Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/AS17651.roa
File: AS17651.roa (raw, json)
Hash identifier: saImIicoMhFhyAiu3X9cFqQpw4AOPcKEzXWMqV3wLV0=
Subject key identifier: 1C:5F:B7:84:62:43:D3:00:5E:81:1B:67:FB:11:47:9E:2B:6F:3C:44
Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Certificate serial: 4F7AA7BF6CDA682D61E97B32BB8723D32E38E0EE
Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS17651.roa
Signing time: Mon 11 May 2026 17:20:13 +0000
ROA not before: Mon 11 May 2026 17:15:13 +0000
ROA not after: Mon 10 May 2027 17:20:13 +0000
asID: 17651
IP address blocks: 150.116.52.0/24 maxlen: 24
150.116.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:7a:a7:bf:6c:da:68:2d:61:e9:7b:32:bb:87:23:d3:2e:38:e0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Validity
Not Before: May 11 17:15:13 2026 GMT
Not After : May 10 17:20:13 2027 GMT
Subject: CN=1C5FB7846243D3005E811B67FB11479E2B6F3C44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:3d:6d:48:f9:7a:d3:ed:cc:f5:b3:2f:9a:
11:ec:ac:c1:9a:6b:26:7f:8c:1d:f1:e0:21:2e:ac:
2c:d3:2c:e1:42:7c:e8:a3:d3:a1:69:2e:64:10:03:
e3:77:5a:d4:e2:bf:a3:e1:f1:5f:72:63:6d:c4:8c:
2f:89:60:10:cc:0a:05:39:b9:76:b5:48:9f:f0:71:
8b:c6:d0:d2:ff:08:a7:9b:c1:fd:f8:c8:9b:70:36:
9d:84:46:9f:be:35:7c:45:78:4e:98:ea:3a:6f:93:
d0:ca:01:c6:06:e0:52:e7:c8:e7:ac:8b:69:f7:3f:
be:d0:16:63:8c:ed:f9:fe:b7:b4:e5:bb:99:9b:42:
0f:d4:47:43:cf:b8:c8:0d:ea:0c:69:89:e8:ef:58:
6b:91:92:e5:a0:80:8c:6c:63:97:8c:96:b0:40:b5:
e3:b0:1d:5c:59:9a:a4:cd:05:0b:f5:05:1a:ea:6e:
b3:72:b8:28:cb:f4:22:3d:40:4c:06:36:b6:e7:af:
19:55:6e:3a:1c:6b:40:d8:82:0e:ab:79:f1:a9:4d:
00:f6:fc:8d:2f:d2:e7:88:0d:2d:2f:ff:4f:d0:24:
4b:95:f5:32:3b:9c:ce:32:68:56:29:37:7b:b8:4f:
99:bf:be:c4:d9:ff:27:77:c5:9e:17:17:32:03:25:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5F:B7:84:62:43:D3:00:5E:81:1B:67:FB:11:47:9E:2B:6F:3C:44
X509v3 Authority Key Identifier:
keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS17651.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.116.52.0/24
150.116.116.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c9:79:c2:ac:6f:9d:98:c5:44:00:97:4f:b7:5a:6b:4c:95:
f6:89:14:70:4a:84:92:96:c1:3a:b8:51:e3:3f:ce:13:29:da:
52:ce:db:1d:70:c2:a2:33:97:0b:0e:94:f6:6f:f0:16:b6:c8:
48:b6:0f:85:ca:2d:60:77:eb:20:15:7e:80:cf:de:a9:12:40:
6b:39:b0:8e:e0:29:aa:b7:01:78:36:2e:34:5b:d1:a3:45:db:
e8:b2:37:60:91:4d:ac:49:50:ff:5f:3d:4f:c1:fa:5f:bc:76:
06:4f:e0:94:af:ea:e7:d9:ba:9c:84:e7:19:f0:21:ce:49:2f:
c8:b5:c5:eb:8c:53:e7:14:0b:2e:59:d2:63:ab:9c:32:2e:da:
43:5b:16:65:da:42:c0:c0:63:66:0c:54:9e:2d:4c:75:da:7d:
01:45:9e:d7:70:e1:b0:57:ee:70:92:43:c3:1a:20:5a:e7:75:
03:fb:a1:54:7e:e4:12:63:8b:f8:26:6d:5d:47:2f:7f:e6:79:
9d:d2:b9:6c:a5:bf:b0:b2:3e:f0:4c:65:c7:d2:5f:d8:7c:a3:
a5:9e:61:8f:5f:ff:40:10:09:a5:02:53:e1:94:97:f4:f5:b7:
ca:92:fa:b5:24:99:07:71:9b:34:bb:2b:40:31:b7:fe:31:f1:
31:ff:f8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:51 2026 by rpki-client