Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/AS142142.roa
File: AS142142.roa (raw, json)
Hash identifier: cJofD+wgL+2D0dIIwDim3qcL1NmCazDSh7JhBNr3dNc=
Subject key identifier: 89:AB:D6:FD:82:D8:16:7C:03:91:66:1D:FB:37:62:60:99:40:B1:E5
Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Certificate serial: 20F3A4D97148C08DC0133C1BD36E6440DFB1A264
Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS142142.roa
Signing time: Mon 11 May 2026 17:44:53 +0000
ROA not before: Mon 11 May 2026 17:39:53 +0000
ROA not after: Mon 10 May 2027 17:44:53 +0000
asID: 142142
IP address blocks: 150.116.14.0/23 maxlen: 24
150.116.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f3:a4:d9:71:48:c0:8d:c0:13:3c:1b:d3:6e:64:40:df:b1:a2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Validity
Not Before: May 11 17:39:53 2026 GMT
Not After : May 10 17:44:53 2027 GMT
Subject: CN=89ABD6FD82D8167C0391661DFB3762609940B1E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:c7:c5:b0:60:d0:c4:ad:d5:3c:e5:28:34:
de:f7:82:81:e7:2c:28:5f:1d:a3:f2:c5:47:e3:0a:
34:92:cc:03:b9:1d:b0:05:81:68:2b:5c:ec:76:88:
ef:b4:bc:21:c5:6f:d4:e4:fb:46:e5:93:ca:91:09:
57:0c:5a:92:e7:42:38:d9:54:f3:e1:3c:86:1f:98:
de:88:13:38:a9:4f:c7:ed:13:82:d2:95:34:9d:d9:
9c:f7:97:a1:21:45:8d:2d:c1:06:ac:e8:37:8e:b4:
ef:5d:8d:67:fd:7e:52:85:a7:79:ef:e2:ab:58:f9:
60:da:b7:98:ce:2a:9c:b2:4a:f3:1f:4a:20:13:94:
44:34:7e:61:49:33:81:bc:d0:1d:e4:5e:93:03:3a:
54:ca:4a:a0:bd:48:ff:c1:0f:da:2e:3c:64:ba:d3:
c2:a2:e2:1e:e1:e1:f1:fd:3b:2c:30:bc:6f:25:0a:
71:84:dc:3d:a3:db:5c:a3:b0:2f:e7:08:8d:ff:3c:
d7:31:9d:5a:c4:fa:f0:8e:1e:39:7a:27:01:69:82:
4c:de:88:fc:c6:6e:70:85:cb:23:12:39:ec:94:6a:
57:fb:44:0b:c4:52:af:f8:89:49:7a:92:11:27:93:
00:00:bd:71:d8:bc:fb:3f:b4:b8:9f:76:d6:0a:d9:
7e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AB:D6:FD:82:D8:16:7C:03:91:66:1D:FB:37:62:60:99:40:B1:E5
X509v3 Authority Key Identifier:
keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS142142.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.116.14.0/23
150.116.53.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:7c:06:a4:61:a9:36:1c:80:2b:da:1e:e2:08:86:d8:ba:f2:
c3:45:03:59:82:8e:54:2f:97:2f:65:c7:c9:f3:6a:b1:9d:44:
86:d6:37:2b:3f:d8:20:d0:54:b9:81:bc:2e:d5:a3:3f:d7:62:
68:b5:05:c9:eb:ca:4b:76:75:c4:cd:40:c2:3b:d9:00:db:97:
30:ba:6a:40:87:bb:f3:39:d0:2d:98:88:58:b7:78:40:88:ac:
e0:b8:32:d0:b2:fd:13:91:65:50:f3:76:58:93:2c:1d:eb:6b:
11:8e:81:c2:6e:0e:87:1d:77:2a:fa:9c:38:c1:c0:74:88:ce:
f9:dc:76:e5:31:c1:b7:4c:c6:bc:1a:56:76:5a:f2:e5:ef:fd:
de:04:5a:19:af:7d:3e:f1:bf:c6:42:15:88:04:7f:2c:27:08:
82:54:cd:0c:05:f6:fc:8d:d0:34:7b:76:99:22:ec:5b:5c:be:
4f:41:f2:0f:74:1c:1b:f5:e0:1d:58:40:50:98:a7:dd:ad:ba:
67:48:4e:4a:20:98:d9:46:81:2b:f2:e0:d2:e6:1c:fa:6b:2f:
8e:d4:fa:87:c0:48:f3:c9:df:80:3d:a1:a4:3c:f2:36:8d:8c:
67:4c:5e:b0:ef:88:9a:27:73:1c:e8:b7:41:b9:a9:2e:f0:92:
ec:5a:c9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:51 2026 by rpki-client