Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136382e302f32312d3234203d3e203138343239.roa
File: 3132342e3135352e3136382e302f32312d3234203d3e203138343239.roa (raw, json)
Hash identifier: G4la+k1VPRIvMaBBoXKGcuPQl3bTFQHW+97o336zP/Y=
Subject key identifier: 5B:5F:81:A4:46:7C:31:67:50:7F:A7:7C:FB:4D:F5:2F:44:95:60:FA
Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial: 739E68B4E1F22DD2022903A0A03E5F94BDCD77D3
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136382e302f32312d3234203d3e203138343239.roa
Signing time: Mon 11 May 2026 17:26:57 +0000
ROA not before: Mon 11 May 2026 17:21:57 +0000
ROA not after: Mon 10 May 2027 17:26:57 +0000
asID: 18429
IP address blocks: 124.155.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:9e:68:b4:e1:f2:2d:d2:02:29:03:a0:a0:3e:5f:94:bd:cd:77:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Validity
Not Before: May 11 17:21:57 2026 GMT
Not After : May 10 17:26:57 2027 GMT
Subject: CN=5B5F81A4467C3167507FA77CFB4DF52F449560FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e2:b1:dc:9b:84:56:c0:ed:df:97:1c:7c:4a:
73:13:41:11:16:53:37:26:0d:19:7c:9e:9f:34:26:
6b:01:46:c9:d5:f8:d3:19:3e:dc:7f:8c:18:0d:e4:
b0:23:78:72:43:fc:d7:81:43:ab:b9:7a:d7:df:1c:
a8:24:44:ca:e2:2c:3e:70:ea:20:1a:37:42:fa:aa:
c2:55:41:bb:e5:5d:35:0a:45:08:b2:8c:75:22:bd:
c8:d6:50:57:02:39:76:49:f9:93:84:bc:16:ce:83:
35:08:36:3b:dd:e7:24:32:e6:f6:3d:7c:b4:3d:c5:
41:a1:5a:6c:17:2a:12:a1:e3:db:31:14:f0:b3:8a:
bb:af:2d:11:6e:a4:30:9b:bb:a1:17:11:ae:86:d6:
b2:e6:8b:27:0c:93:1c:fd:7b:03:af:1f:40:9f:11:
c8:86:ba:ce:83:3a:6a:12:64:98:79:25:f1:fe:32:
81:7e:98:80:21:fb:a8:96:3a:2e:4b:c5:2a:43:5c:
81:8d:dc:db:2d:1e:a9:ec:62:66:20:1c:9f:8f:39:
bf:26:0c:11:66:5c:63:e0:c7:90:9c:6b:68:2b:73:
97:9c:90:f9:d3:82:28:5c:e4:a2:55:27:1b:47:10:
b9:6c:0c:20:41:c2:73:70:51:4b:4d:75:af:4b:fc:
f5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5F:81:A4:46:7C:31:67:50:7F:A7:7C:FB:4D:F5:2F:44:95:60:FA
X509v3 Authority Key Identifier:
keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136382e302f32312d3234203d3e203138343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.155.168.0/21
Signature Algorithm: sha256WithRSAEncryption
92:24:b5:de:ae:21:c2:c6:e5:d0:cb:9b:de:9a:2e:90:43:27:
57:b1:7e:30:71:21:58:f0:0b:e4:73:70:fa:a9:0f:94:d4:52:
4e:ce:72:3a:b1:50:56:9a:59:12:92:9b:91:b3:72:13:1a:87:
1b:2e:0d:6d:91:a4:fd:3e:88:b1:d6:2f:c7:41:66:de:13:53:
8f:9f:c2:97:a0:50:ab:2e:41:0e:09:a9:a2:01:93:02:15:2d:
df:ef:4c:db:d9:87:04:6b:f2:03:29:e1:8c:2c:32:c6:11:7d:
d4:74:df:29:77:ff:7c:18:99:d9:64:1d:2d:91:44:d1:9f:56:
d5:52:25:cb:58:e0:e4:81:cd:aa:8d:9e:31:83:ed:a4:1c:b6:
c9:1e:d2:e0:0e:26:6e:6e:bb:20:67:4d:33:b1:dd:b8:f8:84:
47:31:c6:8a:61:d8:9e:54:71:cb:cf:f5:2b:c2:ee:a9:d2:af:
ea:55:bb:04:bb:c6:6d:53:11:dd:96:96:30:99:65:cd:83:77:
86:4e:54:27:c7:77:b8:4d:27:8f:73:6a:da:fb:b4:c7:fd:83:
24:13:34:04:6c:8d:d6:d1:96:60:52:27:6c:3b:cf:f3:9f:3e:
20:77:c5:58:48:66:fa:1e:3b:64:a7:40:8d:bf:a9:53:f6:7f:
c9:e9:df:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:06 2026 by rpki-client