Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/3132332e35302e35362e302f32312d3234203d3e203138343239.roa
File: 3132332e35302e35362e302f32312d3234203d3e203138343239.roa (raw, json)
Hash identifier: u3+IeqUn5GES28Ix7HLjuDiP/Y/bbphSFf6XD8x2GpE=
Subject key identifier: C3:58:DD:AA:0A:B3:C2:20:45:43:37:34:33:0C:C2:C9:39:47:40:CD
Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial: 60601B8C1091E894453B428B98380BA6E6391FC9
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/3132332e35302e35362e302f32312d3234203d3e203138343239.roa
Signing time: Mon 11 May 2026 17:26:54 +0000
ROA not before: Mon 11 May 2026 17:21:54 +0000
ROA not after: Mon 10 May 2027 17:26:54 +0000
asID: 18429
IP address blocks: 123.50.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:60:1b:8c:10:91:e8:94:45:3b:42:8b:98:38:0b:a6:e6:39:1f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Validity
Not Before: May 11 17:21:54 2026 GMT
Not After : May 10 17:26:54 2027 GMT
Subject: CN=C358DDAA0AB3C22045433734330CC2C9394740CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b8:d8:01:56:49:43:dc:38:f2:18:d4:8c:6d:
ac:17:02:71:23:d6:30:a3:15:50:7f:39:60:00:d4:
b6:d7:89:7b:10:3e:ad:12:9b:d7:20:c3:ea:ae:1d:
ba:a3:d0:29:c7:dc:98:44:61:df:b3:1f:83:a9:77:
7a:88:c1:9a:ab:34:fb:40:da:61:d3:df:5d:e1:54:
aa:21:12:9d:9b:86:3a:9c:0c:31:f0:d9:b5:57:da:
88:c2:62:6b:a1:61:db:c4:7d:9f:91:b2:8d:a4:f9:
fb:3a:0c:e9:f2:35:0f:b9:51:33:a9:f3:23:c0:38:
28:d4:a1:76:a7:d6:58:d3:4b:ef:b7:51:df:79:c7:
2e:c6:57:29:af:20:00:60:09:05:fe:a7:38:90:81:
eb:8a:48:aa:fc:32:0b:f3:3d:88:0f:02:9d:f5:bd:
53:03:0d:61:21:50:e1:ed:97:94:d2:d9:8a:f9:91:
fa:54:c0:05:a4:c0:6c:00:26:8b:e0:4d:70:aa:e5:
58:3f:4a:d4:f1:2b:59:7b:df:b2:e0:ea:e9:d6:7f:
e5:af:6f:6f:60:3a:44:ba:cb:c1:70:02:47:8b:6a:
d5:d6:a5:7c:95:d8:df:8c:a2:86:27:3d:c9:65:8b:
35:82:54:68:76:26:cd:59:23:ab:f4:98:d5:19:61:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:58:DD:AA:0A:B3:C2:20:45:43:37:34:33:0C:C2:C9:39:47:40:CD
X509v3 Authority Key Identifier:
keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/3132332e35302e35362e302f32312d3234203d3e203138343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.50.56.0/21
Signature Algorithm: sha256WithRSAEncryption
14:d8:a1:56:fc:89:16:3b:ed:5b:8d:2e:e6:28:6f:56:82:c3:
28:60:f9:93:63:be:6e:bc:8b:26:14:ad:59:7e:a6:ff:33:1f:
14:30:87:d8:ac:4e:6e:88:99:9f:32:dc:0d:ce:20:db:08:a0:
ec:db:c0:b6:f3:d2:3b:18:2d:a4:07:d8:7b:98:e8:76:31:f9:
d6:25:18:33:5b:b9:77:69:c2:fc:7e:8c:5f:b7:75:c9:0e:62:
5b:d9:6d:93:32:53:aa:f8:33:59:62:e8:43:d6:81:b0:3d:cf:
db:fa:16:8f:f6:4f:40:8c:48:f1:b6:2b:d2:b2:d3:c3:c3:1e:
4d:c9:78:42:80:40:f5:b5:de:4c:7f:7a:bb:7c:2f:5f:d7:30:
d4:bb:52:50:53:40:68:b7:88:05:7e:e8:8d:89:33:f4:23:01:
7a:7f:c1:75:8a:08:53:c6:a4:60:dc:58:50:82:5d:37:6f:61:
75:9e:c6:37:ac:8f:51:bd:30:fa:61:ce:15:03:1f:37:9b:10:
8d:75:ae:b7:13:58:95:e4:53:ef:fa:a4:81:81:9e:b7:28:f9:
ec:de:43:d3:cb:22:b9:fe:d7:8e:a5:ef:b0:6c:fd:a5:c9:e7:
e6:dc:9a:31:59:5f:8a:af:1f:79:64:25:d7:78:74:1e:04:d7:
64:96:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:10 2026 by rpki-client