Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3137362e302f32312d3231203d3e203138343239.roa
File: 3132342e3135352e3137362e302f32312d3231203d3e203138343239.roa (raw, json)
Hash identifier: ZGKsOz54tdvTW2UMiusc55SB9mLHfEEDUrAjI/fjm9k=
Subject key identifier: D5:B6:F2:9F:F7:54:D2:CB:7B:83:12:EA:D0:35:D2:F6:D0:AC:E7:FF
Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial: 3864FA4D4C1FA713599873BE9FF9D397BEFD0426
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3137362e302f32312d3231203d3e203138343239.roa
Signing time: Mon 11 May 2026 17:04:44 +0000
ROA not before: Mon 11 May 2026 16:59:44 +0000
ROA not after: Mon 10 May 2027 17:04:44 +0000
asID: 18429
IP address blocks: 124.155.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:64:fa:4d:4c:1f:a7:13:59:98:73:be:9f:f9:d3:97:be:fd:04:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Validity
Not Before: May 11 16:59:44 2026 GMT
Not After : May 10 17:04:44 2027 GMT
Subject: CN=D5B6F29FF754D2CB7B8312EAD035D2F6D0ACE7FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:f2:fa:4a:b4:9e:db:42:ea:07:e8:45:ff:
02:84:00:fc:18:97:a7:ff:0d:5d:04:f7:34:d9:96:
26:bf:6d:1c:11:38:53:00:1b:a9:39:93:af:b9:7e:
9b:d9:57:20:f4:7b:d0:78:8f:47:6f:32:f0:73:95:
6a:7f:a0:de:02:bb:cd:5c:e0:4c:0f:a2:01:ba:71:
93:5d:32:de:aa:ba:c7:9a:44:08:3a:a5:44:b6:c0:
27:99:b2:9a:45:af:de:ec:e3:a0:e5:d2:f2:3a:50:
9f:19:c5:7c:1a:67:93:95:dd:c3:27:fe:b8:58:3e:
70:08:ba:68:af:21:69:29:ff:23:0c:77:1e:b4:b0:
86:46:3d:21:ca:78:4f:30:8f:4c:04:19:9d:ad:16:
1f:3a:cf:2d:50:17:fb:dc:73:da:f5:ef:3d:74:a8:
7c:b6:e1:da:62:22:5c:39:5c:0a:90:97:cd:61:a1:
3f:cb:63:c1:05:3f:3f:42:02:78:5e:31:97:b6:65:
30:a1:90:bf:f8:32:19:4a:97:e7:ba:47:43:41:82:
49:f2:2f:3e:ef:c5:f8:35:28:67:8b:1e:62:77:2e:
22:5e:ca:d0:81:1b:ea:6e:c3:23:35:2c:c1:34:ce:
48:d7:84:65:95:0d:b4:fd:92:03:a5:57:0d:4a:ca:
ec:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B6:F2:9F:F7:54:D2:CB:7B:83:12:EA:D0:35:D2:F6:D0:AC:E7:FF
X509v3 Authority Key Identifier:
keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3137362e302f32312d3231203d3e203138343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.155.176.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:ff:58:98:2b:d5:42:58:58:d0:62:96:7f:3e:fe:92:0a:22:
fc:43:29:8b:3d:68:31:11:0b:ba:60:bc:97:2b:27:06:c8:3c:
8a:c0:8d:7a:a4:15:95:f1:92:58:7b:9c:c4:ff:68:50:16:f6:
25:29:8e:99:75:65:47:98:3f:8e:e5:2f:67:8e:21:51:14:47:
88:d7:c9:e3:56:bb:c4:6e:09:5b:57:cd:1a:83:a6:eb:e6:b6:
03:b8:cf:9b:be:7f:c6:ca:15:6b:65:44:57:a7:fc:35:da:89:
a4:e2:37:2b:6d:1a:26:78:eb:e9:6f:80:b6:b9:83:8b:f1:f0:
61:1e:73:ef:b0:7c:cb:02:9b:37:46:01:d4:3a:69:1a:29:85:
35:28:e3:7e:4c:bd:a0:81:3a:db:fc:39:e2:f0:ae:97:98:79:
26:c9:73:5d:73:a9:97:31:13:a4:8b:f1:9f:5c:f5:06:94:ac:
16:2e:61:a9:b1:a6:d5:28:89:0f:2c:22:91:ca:7e:75:f7:8f:
51:70:ff:07:1b:59:46:b6:bb:06:d4:58:ff:e3:a7:91:31:07:
3d:89:e5:c6:33:84:27:e0:3c:c6:38:1f:10:b5:ad:47:85:84:
f1:94:25:e5:eb:6e:93:4e:64:00:9b:8c:94:72:aa:2f:c0:68:
1f:e0:df:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:07 2026 by rpki-client