Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3137322e302f32332d3233203d3e203138343239.roa
File: 3132342e3135352e3137322e302f32332d3233203d3e203138343239.roa (raw, json)
Hash identifier: N53D+jM2vsFIn1P1oFwRaINMjWm/+Vpo0X5nxzehuOE=
Subject key identifier: 9A:FA:4B:8B:49:82:DB:54:30:72:C7:48:58:6A:1A:D0:14:AE:39:D1
Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial: 7C7DFD97927770606B56A6381FCED03CA7FDC0C8
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3137322e302f32332d3233203d3e203138343239.roa
Signing time: Mon 11 May 2026 17:11:35 +0000
ROA not before: Mon 11 May 2026 17:06:35 +0000
ROA not after: Mon 10 May 2027 17:11:35 +0000
asID: 18429
IP address blocks: 124.155.172.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:7d:fd:97:92:77:70:60:6b:56:a6:38:1f:ce:d0:3c:a7:fd:c0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Validity
Not Before: May 11 17:06:35 2026 GMT
Not After : May 10 17:11:35 2027 GMT
Subject: CN=9AFA4B8B4982DB543072C748586A1AD014AE39D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:70:a1:7d:c9:32:21:41:1b:49:2b:93:ca:c9:
42:77:cb:01:4b:42:03:22:fb:53:b5:df:99:0c:f0:
6a:cf:c1:17:c0:01:b1:b2:2e:ea:e5:36:ee:29:94:
22:23:ae:a2:4b:de:60:05:50:aa:b2:ed:5d:76:d9:
28:8d:a4:67:1c:c3:97:98:b2:00:b9:1f:f7:2d:62:
0e:d1:a6:e6:e6:b7:34:13:07:c3:4c:46:4d:ad:3b:
c7:c7:c6:ae:26:0e:ab:44:98:5c:83:e4:a0:f6:ad:
71:d0:cc:0f:b5:04:68:3e:ba:00:da:14:1d:2e:ff:
f5:74:cc:37:ee:0b:f1:37:37:18:a0:29:01:1e:6c:
35:60:1f:10:98:16:1a:1a:62:00:65:5f:fc:7b:b9:
fd:59:f2:ac:d5:26:4e:5e:03:be:c6:ff:a0:c6:47:
7d:1e:7b:d2:f2:cf:54:0f:3d:47:a0:9a:45:ff:25:
6a:c7:dd:26:a8:b8:df:ba:2d:89:ba:ef:96:13:da:
15:62:db:ed:74:9d:19:5e:33:b9:dd:59:ba:03:dc:
9d:57:91:0a:60:7f:c8:26:d4:96:a4:19:1f:92:5e:
bc:2d:41:45:9b:56:ec:49:b3:31:a1:3e:ed:ad:7b:
7a:ab:61:66:0c:74:35:d4:77:8a:f2:ec:f6:b6:d1:
2d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FA:4B:8B:49:82:DB:54:30:72:C7:48:58:6A:1A:D0:14:AE:39:D1
X509v3 Authority Key Identifier:
keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3137322e302f32332d3233203d3e203138343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.155.172.0/23
Signature Algorithm: sha256WithRSAEncryption
09:41:e2:39:34:f5:66:f8:56:25:30:b5:8f:3a:b9:08:e1:e7:
a9:a3:7d:dc:aa:51:be:50:1a:d7:b7:26:1c:e4:fe:62:b9:2f:
96:2f:7b:db:c1:9c:8a:74:1a:d3:7c:51:56:d7:07:e6:b0:38:
