Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/AS63199.roa
File: AS63199.roa (raw, json)
Hash identifier: K7p+/FAv1xE8+SKc9RiQCaNiZuYVks05xmlRCszBRLI=
Subject key identifier: 7F:BD:F2:E6:4A:3A:CA:74:70:3B:2B:78:C6:A7:6E:DD:4F:4D:D9:EC
Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Certificate serial: 0FE65715D2F6D653C841A0AEBEC62CF3B80FEAAE
Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS63199.roa
Signing time: Mon 11 May 2026 17:37:24 +0000
ROA not before: Mon 11 May 2026 17:32:24 +0000
ROA not after: Mon 10 May 2027 17:37:24 +0000
asID: 63199
IP address blocks: 150.116.0.0/24 maxlen: 24
150.116.1.0/24 maxlen: 24
150.116.2.0/23 maxlen: 24
150.116.3.0/24 maxlen: 24
150.116.4.0/23 maxlen: 24
150.116.4.0/24 maxlen: 24
150.116.5.0/24 maxlen: 24
150.116.12.0/24 maxlen: 24
150.116.82.0/24 maxlen: 24
150.116.92.0/22 maxlen: 24
203.163.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e6:57:15:d2:f6:d6:53:c8:41:a0:ae:be:c6:2c:f3:b8:0f:ea:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Validity
Not Before: May 11 17:32:24 2026 GMT
Not After : May 10 17:37:24 2027 GMT
Subject: CN=7FBDF2E64A3ACA74703B2B78C6A76EDD4F4DD9EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2c:6e:55:2e:b5:a6:52:d3:7e:39:bd:03:bf:
e7:9d:87:8e:f1:77:f5:ee:11:14:17:71:bd:1a:a1:
14:59:4e:c3:6c:e5:a1:48:62:c6:32:df:12:d3:1a:
5b:49:26:92:ce:77:8f:de:2e:c6:b5:62:ed:0e:01:
e6:f3:da:3d:01:fa:79:ce:79:d2:9e:f4:25:72:67:
23:e6:38:d0:e6:4e:db:6b:50:d4:6b:44:a6:6f:ab:
bd:d9:9d:b3:36:87:91:34:1b:4c:22:ea:ea:38:31:
e9:53:d5:60:2b:7b:ad:8e:7c:e9:d9:3a:22:94:f3:
25:3f:af:e7:25:cb:db:2c:6d:7e:63:10:2b:ba:b0:
06:8f:21:f9:4c:a7:ab:8a:db:98:82:64:b0:07:d0:
12:36:45:4e:49:2f:da:49:df:40:bb:95:db:9d:2c:
de:b5:85:fa:8f:1b:e9:46:9f:88:d4:e0:4d:8b:e8:
e6:97:7c:58:94:86:ab:0f:ac:90:22:3e:54:c2:9b:
79:51:36:3f:02:27:4e:21:45:ef:11:c0:b5:d9:f4:
47:5c:76:9b:15:24:e1:cd:6b:1d:22:1f:8b:1f:11:
51:e5:8d:83:80:72:b3:a5:33:73:ef:db:ff:60:20:
06:dc:77:af:08:33:80:45:ed:65:8a:97:06:e3:4f:
90:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BD:F2:E6:4A:3A:CA:74:70:3B:2B:78:C6:A7:6E:DD:4F:4D:D9:EC
X509v3 Authority Key Identifier:
keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS63199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.116.0.0-150.116.5.255
150.116.12.0/24
150.116.82.0/24
150.116.92.0/22
203.163.216.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:26:e3:21:53:c7:f8:ca:e9:0b:41:43:a9:f8:55:fe:25:4f:
29:65:32:5c:c0:a6:1c:89:30:43:c5:49:52:c7:18:b5:77:42:
96:51:50:a3:52:14:bc:8a:97:30:01:10:63:59:79:6f:af:6b:
dc:d1:48:1b:d8:64:05:e4:7a:76:f4:f9:bf:2a:ee:cf:02:73:
c6:c2:0a:39:f9:d5:9b:32:47:db:84:fe:00:86:2e:fd:ea:90:
8d:d9:ff:b1:9e:62:b5:dd:f2:59:ce:1d:c2:6a:0e:d7:0c:62:
8c:2a:b6:de:cb:4b:18:5d:6f:ae:98:5e:27:af:4e:cb:00:c2:
b0:d1:55:db:6d:ab:97:2b:f6:a9:29:a3:15:09:66:39:74:ea:
b7:d3:eb:c1:c9:bc:94:c6:02:a2:d2:f5:4d:9b:4b:2b:2f:73:
64:1f:d6:c3:52:17:99:b2:3f:b4:0f:5d:ca:47:17:40:dc:4e:
ac:ee:76:ca:da:65:3d:bd:9a:4c:5d:50:0a:bb:ba:84:21:ad:
cb:46:94:2f:fe:24:5e:aa:f4:de:1f:90:d2:03:23:70:b9:6c:
e3:6c:36:9e:2c:d5:df:8b:be:68:1c:31:dd:29:9b:66:a2:7d:
a6:ff:fd:e9:f9:fb:5c:78:3a:43:5b:a3:18:7a:ea:48:0f:42:
3b:70:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:52 2026 by rpki-client