Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136382e302f32332d3233203d3e203138343239.roa
File: 3132342e3135352e3136382e302f32332d3233203d3e203138343239.roa (raw, json)
Hash identifier: N7RDzBltgG2muRSlyIP304X+utzCAvQ7yYlfflqeSnE=
Subject key identifier: E6:98:45:36:C2:4B:0D:80:DF:05:F7:1B:5E:8F:18:C4:C8:E2:BB:A1
Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial: 7ABAF8A3979CDD26624384EB27C8DA2516FE7DA1
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136382e302f32332d3233203d3e203138343239.roa
Signing time: Mon 11 May 2026 17:27:15 +0000
ROA not before: Mon 11 May 2026 17:22:15 +0000
ROA not after: Mon 10 May 2027 17:27:15 +0000
asID: 18429
IP address blocks: 124.155.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ba:f8:a3:97:9c:dd:26:62:43:84:eb:27:c8:da:25:16:fe:7d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Validity
Not Before: May 11 17:22:15 2026 GMT
Not After : May 10 17:27:15 2027 GMT
Subject: CN=E6984536C24B0D80DF05F71B5E8F18C4C8E2BBA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:91:97:bd:27:37:65:aa:f1:41:97:35:55:
f3:cc:92:54:4f:b0:61:8a:b3:ab:7f:d6:79:3d:bb:
a8:5a:44:53:94:56:aa:44:fe:6f:d5:b6:98:8d:3c:
26:62:ef:1f:3d:01:a8:77:14:4b:3c:bb:43:7d:c3:
6f:62:2a:8d:67:2e:6e:c5:2e:3b:8a:2a:df:8b:52:
5b:c3:99:c5:04:af:73:d8:69:0d:30:e0:0a:28:e4:
4e:ab:fd:46:eb:b1:af:e2:19:cf:6d:83:51:d0:91:
dc:93:3e:8f:4b:ad:cd:68:58:b5:36:86:0e:cb:5d:
d6:c6:08:07:6d:1c:e1:f6:ab:d1:c8:95:3b:49:86:
71:d3:ef:04:6f:fd:a4:d4:30:ba:ed:fc:04:e4:4f:
65:99:48:50:fa:39:3a:64:08:28:8b:67:1b:54:0e:
42:be:32:23:ce:67:af:8d:ae:e6:c4:52:ad:37:69:
a7:53:19:5e:ab:02:f3:f3:d2:c4:f0:9e:a5:5d:a3:
6c:ac:7f:14:6d:f7:d3:13:9a:bd:98:ea:4d:de:e7:
50:70:27:9f:d6:b5:dd:62:e5:76:96:be:7f:80:7a:
81:8d:ab:fd:a4:26:a6:ba:9b:21:12:74:20:78:70:
e2:91:21:cc:f5:35:d3:20:a7:66:83:51:18:e5:17:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:98:45:36:C2:4B:0D:80:DF:05:F7:1B:5E:8F:18:C4:C8:E2:BB:A1
X509v3 Authority Key Identifier:
keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136382e302f32332d3233203d3e203138343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.155.168.0/23
Signature Algorithm: sha256WithRSAEncryption
36:02:ca:19:41:49:b4:36:20:6a:23:17:b8:b7:04:9e:3a:de:
8a:a6:73:84:b4:72:f3:75:64:b4:dd:c2:6c:91:61:dc:3b:0d:
fd:0d:ad:31:a8:51:d4:e5:bd:84:78:eb:96:0d:01:ed:f1:36:
84:66:6d:e1:8e:9e:47:99:f0:77:8d:98:3b:35:1c:7a:8e:e5:
f0:c4:d0:22:af:52:9b:a0:72:91:1d:38:da:d6:1b:7a:78:1f:
13:9c:ca:d4:95:50:47:21:95:38:8d:56:5c:c1:30:bf:38:8d:
7f:05:49:6b:d3:25:3f:d3:07:bd:d1:3a:df:91:16:a2:90:e1:
fb:8c:0e:98:0e:ae:0e:e9:43:fa:3b:f8:68:15:61:b7:ec:9a:
99:c3:68:c0:7e:1f:99:b7:bc:0e:29:12:6b:aa:a6:51:72:e0:
30:f9:84:79:a1:f9:f2:8a:6e:f1:ea:f9:41:71:41:ba:cc:62:
4f:31:b4:25:75:0e:ee:69:46:7e:7e:b6:df:07:c2:4e:82:88:
8c:09:2e:74:56:20:b7:64:76:33:a1:68:da:83:b3:54:ba:6f:
3e:f2:d9:8c:21:08:bc:69:6f:c5:c3:ab:a4:f5:e6:56:4b:c8:
a2:61:8a:77:c7:8b:51:43:23:af:86:ba:ea:17:61:d1:23:ac:
8b:5b:b3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:16 2026 by rpki-client