Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3135322e302f32322d3232203d3e203138343239.roa
File: 36312e35372e3135322e302f32322d3232203d3e203138343239.roa (raw, json)
Hash identifier: nIMsqJIvPW5zTjv/3Tj3rBMkdFRgLn82LmjHXLU3CAk=
Subject key identifier: 37:73:84:F4:BE:80:CE:0C:34:FB:79:3F:28:BC:6C:D5:83:DD:82:EA
Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial: 0818F442B1B8A80BECC564B8F3A7524493CB9278
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3135322e302f32322d3232203d3e203138343239.roa
Signing time: Mon 11 May 2026 17:09:41 +0000
ROA not before: Mon 11 May 2026 17:04:41 +0000
ROA not after: Mon 10 May 2027 17:09:41 +0000
asID: 18429
IP address blocks: 61.57.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:18:f4:42:b1:b8:a8:0b:ec:c5:64:b8:f3:a7:52:44:93:cb:92:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Validity
Not Before: May 11 17:04:41 2026 GMT
Not After : May 10 17:09:41 2027 GMT
Subject: CN=377384F4BE80CE0C34FB793F28BC6CD583DD82EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:17:21:ee:8b:ab:1c:4c:b9:92:fb:bc:0e:46:
a2:74:de:42:36:e2:05:4e:ff:c5:c8:28:53:8d:b4:
91:d1:9e:ee:28:f3:66:c0:05:c2:f5:ce:8e:b3:de:
ef:7a:6b:ea:9e:ce:44:ed:90:9c:69:31:58:1f:f6:
f9:5a:48:73:74:71:28:03:89:b9:52:ae:5a:d7:da:
01:4d:8d:8c:6c:c8:6e:b9:05:ed:31:c2:cc:73:b8:
db:60:0b:4f:ee:45:57:51:86:d3:7c:cf:bf:00:90:
dc:47:ee:a2:c4:42:e8:13:b3:74:a1:d9:4a:e2:47:
36:2d:14:e9:6f:dc:30:99:a6:d7:a2:6c:4e:76:81:
7f:27:ac:bd:b2:82:d4:3c:22:c9:8a:61:98:12:10:
77:b7:39:e9:d1:bf:b0:d0:d0:f0:e4:d7:40:73:8a:
f0:ef:1e:ce:b9:20:6d:8c:32:0e:cb:34:fc:01:2a:
11:72:24:b5:34:e3:35:d9:3c:bd:a9:84:3e:60:4e:
af:82:f9:9f:f4:d0:bc:88:38:f9:3f:a6:8c:39:82:
2d:0f:b8:8f:e8:03:44:66:04:f5:02:6b:19:cd:49:
bc:c9:98:f6:14:0d:dc:f4:eb:81:27:8e:ef:f6:4e:
88:cf:53:a2:f6:df:9d:ca:1d:ba:ef:58:a0:4c:07:
a6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:73:84:F4:BE:80:CE:0C:34:FB:79:3F:28:BC:6C:D5:83:DD:82:EA
X509v3 Authority Key Identifier:
keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3135322e302f32322d3232203d3e203138343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.57.152.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:66:21:b1:77:de:35:9d:95:df:2b:ae:13:3e:bf:25:e3:ad:
9f:b3:54:e7:ee:7c:68:82:0c:27:d1:c4:66:ce:32:23:68:ff:
96:c7:88:6e:b5:45:25:6b:8a:d5:60:7b:82:f2:bf:33:88:04:
1a:dd:0d:2a:bb:57:5d:17:34:6d:74:67:e1:81:75:24:4d:68:
e3:82:50:76:95:77:6d:6d:38:76:54:3c:86:cc:e2:65:23:37:
e3:26:02:da:18:e7:7c:61:c7:58:28:10:8f:16:72:3c:5d:90:
bd:60:87:0b:fd:47:01:54:32:23:3c:98:83:6b:66:1a:88:25:
dd:19:d0:01:bc:25:fe:f9:cc:dd:d6:44:3b:68:3d:86:b1:1d:
b3:17:d3:f5:6c:8e:50:78:79:3c:fe:6b:c0:02:cb:de:e2:4b:
17:a6:87:32:11:34:19:82:8f:5c:56:9d:30:09:1c:a7:fe:e5:
5f:7a:f3:6e:5a:54:50:6f:40:ba:96:20:12:88:04:86:d9:17:
27:e1:8a:38:3d:17:f1:b1:3a:c5:d0:94:68:29:6e:aa:3b:d5:
e8:29:30:b4:80:e5:4f:10:20:3d:6d:ae:a9:b8:b0:8e:23:48:
70:81:59:c2:3d:25:77:4e:15:81:0a:56:31:4a:52:44:f6:f8:
d3:0b:25:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:15 2026 by rpki-client