Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136302e302f31392d3234203d3e203138343239.roa
File: 3132342e3135352e3136302e302f31392d3234203d3e203138343239.roa (raw, json)
Hash identifier: e7/3rwxXmBhDA3JpXw3YSJP2elUr6BwFFYmW3ArOTro=
Subject key identifier: 64:7D:A0:F5:42:30:95:4D:7D:2A:80:CA:1F:C8:E3:5E:FD:74:D6:81
Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial: 2E4F4B8E203C4556693D7115153A035720C2EF83
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136302e302f31392d3234203d3e203138343239.roa
Signing time: Mon 11 May 2026 17:27:10 +0000
ROA not before: Mon 11 May 2026 17:22:10 +0000
ROA not after: Mon 10 May 2027 17:27:10 +0000
asID: 18429
IP address blocks: 124.155.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:4f:4b:8e:20:3c:45:56:69:3d:71:15:15:3a:03:57:20:c2:ef:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Validity
Not Before: May 11 17:22:10 2026 GMT
Not After : May 10 17:27:10 2027 GMT
Subject: CN=647DA0F54230954D7D2A80CA1FC8E35EFD74D681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:39:1a:c4:41:8f:eb:c2:84:8e:4c:2a:fc:4f:
13:99:0d:9c:ca:1d:94:be:1b:d1:ca:aa:45:9c:a3:
eb:fd:74:07:80:35:25:50:47:67:cb:98:28:f7:d6:
a4:c7:7f:f6:24:06:5d:26:70:82:e6:f7:d4:57:f4:
16:69:ea:07:e4:ce:ac:b6:54:e5:ae:6c:09:7d:2b:
23:f7:f3:01:f1:71:4b:20:e2:24:eb:17:38:ed:fc:
ec:e5:a3:88:da:23:16:ed:7d:45:c2:e5:f9:36:97:
64:f1:5d:b9:05:9b:1a:24:ec:70:9e:4e:ae:34:92:
4a:63:4b:1e:96:da:e3:4b:ce:c3:e2:0d:b5:27:72:
11:a7:64:b8:5e:c0:49:00:b7:c0:d7:d9:89:2c:40:
f6:23:5b:73:a1:c2:2e:ab:91:01:ba:6c:cf:5b:de:
44:f9:ce:60:c8:a3:13:36:97:47:34:0d:d7:08:b0:
b8:33:a6:70:02:f9:b7:b1:01:40:56:3f:45:4d:6f:
a6:fb:69:3c:5e:95:2b:29:35:ce:88:2b:f4:1f:2a:
15:41:b0:f1:67:19:65:a1:b9:6f:4e:60:59:37:fd:
05:aa:e0:52:9a:d7:96:43:2b:48:f2:7b:c1:26:db:
e5:e5:1f:d9:6b:f9:40:8f:56:43:a9:3d:9f:af:fc:
5e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7D:A0:F5:42:30:95:4D:7D:2A:80:CA:1F:C8:E3:5E:FD:74:D6:81
X509v3 Authority Key Identifier:
keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136302e302f31392d3234203d3e203138343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.155.160.0/19
Signature Algorithm: sha256WithRSAEncryption
8a:9a:c2:d6:7b:ef:f0:ec:f5:b1:1f:45:92:0a:93:7b:02:fe:
93:c4:b6:f0:c8:cb:4a:23:35:61:6b:80:08:95:65:c0:fd:13:
2d:d1:5b:a4:c6:bc:4f:5e:bc:5e:69:6f:51:b9:02:95:55:9b:
8d:23:21:f2:97:28:35:39:c1:24:44:fc:a9:85:85:7d:da:30:
70:dd:86:19:db:70:0d:8d:bd:ae:6a:13:84:3b:57:2d:bd:83:
0b:68:26:fb:71:22:bd:6b:cf:5d:87:01:7a:22:9e:c2:70:8f:
ed:b7:87:62:b2:e4:1a:dc:30:00:8a:e4:a0:e3:09:b6:48:06:
0b:20:36:86:01:f8:03:91:32:06:03:0e:0a:2b:1c:4e:84:7d:
be:cf:63:29:8c:c8:34:ca:37:0c:2d:d3:a5:d7:62:be:c6:ce:
55:29:f0:46:03:bb:de:46:b5:e0:03:e5:be:37:08:0a:93:f5:
92:7d:c5:d1:bf:9a:d9:6f:a9:f2:9a:7c:c8:17:ba:2c:b6:e9:
3d:61:d2:89:57:fe:6c:06:8e:4d:db:38:7b:e3:9b:f0:48:be:
3e:24:e1:38:85:8d:5e:1d:32:35:8a:30:99:18:88:97:2c:e5:
ad:40:d9:2f:db:cb:2b:81:8d:e2:05:26:2a:66:1e:fe:20:a3:
63:0e:20:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:13 2026 by rpki-client