Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136302e302f32312d3231203d3e203138343239.roa
File: 3132342e3135352e3136302e302f32312d3231203d3e203138343239.roa (raw, json)
Hash identifier: IPFmr3TsuOa5NsZe6ZZOqFX3wmlqDxaJdSNZtMmsDN8=
Subject key identifier: 8D:1A:14:C3:33:4C:50:98:49:EA:95:77:84:15:89:A5:E6:D0:FB:AB
Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial: 72BFBA18800B895FE97F2D7CBBEE75F6A578F6FC
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136302e302f32312d3231203d3e203138343239.roa
Signing time: Mon 11 May 2026 17:04:43 +0000
ROA not before: Mon 11 May 2026 16:59:43 +0000
ROA not after: Mon 10 May 2027 17:04:43 +0000
asID: 18429
IP address blocks: 124.155.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:bf:ba:18:80:0b:89:5f:e9:7f:2d:7c:bb:ee:75:f6:a5:78:f6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Validity
Not Before: May 11 16:59:43 2026 GMT
Not After : May 10 17:04:43 2027 GMT
Subject: CN=8D1A14C3334C509849EA9577841589A5E6D0FBAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:f7:0c:b5:43:af:c4:5d:c2:3a:f4:d1:15:
f0:c8:84:0f:19:5d:a4:db:fb:d2:6e:d8:3b:25:f9:
f2:8a:40:f4:78:95:84:94:7a:83:08:9a:70:5c:9f:
af:7d:ae:e7:ae:e0:d6:7c:51:53:32:2a:48:07:91:
07:d0:fe:28:99:8b:67:8d:8e:e0:69:eb:77:c3:00:
e1:03:e7:e6:b1:83:d9:5f:e5:61:e0:44:c0:1e:a2:
24:46:a3:f6:9b:45:8f:74:05:1b:29:84:32:a8:5b:
84:46:27:dc:bd:77:76:41:26:82:96:05:c9:f2:92:
9f:6d:7c:8d:d7:b8:eb:69:31:a2:5a:9a:87:22:1a:
09:4a:36:cb:40:e6:db:6e:99:37:9c:c9:6f:3b:31:
30:9d:ad:ed:4f:1f:29:7f:91:95:29:cc:3d:d4:a5:
8a:32:b2:db:6f:ca:b8:3b:bd:11:43:93:ca:b1:5b:
3a:3a:98:39:72:fe:ab:71:9b:30:4f:0e:ff:73:c4:
43:c9:c3:82:1f:b0:05:77:5f:4a:14:55:17:cb:df:
a0:b4:e2:a1:93:3b:ae:80:04:a1:a9:b2:aa:bf:a0:
d1:c8:9f:67:0a:8d:c9:07:1f:54:be:b1:27:b0:70:
c2:b2:e2:d8:aa:fc:7e:52:35:e7:fb:6c:ee:85:2a:
89:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1A:14:C3:33:4C:50:98:49:EA:95:77:84:15:89:A5:E6:D0:FB:AB
X509v3 Authority Key Identifier:
keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136302e302f32312d3231203d3e203138343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.155.160.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:a7:f0:41:a4:bd:a7:17:d4:32:29:bc:6d:a4:a2:f3:b5:1e:
61:2a:4c:2b:8d:bb:e1:58:f1:d5:af:1c:c4:94:72:64:fa:d6:
39:ec:7d:2e:0b:87:e0:1c:30:6c:46:45:03:4b:eb:3b:9f:4c:
da:b2:fc:f7:60:4c:ad:8a:97:11:de:42:42:0e:f8:30:51:d6:
b1:7b:d1:0a:61:f4:19:7e:d4:c1:28:f0:9a:2c:15:9e:27:dd:
bd:c0:df:78:fe:94:68:67:b4:27:bd:fa:db:9f:72:91:17:5c:
7e:00:de:d5:44:bf:ac:78:7f:79:65:f0:c8:66:1d:e5:30:b6:
1f:d2:21:29:dc:65:30:d6:d6:31:9e:95:43:d6:bb:80:74:1a:
d5:17:e4:25:2e:33:a7:4b:e8:70:7d:14:fa:a2:73:a1:70:c0:
fa:0e:2e:61:ef:2f:2f:60:06:4a:00:fb:8c:56:bf:a5:f8:e4:
a8:70:69:ff:e2:c4:62:8b:aa:92:5a:ec:be:96:67:69:a2:3d:
75:ad:87:8b:17:5d:b0:90:81:33:8a:6a:c0:74:24:70:b5:d6:
e5:5c:ed:5a:eb:d6:dc:91:46:a6:c3:3a:2f:7a:1c:16:42:29:
a6:d2:cf:a3:21:50:59:41:8d:35:81:85:16:f1:af:a0:6c:02:
7f:9f:d2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:12 2026 by rpki-client