA1MTExNzUyNDdaFw0yNzA1MTAxNzU3NDdaMDMxMTAvBgNV
BAMTKDU3NEMxOUFFOUI4QUUyOEExMjRDNzAwNTkyMTFGRUU0NDM0MjM0Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxD79YvXuTkvYZWaN+6P7vjcZO
mo8c4Y78L/dSugOYZVopxg1zv6/cBwTMGF2Rbz5TH9Gje5AhUGJWh+HHe/A+t0PH
EoQMj6clccbCfTnmre/vYGXPhrqGttVcaBB6hOY6XFqCGl2yHl7mZAscRf9WCir6
Sp9oqETLA5AbGYM2/V9oz1teoEn8LJJNrYmrTLMPJhV+Wrk3cC1r0BYZdIwVuJup
Cm8zXwX4/gel6pxVfzrjEFqURtJxL/6PdSrg8hMi0VVCRX0mKzrV3blT4liQTxbN
S6wl66umm810BemELAgq022FnGxF6KbgfZGNErT7kza+FCZyuUMco7urFhn5AgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUV0wZrpuK4ooSTHAFkhH+5ENCNM8wHwYDVR0j
BBgwFoAUnzl7g4BhKAwvKoh6ydZAEjEEktgwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkhJUy8x
LzlGMzk3QjgzODA2MTI4MEMyRjJBODg3QUM5RDY0MDEyMzEwNDkyRDguY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzMvOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQw
MTIzMTA0OTJEOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMS8zMTM1MzEyZTMxMzUzODJl
MzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMxMzIzOTM2Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGXngYwDQYJKoZIhvcNAQELBQADggEBAE+3kK8jZJk7AKASSK09OgM6yE7ZZ2VB
QEZv6yN6nlHp0xCAdnukiHj2rciTroLJ41v6QzbGQMahF5tN7iuu+rRlqgvEBjq6
4QatWi4RzRhpuP7ULplGwmEUamFItXR5BtoMyo5JZe/jD26w73H1KDI2RkZe4u+K
d3W4CP6fWlijT7cdYys14kZQ2T8KYESi/IBfvRDrSqRbywzT3iRSX/BZHVm6I+ht
ykranIAtwHcX5FVXLFicp9EN8RVMc/bgThCANdVRDSjs39OA9DIHkT4s+FoLfQc9
92Fkrq8VUpdGLDqaQd+2Tfs85hCggbkWGoy5moxynCw8fm1nsoNFAI4=
-----END CERTIFICATE-----
Generated at Wed May 13 02:47:35 2026 by rpki-client