ea:06:7f:26:7b:91:bf:f0:43:b8:2a:0a:8d:73:7f:eb:1a:ef:
15:24:92:1f:bd:b9:f5:2f:1d:a3:15:53:16:b6:2b:21:ee:2d:
84:1f:51:8a:8d:39:95:62:ac:fd:87:e6:61:5d:cf:72:07:b9:
a3:a0:4e:9b:18:57:50:c2:64:9e:cc:94:3b:b8:cb:61:09:5e:
fd:1f:14:2b:be:d4:7c:5d:f9:d5:07:e9:5e:d8:04:53:77:bb:
d9:8a:5c:a6:a4:de:b7:fd:6b:3b:8a:91:b6:f8:9a:ca:09:f5:
44:ba:70:64:6d:5f:f8:19:d4:f9:3a:0a:c8:10:55:0b:69:69:
14:72:e9:d0:74:2b:b8:00:7a:2a:07:c3:9a:f1:22:9c:28:6c:
7a:ab:93:4a:03:be:d3:72:9f:c3:05:f6:70:aa:b8:83:f2:d7:
7a:8e:98:15:8f:22:35:69:4f:1c:74:a8:18:76:e3:91:03:3f:
3a:3d:d4:80:c7:b0:41:ed:40:fa:1d:3c:50:0b:19:48:e3:cc:
61:6a:92:27
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUfH39l5J3cGBrVqY4H87QPKf9wMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc5REIzMDVDMEU3RTFBRkFCOUU0MzI5M0ZEMDBGQ0VD
REJDRUZEMTAeFw0yNjA1MTExNzA2MzVaFw0yNzA1MTAxNzExMzVaMDMxMTAvBgNV
BAMTKDlBRkE0QjhCNDk4MkRCNTQzMDcyQzc0ODU4NkExQUQwMTRBRTM5RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpcKF9yTIhQRtJK5PKyUJ3ywFL
QgMi+1O135kM8GrPwRfAAbGyLurlNu4plCIjrqJL3mAFUKqy7V122SiNpGccw5eY
sgC5H/ctYg7RpubmtzQTB8NMRk2tO8fHxq4mDqtEmFyD5KD2rXHQzA+1BGg+ugDa
FB0u//V0zDfuC/E3NxigKQEebDVgHxCYFhoaYgBlX/x7uf1Z8qzVJk5eA77G/6DG
R30ee9Lyz1QPPUegmkX/JWrH3SaouN+6LYm675YT2hVi2+10nRleM7ndWboD3J1X
kQpgf8gm1JakGR+SXrwtQUWbVuxJszGhPu2te3qrYWYMdDXUd4ry7Pa20S0VAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUmvpLi0mC21QwcsdIWGoa0BSuOdEwHwYDVR0j
BBgwFoAU952zBcDn4a+rnkMpP9APzs2879EwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0dORVQv
MC9GNzlEQjMwNUMwRTdFMUFGQUI5RTQzMjkzRkQwMEZDRUNEQkNFRkQxLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0Y3OURCMzA1QzBFN0UxQUZBQjlFNDMyOTNGRDAw
RkNFQ0RCQ0VGRDEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DR05FVC8wLzMxMzIzNDJlMzEzNTM1
MmUzMTM3MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMTM4MzQzMjM5LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBfJusMA0GCSqGSIb3DQEBCwUAA4IBAQAJQeI5NPVm+FYlMLWPOrkI4eep
o33cqlG+UBrXtyYc5P5iuS+WL3vbwZyKdBrTfFFW1wfmsDjqBn8me5G/8EO4KgqN
c3/rGu8VJJIfvbn1Lx2jFVMWtish7i2EH1GKjTmVYqz9h+ZhXc9yB7mjoE6bGFdQ
wmSezJQ7uMthCV79HxQrvtR8XfnVB+le2ARTd7vZilympN63/Ws7ipG2+JrKCfVE
unBkbV/4GdT5OgrIEFULaWkUcunQdCu4AHoqB8Oa8SKcKGx6q5NKA77Tcp/DBfZw
qriD8td6jpgVjyI1aU8cdKgYduORAz86PdSAx7BB7UD6HTxQCxlI48xhapIn
-----END CERTIFICATE-----
Generated at Wed May 13 02:35:20 2026 by rpki-client