Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/3130332e3232342e3230302e302f32322d3232203d3e203138343239.roa
File: 3130332e3232342e3230302e302f32322d3232203d3e203138343239.roa (raw, json)
Hash identifier: s7ol8enMndfC9viGyWJIJYIfjjT1UoMvxAJ2TTT0JxQ=
Subject key identifier: 8F:10:F7:FA:B9:C5:37:2C:79:AE:8E:7E:90:2D:15:46:88:6D:DB:1E
Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial: 0E3A87A8C155F1629FBD9582D9C5CF248162A18A
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/3130332e3232342e3230302e302f32322d3232203d3e203138343239.roa
Signing time: Mon 11 May 2026 17:11:04 +0000
ROA not before: Mon 11 May 2026 17:06:04 +0000
ROA not after: Mon 10 May 2027 17:11:04 +0000
asID: 18429
IP address blocks: 103.224.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:3a:87:a8:c1:55:f1:62:9f:bd:95:82:d9:c5:cf:24:81:62:a1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Validity
Not Before: May 11 17:06:04 2026 GMT
Not After : May 10 17:11:04 2027 GMT
Subject: CN=8F10F7FAB9C5372C79AE8E7E902D1546886DDB1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:28:7e:56:e5:22:89:35:f0:13:d5:d0:f1:
1d:e6:ce:73:7c:89:60:67:50:08:37:d2:84:07:9b:
13:93:5d:3b:b4:7b:ad:2b:bb:d1:2f:32:d7:ab:86:
42:84:6a:0b:8e:8c:79:c7:39:11:0c:75:ce:35:15:
80:0e:11:be:07:7c:a5:df:4f:5b:aa:24:86:e9:8f:
0b:9a:97:25:3e:f3:31:e5:8e:95:ef:2c:27:00:b2:
19:ee:ad:77:14:f8:fd:3f:b3:cd:24:47:3b:aa:0f:
bd:48:d1:20:75:87:4a:0e:05:2a:1c:86:0d:48:7f:
16:5b:1e:4f:5f:ea:bf:96:f2:ec:63:64:2f:65:c7:
b0:1c:27:c9:1c:27:1d:ae:ca:3d:2b:a1:96:56:89:
94:3c:fe:c6:40:18:8c:44:e3:d1:f3:86:51:1b:11:
88:ef:ca:40:c1:e4:62:25:30:a1:2e:e7:8b:84:4d:
cd:5a:1e:bc:98:d3:f3:b4:12:32:2a:13:ad:4e:4e:
ce:cc:d5:f1:4c:c7:b1:0a:47:d4:64:9b:3f:6e:77:
83:7d:3e:27:8b:df:e3:13:3c:49:e6:49:42:cc:3b:
55:8d:ed:29:16:ad:ac:7d:35:5e:ad:59:63:1e:da:
a3:ab:13:9e:67:43:16:d8:59:9a:11:f3:e5:30:54:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:10:F7:FA:B9:C5:37:2C:79:AE:8E:7E:90:2D:15:46:88:6D:DB:1E
X509v3 Authority Key Identifier:
keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/3130332e3232342e3230302e302f32322d3232203d3e203138343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.224.200.0/22
Signature Algorithm: sha256WithRSAEncryption
77:46:b6:eb:d2:3b:1b:47:69:c0:7b:b8:4c:cd:01:3b:45:60:
5d:c3:68:53:f0:1e:f6:56:be:07:bb:d1:aa:02:56:b1:ea:94:
30:73:a8:09:cd:26:9b:a7:0d:7f:cc:dd:e4:b1:e5:98:22:c1:
b3:8c:8c:47:2d:b9:32:2a:46:f9:f3:4f:98:5e:d5:0f:40:9f:
a5:93:3f:c0:d5:98:e4:e9:83:6c:ac:62:d4:33:ac:c5:50:ae:
61:28:2a:99:9e:bb:e0:86:67:91:01:b4:02:ba:b8:1d:a8:4e:
68:7b:37:62:11:0d:09:37:c3:2f:e1:6d:99:01:5a:02:99:cd:
70:84:e3:6b:64:01:62:43:d1:d6:e9:fe:bd:79:31:7d:a4:0f:
8e:a5:f9:f2:58:70:a4:89:fe:83:bf:8e:a3:ba:9d:6b:34:e8:
46:4a:fe:44:2b:a5:af:7c:39:4f:a4:52:e2:f6:c0:bf:ad:f0:
a3:ef:4f:d9:3f:6b:f5:78:6c:f0:5e:e0:6a:13:87:8a:bf:c4:
76:b0:c0:e6:12:4b:85:d2:be:a3:a5:1b:11:02:64:cf:33:7d:
f5:c4:b8:b6:0f:30:54:fc:f9:2f:6d:12:3f:ab:77:67:6b:f0:
44:75:9e:a3:1f:4d:74:99:6f:a9:c6:24:d6:fc:4c:65:b1:1c:
1f:9a:6e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:18 2026 by rpki-client