Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/32372e3134372e31362e302f32312d3232203d3e203138343239.roa
File: 32372e3134372e31362e302f32312d3232203d3e203138343239.roa (raw, json)
Hash identifier: IjisbpVKj5CVXiOQBKhdat0zyisGeyMJolNXSj5zowM=
Subject key identifier: 61:95:A7:3D:8D:AF:32:28:86:86:8C:DB:23:1A:8E:14:8B:5C:F9:DB
Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial: 7B2F9A12BC33E0EB8A6DC115EEDE28D28B959C16
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/32372e3134372e31362e302f32312d3232203d3e203138343239.roa
Signing time: Mon 11 May 2026 17:17:52 +0000
ROA not before: Mon 11 May 2026 17:12:52 +0000
ROA not after: Mon 10 May 2027 17:17:52 +0000
asID: 18429
IP address blocks: 27.147.16.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:2f:9a:12:bc:33:e0:eb:8a:6d:c1:15:ee:de:28:d2:8b:95:9c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Validity
Not Before: May 11 17:12:52 2026 GMT
Not After : May 10 17:17:52 2027 GMT
Subject: CN=6195A73D8DAF322886868CDB231A8E148B5CF9DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:c7:d8:ef:67:87:0b:c4:17:61:9f:17:fe:
15:c2:dc:c8:0b:df:31:a8:47:dd:a1:a0:3b:5b:5b:
cc:78:ea:91:9e:f2:cd:f5:dc:b5:8f:c4:d4:b8:de:
ca:27:62:52:88:97:ce:c4:b4:5a:ba:66:a2:71:25:
49:a5:87:47:d0:44:08:e0:35:63:0d:cc:26:f6:18:
3c:e5:15:d5:6a:06:df:3b:ee:39:73:9b:9c:1f:cd:
f7:4e:33:c4:05:9b:9e:ba:83:33:a5:a2:f4:c3:e6:
57:74:8c:fc:27:f4:6d:31:c7:b9:60:ac:2b:e7:4e:
44:ef:fc:b7:6e:3c:d5:40:27:aa:98:5e:a7:ca:09:
eb:54:20:78:86:6c:29:94:9b:99:20:ee:dc:9b:f4:
f0:9d:41:f4:7f:48:7b:cb:3f:b2:4b:d9:32:c8:3f:
40:3a:e6:87:ec:19:79:6b:50:f0:4b:2c:c0:1f:f7:
24:13:04:e3:aa:d9:5a:2c:4e:71:ba:fb:c8:4b:ca:
27:8f:59:59:c2:7f:b1:6f:38:95:1e:03:38:c2:74:
b0:c9:e3:d8:0f:de:07:78:80:17:38:c2:29:4f:d8:
49:30:92:6e:33:79:0b:75:ba:1a:aa:e2:fb:9c:bd:
69:29:12:5c:ab:af:b8:b5:84:5b:d9:71:e9:e7:c5:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:95:A7:3D:8D:AF:32:28:86:86:8C:DB:23:1A:8E:14:8B:5C:F9:DB
X509v3 Authority Key Identifier:
keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/32372e3134372e31362e302f32312d3232203d3e203138343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.147.16.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:fc:f6:99:04:b6:06:fe:50:f8:c4:84:32:78:30:8c:b2:3c:
5a:06:68:3f:5a:b3:d6:00:8c:61:60:02:d8:a8:e7:c4:9b:e8:
7b:3b:5c:11:e9:15:c6:dc:0c:e1:76:61:17:16:85:f0:25:b5:
1d:52:49:1c:a7:16:67:4f:46:a9:70:4f:08:f8:fb:f5:9c:f7:
bc:f2:01:b8:1c:0c:17:a3:78:41:49:15:e3:81:b6:ec:25:d6:
5e:3b:d9:9f:8b:40:dd:72:55:6c:5a:2b:3d:33:6a:d8:fd:8e:
e2:4c:7c:bc:24:25:d4:ac:29:0d:23:70:63:2f:25:2c:d9:2d:
e6:0e:f2:7f:9d:08:33:96:e0:ad:4a:5c:8c:ea:45:de:5b:e9:
a4:65:56:68:d0:4e:b1:0d:e3:38:18:4e:7e:3c:75:c6:dd:ad:
46:d5:c2:fc:9f:17:65:cc:f5:ae:da:97:5b:55:08:93:07:b9:
2d:20:66:ac:de:c7:6a:2a:e8:a6:52:e4:e3:b6:a9:a3:45:4b:
eb:3a:41:6f:1d:d3:ec:af:79:83:2d:09:29:93:a5:d8:44:8f:
60:1e:5a:82:07:c1:7a:d8:4c:40:34:d4:44:0e:49:5b:e7:d8:
cc:6b:5b:63:bb:dd:ad:84:e3:ef:67:f4:96:0e:83:b8:d5:c8:
98:67:3c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:08 2026 by rpki-client