Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/32372e3134372e32342e302f32312d3232203d3e203138343239.roa
File: 32372e3134372e32342e302f32312d3232203d3e203138343239.roa (raw, json)
Hash identifier: UJJWWN+7o6E/qzzqJWISnl+wygbPSS8z7yhvG/R7MG4=
Subject key identifier: 26:CE:B5:F5:5C:EE:9D:C0:DA:9C:DD:EA:2A:62:63:F8:57:B7:14:5E
Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial: 0A61C3E12B5F0489B32E9B428B3BD7985F5A2BFD
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/32372e3134372e32342e302f32312d3232203d3e203138343239.roa
Signing time: Mon 11 May 2026 17:17:52 +0000
ROA not before: Mon 11 May 2026 17:12:52 +0000
ROA not after: Mon 10 May 2027 17:17:52 +0000
asID: 18429
IP address blocks: 27.147.24.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:61:c3:e1:2b:5f:04:89:b3:2e:9b:42:8b:3b:d7:98:5f:5a:2b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Validity
Not Before: May 11 17:12:52 2026 GMT
Not After : May 10 17:17:52 2027 GMT
Subject: CN=26CEB5F55CEE9DC0DA9CDDEA2A6263F857B7145E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:62:cd:40:2a:0a:6f:5c:62:fa:6a:1f:4d:
ae:c2:87:35:93:4b:84:c1:e5:39:b7:7e:44:42:5e:
c9:42:75:75:b8:14:da:8f:a3:df:9c:53:41:86:b4:
9c:e3:c4:01:07:4d:8a:7e:4f:c0:3c:72:ce:9c:42:
57:a9:58:aa:51:59:68:5d:f8:3b:33:66:b4:a4:83:
1c:ce:53:16:d7:ef:f5:b2:ec:53:25:e1:80:a8:08:
79:3b:76:1c:0a:eb:11:8c:ec:7b:fb:d1:05:1c:5b:
01:80:31:1c:40:a2:3d:12:02:75:87:bc:8d:85:af:
93:ac:96:b7:d4:29:de:d8:75:01:bf:41:07:94:e6:
aa:02:ee:93:50:63:ef:1c:c4:de:48:96:e9:7a:70:
65:42:12:1d:81:e4:03:9a:e8:5b:75:e0:bb:a7:30:
47:1b:75:9b:ae:8c:a7:e7:7b:ca:cc:86:1c:52:38:
4d:40:a5:f8:61:37:a6:4c:e3:a2:d8:f7:df:22:63:
58:1c:04:50:7b:45:b9:dc:5f:4f:81:d2:e0:3e:fa:
dd:12:3b:95:e2:e3:2d:ee:45:ad:01:7f:c3:58:f1:
21:c8:14:41:63:34:5f:23:56:91:8a:8d:99:16:bc:
d8:94:67:05:90:fe:91:17:c1:c5:fe:57:1e:22:97:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CE:B5:F5:5C:EE:9D:C0:DA:9C:DD:EA:2A:62:63:F8:57:B7:14:5E
X509v3 Authority Key Identifier:
keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/32372e3134372e32342e302f32312d3232203d3e203138343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.147.24.0/21
Signature Algorithm: sha256WithRSAEncryption
39:d5:4b:25:5c:28:30:5b:e7:dd:c9:d5:54:d6:0f:7d:a1:78:
3b:a6:f7:fb:02:69:8b:91:8d:6e:0b:e8:ae:f2:62:d6:10:36:
e5:54:61:a4:d3:72:65:d4:b9:91:61:ba:b3:42:b5:56:11:bd:
e7:ae:28:9d:2b:21:46:4d:95:c9:28:58:a5:ab:d3:09:91:d5:
9a:84:e8:b5:49:4b:18:5a:93:de:38:69:1d:80:da:43:31:03:
c0:a6:ca:ca:b6:04:df:6a:76:75:97:6a:2b:01:a6:df:9f:c5:
24:01:88:04:da:00:84:a2:b1:6c:a0:49:10:c2:60:ae:45:49:
20:6f:73:39:2a:1b:9e:ef:e0:1f:c9:7e:83:50:eb:46:be:ff:
26:ec:40:88:bc:1f:48:af:d5:5c:30:ec:d0:ac:1e:9b:a9:00:
23:84:78:7d:8a:58:d9:2a:91:ad:70:35:ff:a8:6b:48:b8:42:
e0:90:82:d2:55:64:8a:fa:5c:dc:4b:69:bc:05:76:33:bc:de:
f6:bb:3e:c3:63:9a:0d:44:44:51:43:f1:56:6b:6b:88:58:21:
56:ac:1d:08:43:43:1f:4d:68:18:66:3b:3e:89:56:8e:8a:26:
1c:a2:fb:0f:69:f5:db:39:3b:9a:ba:ed:ab:61:52:bc:93:8a:
a6:b9:82:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:20 2026 by rpki-client