Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/34352e36342e3233322e302f32322d3234203d3e203138343239.roa
File: 34352e36342e3233322e302f32322d3234203d3e203138343239.roa (raw, json)
Hash identifier: gvYO9rBGVSJu6QF9bTtoTODgUeLGphqqe89GNwGBMKQ=
Subject key identifier: F5:E4:F9:2D:D1:8C:FA:91:D4:AC:BB:E5:B3:72:F0:24:F3:52:CE:2C
Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial: 180309652343CFD01F4C9808B16C17CE033D4A1E
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/34352e36342e3233322e302f32322d3234203d3e203138343239.roa
Signing time: Mon 11 May 2026 17:27:11 +0000
ROA not before: Mon 11 May 2026 17:22:11 +0000
ROA not after: Mon 10 May 2027 17:27:11 +0000
asID: 18429
IP address blocks: 45.64.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:03:09:65:23:43:cf:d0:1f:4c:98:08:b1:6c:17:ce:03:3d:4a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Validity
Not Before: May 11 17:22:11 2026 GMT
Not After : May 10 17:27:11 2027 GMT
Subject: CN=F5E4F92DD18CFA91D4ACBBE5B372F024F352CE2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:5f:07:66:c3:d1:e6:61:56:83:22:0a:36:
24:3e:7b:35:f4:1d:f5:f9:13:16:ba:95:9b:df:04:
c2:b0:77:fb:2c:65:6a:70:fa:9b:2b:a0:03:4a:29:
c3:6c:ee:c5:30:c2:a6:c4:f6:22:45:34:55:73:1e:
19:9d:27:45:1b:92:63:d8:16:9c:2c:e4:5b:6d:0d:
c2:62:8f:b5:b3:8c:10:41:b1:94:48:aa:c4:a0:74:
ff:2d:a1:91:a7:c5:14:9a:7d:7f:c4:7c:1c:c2:6c:
8a:05:6f:02:75:13:d1:46:1b:83:e2:5c:45:4d:84:
aa:53:86:bf:86:c6:b4:fc:f6:6f:e4:e6:1e:af:78:
1a:9d:9f:81:71:9d:7d:ab:11:bb:3e:32:39:ab:78:
13:71:4d:20:5c:f5:d6:1a:b6:68:77:62:8d:85:21:
fa:a5:44:ff:c4:36:ef:49:18:ae:c7:ff:65:55:8c:
54:60:82:f6:18:14:89:fc:84:fd:32:de:9b:7c:ee:
66:68:ef:c2:2b:0b:56:8a:b6:3c:3b:e3:55:e9:16:
a7:91:e6:cd:a3:77:80:76:05:d7:31:19:d9:73:9a:
43:e3:04:f6:ed:50:48:a4:d8:06:2f:f3:f7:cc:4a:
f2:91:80:96:47:2c:53:c9:36:d3:79:e3:b2:f4:36:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E4:F9:2D:D1:8C:FA:91:D4:AC:BB:E5:B3:72:F0:24:F3:52:CE:2C
X509v3 Authority Key Identifier:
keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/34352e36342e3233322e302f32322d3234203d3e203138343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.64.232.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:36:2d:9d:da:51:a2:f8:16:cf:5a:e7:4a:e2:74:66:4d:99:
b4:3f:cf:0a:df:b9:c9:ab:46:06:b6:ca:a8:6f:f0:cd:97:0c:
97:96:81:4f:df:37:c0:e6:a7:a1:79:92:bc:b0:d1:3b:8b:c5:
9d:07:f2:74:da:04:9a:b0:77:98:50:76:06:eb:50:f3:02:69:
a1:6a:1c:de:87:30:73:cb:9f:fa:34:d3:c2:60:cc:09:6c:a8:
86:90:c1:8f:98:a3:2e:be:07:6d:8d:52:0d:42:3a:9f:df:2e:
b1:c8:e4:15:41:e8:20:3e:af:39:3a:dd:f2:e2:d7:dd:36:0f:
87:67:f0:36:3d:a2:15:d5:3c:3f:b3:c9:a6:16:10:d5:98:f8:
2e:b4:05:11:9a:38:c2:ee:c2:39:cd:6f:40:da:e0:9a:a8:d2:
97:fc:af:9c:d2:29:7d:14:65:e6:55:77:b8:d4:ec:e5:f9:47:
e5:ad:c8:43:4e:71:fe:f3:dd:1a:93:d5:b9:85:07:f5:31:95:
32:92:c1:c0:fc:fc:0c:f5:b8:28:b3:a1:ec:6c:5d:c6:41:8c:
f6:32:ce:af:5e:0b:42:e4:8e:6b:6d:2e:cc:2b:9a:38:fa:c9:
f0:08:37:26:1c:c4:cb:1e:34:07:f7:b1:b7:00:71:8b:6e:d5:
79:eb:28:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:08 2026 by rpki-client