Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3134382e302f32342d3234203d3e203138343239.roa
File: 36312e35372e3134382e302f32342d3234203d3e203138343239.roa (raw, json)
Hash identifier: +J1P+3ValXJ+ieyUqwo9tYXiuIu7HD/G0U87IwtMgPY=
Subject key identifier: 32:58:BB:3B:0B:D3:16:8C:2F:23:15:43:94:66:6F:C7:D8:6D:7D:A1
Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial: 6BF939ABF6331684BE356F28CE7F613A856C023F
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3134382e302f32342d3234203d3e203138343239.roa
Signing time: Mon 11 May 2026 17:08:16 +0000
ROA not before: Mon 11 May 2026 17:03:16 +0000
ROA not after: Mon 10 May 2027 17:08:16 +0000
asID: 18429
IP address blocks: 61.57.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f9:39:ab:f6:33:16:84:be:35:6f:28:ce:7f:61:3a:85:6c:02:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Validity
Not Before: May 11 17:03:16 2026 GMT
Not After : May 10 17:08:16 2027 GMT
Subject: CN=3258BB3B0BD3168C2F23154394666FC7D86D7DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:5c:f7:47:ac:c0:5e:21:3a:02:81:f4:5e:
7f:e9:e7:f6:f2:c7:62:bb:38:8d:c7:af:6f:bd:32:
df:6a:cd:fb:de:d8:c5:50:b0:0c:5d:4b:56:2b:80:
00:75:86:b6:22:33:0a:0a:65:0e:a0:12:ae:c6:a1:
d7:c5:e9:bc:95:c0:dc:7b:ba:e6:87:1a:3c:15:dd:
d9:bb:23:40:90:62:29:95:d0:00:54:d2:c2:68:2f:
53:c7:7f:11:03:af:f1:f6:96:b9:ee:fc:91:b5:a6:
9b:53:78:fd:7e:f1:cb:b0:a2:05:05:bd:7d:ae:c0:
34:56:59:d0:db:7d:e1:aa:00:a0:a1:3a:3e:60:22:
ff:3e:d3:e4:eb:3a:20:09:90:f6:71:66:6e:94:7a:
f1:8d:4c:0a:34:63:cf:f1:dd:c2:3d:e2:1a:11:a2:
97:a1:d0:00:b3:fc:e8:0a:4f:b2:01:91:0b:28:8e:
a9:7d:3a:15:9e:e9:91:0e:cc:8f:33:49:9e:09:04:
ef:7c:9d:33:38:9b:21:69:3d:70:0f:68:71:f7:cd:
73:ca:41:8c:f5:17:d8:2c:89:4a:d0:0b:cd:1e:b9:
ed:4e:cd:75:76:bb:c8:83:2f:de:0e:d5:a6:bd:57:
7b:0b:7e:42:6d:87:42:84:fd:d7:95:02:d8:d7:c3:
6b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:58:BB:3B:0B:D3:16:8C:2F:23:15:43:94:66:6F:C7:D8:6D:7D:A1
X509v3 Authority Key Identifier:
keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3134382e302f32342d3234203d3e203138343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.57.148.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:6d:3e:85:23:e2:0b:11:3e:47:32:c1:ce:df:c8:be:07:4b:
83:94:60:6b:2b:49:b6:e0:44:35:d1:64:a5:f5:87:df:78:90:
09:9c:57:8e:a8:98:6c:36:c8:96:7f:ae:d4:9e:da:85:b7:1a:
b2:dc:20:bf:8e:8e:af:b7:ee:55:a4:88:f4:be:e7:50:f5:0d:
88:77:80:d9:ee:f2:ed:1a:98:a1:07:d1:f8:45:45:66:aa:a9:
69:f2:9a:70:59:2d:2a:71:25:7a:ab:ea:f4:2b:ee:4f:fe:41:
14:2e:1b:bc:12:ba:23:ee:52:a8:1c:79:80:b2:86:ac:f7:c8:
99:a8:d8:07:a5:1c:e6:e1:8d:45:a5:ed:1a:29:a8:72:ba:57:
17:cb:3e:f7:4b:dc:d1:d6:53:2b:34:37:2d:1c:9d:b3:99:3e:
ac:9f:f6:13:1e:7d:43:24:73:c4:88:83:ef:fb:07:eb:e0:d8:
15:c2:7c:99:b3:b4:b3:d7:2d:dd:57:ac:89:23:4a:a8:ee:44:
34:7d:e5:6c:85:5b:17:fb:fe:55:46:ea:b1:9d:35:b1:74:43:
f9:cb:59:6d:74:6c:57:85:00:6a:04:a3:f8:be:3a:61:de:b8:
93:bd:17:74:0d:24:08:45:1d:37:e1:60:57:ba:40:d2:30:30:
20:98:13:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:04 2026 by rpki-client