Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3134342e302f32322d3232203d3e203138343239.roa
File: 36312e35372e3134342e302f32322d3232203d3e203138343239.roa (raw, json)
Hash identifier: Z/VB0gZcejKb3ZjixbOBnAbl+kCuro6U5IirOQTxnsU=
Subject key identifier: 6B:8F:5A:09:9E:27:0E:5B:2F:D9:B7:12:58:4C:2E:EF:49:49:14:C1
Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial: 42F3D27FD8CDB691BD91C2D399762853312F960B
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3134342e302f32322d3232203d3e203138343239.roa
Signing time: Mon 11 May 2026 17:08:15 +0000
ROA not before: Mon 11 May 2026 17:03:15 +0000
ROA not after: Mon 10 May 2027 17:08:15 +0000
asID: 18429
IP address blocks: 61.57.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f3:d2:7f:d8:cd:b6:91:bd:91:c2:d3:99:76:28:53:31:2f:96:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Validity
Not Before: May 11 17:03:15 2026 GMT
Not After : May 10 17:08:15 2027 GMT
Subject: CN=6B8F5A099E270E5B2FD9B712584C2EEF494914C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:5a:d7:68:bd:26:ea:f9:da:dd:81:12:82:
46:ee:a0:cb:3e:d8:1b:48:05:36:c0:99:9c:91:2f:
6f:8c:a5:e9:94:8a:aa:9d:7d:fd:83:2e:4f:42:14:
dc:3f:7a:7a:36:6a:a0:86:80:f2:e2:7f:43:d3:a7:
d2:cb:97:04:d4:26:02:d3:54:00:d6:53:cb:85:bb:
4a:e7:00:5c:6e:30:95:f5:74:fb:0b:8d:ae:85:28:
17:52:2c:15:90:42:36:a1:cd:08:7f:2b:af:a3:8a:
6a:19:48:aa:ca:75:01:b3:90:45:44:9e:a2:c1:ec:
26:e6:18:b7:c5:88:4e:fb:52:c8:0d:1e:0c:d0:87:
77:da:3a:be:cd:26:2f:32:21:a7:a5:57:5c:a8:16:
3e:43:fa:99:96:fd:45:65:40:ac:15:d9:72:cc:fb:
20:4b:92:17:3c:89:d9:13:6f:07:73:48:ef:17:6f:
48:c4:1e:6d:eb:5e:6e:75:67:dc:13:0b:7a:48:bd:
8d:b3:d6:dd:a6:b6:ad:14:7e:d6:d0:e9:9e:dc:4e:
5c:38:1f:b1:95:88:4a:b1:cf:ce:a1:88:04:65:30:
92:ec:8d:99:c5:34:78:a5:b2:db:f6:2f:83:93:08:
88:28:ea:66:7b:f2:63:b4:bf:e7:78:44:98:0a:4f:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8F:5A:09:9E:27:0E:5B:2F:D9:B7:12:58:4C:2E:EF:49:49:14:C1
X509v3 Authority Key Identifier:
keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3134342e302f32322d3232203d3e203138343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.57.144.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:7f:d2:ba:75:1d:24:66:39:b9:c8:71:55:b4:2b:b3:67:86:
75:b4:dd:4e:12:a8:bc:4a:35:9d:77:81:ec:57:1e:c0:0b:dc:
d4:0b:2d:b7:2b:da:c9:3b:b9:42:5f:fe:d3:7a:8e:3c:38:46:
c8:f9:a3:be:63:28:ca:4c:60:6d:9a:55:27:5b:e1:21:0e:90:
42:f2:a6:19:7b:53:23:43:33:ca:45:7d:93:9f:08:99:b7:c9:
24:6d:ef:14:22:23:25:5a:e1:d1:90:c0:1d:56:e5:4c:1c:87:
5e:23:49:76:bc:ad:ca:45:a4:2a:f3:d2:a2:1a:67:73:81:d3:
8a:e9:76:e1:b4:32:57:35:8e:19:a7:da:5e:73:e0:24:5a:ca:
38:b1:60:b2:a0:24:7a:60:77:7b:6e:41:18:8d:37:75:05:20:
f5:aa:4b:51:5c:ab:a2:ca:f9:32:d3:0d:1b:5c:dd:57:9d:b3:
81:b8:c8:bd:4c:4e:a9:de:50:03:7b:53:bc:52:6a:8f:70:e4:
0c:df:87:5f:e1:0f:89:5e:c3:dd:30:d2:cf:66:bd:68:00:30:
eb:22:2c:bf:94:71:35:0a:35:7d:04:a6:89:13:0a:b5:93:7e:
cb:d6:c7:16:5f:1f:a5:5f:a4:fd:f7:f4:66:c1:e0:55:f3:8e:
be:34:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:10 2026 by rpki-client