Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/AS9831.roa
File: AS9831.roa (raw, json)
Hash identifier: FWqKihPbwMeaIlZ7ThBn9asgGgR941PW7x3/Ort9ea4=
Subject key identifier: B2:58:64:4A:B1:B1:49:0B:83:46:A7:4A:17:23:67:F8:CA:3E:0B:1B
Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Certificate serial: 48CBD537E5EB53C6AE99F383A852274914EB7509
Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS9831.roa
Signing time: Mon 11 May 2026 17:17:32 +0000
ROA not before: Mon 11 May 2026 17:12:32 +0000
ROA not after: Mon 10 May 2027 17:17:32 +0000
asID: 9831
IP address blocks: 203.163.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:cb:d5:37:e5:eb:53:c6:ae:99:f3:83:a8:52:27:49:14:eb:75:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Validity
Not Before: May 11 17:12:32 2026 GMT
Not After : May 10 17:17:32 2027 GMT
Subject: CN=B258644AB1B1490B8346A74A172367F8CA3E0B1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:64:65:01:7a:3c:ca:e0:2b:6b:ef:91:01:
6a:19:3c:ca:ee:65:4a:97:c0:90:6c:c5:14:db:99:
bd:2a:0b:a9:22:2c:f3:d9:1e:ee:2c:6d:a8:74:ca:
b6:41:71:04:0c:5b:2d:58:b4:dc:bc:54:e3:69:54:
49:44:c2:a2:66:f8:18:6d:86:cf:48:f6:05:89:18:
ae:f5:67:f4:d1:55:fe:22:6f:af:6a:89:e9:26:a7:
75:17:eb:4d:f7:18:9a:12:e4:c7:ad:70:52:f0:cc:
cb:27:a0:c9:72:0b:17:af:fd:4d:69:13:60:81:e9:
39:d9:d9:39:7c:0a:87:1a:ac:bb:a7:62:ad:52:46:
35:0e:78:fc:80:e5:3a:87:fd:c8:09:26:8c:57:3a:
f9:20:c6:52:7c:a2:6d:59:4d:61:2d:60:fb:69:5e:
b3:82:ac:71:e2:86:0c:bc:2d:38:27:aa:06:8e:73:
fb:15:cf:80:cc:d9:35:49:ca:3f:1c:73:c9:33:36:
47:91:22:be:89:52:e2:e7:e0:02:32:10:de:5c:64:
30:2d:29:39:93:a5:b4:ae:2a:92:63:e5:af:7e:6b:
7e:6d:0c:b6:47:f0:3b:c4:ff:99:fc:43:60:9a:26:
18:8c:ee:a8:7e:9c:9f:ac:8d:5a:1d:85:b0:af:5e:
0c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:58:64:4A:B1:B1:49:0B:83:46:A7:4A:17:23:67:F8:CA:3E:0B:1B
X509v3 Authority Key Identifier:
keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS9831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.163.201.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:4c:fd:40:02:6c:03:fd:3e:ef:b6:59:03:2b:6d:70:38:f5:
8d:99:e7:38:58:91:f2:f1:cb:3f:3f:aa:f1:ea:2e:df:92:9b:
d7:f1:98:c9:0b:29:b5:db:45:3d:ff:ca:ec:14:70:fe:32:19:
d6:3b:13:25:d8:02:7e:45:e9:26:1a:11:f5:81:54:4e:07:50:
08:5a:d7:fc:6e:46:95:44:35:5b:2a:1a:f4:34:1d:12:18:10:
44:7f:9a:5f:8b:45:24:ca:f0:64:b8:2f:ff:30:e5:c2:90:ef:
7a:15:15:dd:1a:f9:a1:15:95:1b:91:70:4f:95:12:eb:56:c4:
85:77:6b:fa:ac:b2:7a:ce:d2:02:4b:7e:2e:57:2f:46:72:d1:
d4:7f:91:de:dd:27:c6:b3:a3:6e:74:c8:2d:df:82:2b:8e:97:
62:4b:10:00:21:d4:4c:79:b8:ff:61:60:74:a4:07:4c:e7:ab:
77:1b:30:9a:f4:b5:dd:4c:ad:0c:da:f6:80:a8:d3:d8:e8:57:
35:a7:34:37:16:b1:61:e3:d1:21:b9:58:e3:c2:d6:1b:82:1e:
82:12:01:82:e8:5d:a3:53:db:d5:d1:9c:f6:fa:ed:e9:41:b0:
c4:98:f8:ca:8d:1a:a5:cf:70:fe:73:b0:87:19:49:29:1e:88:
2e:92:c2:ed
-----BEGIN CERTIFICATE-----
MIIErTCCA5WgAwIBAgIUSMvVN+XrU8aumfODqFInSRTrdQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNDQTRCNUY0Mjk1QjY4MTIxMjdBRjU3NjFDNkQ3MzUz
RDFGMDMxNDAeFw0yNjA1MTExNzEyMzJaFw0yNzA1MTAxNzE3MzJaMDMxMTAvBgNV
BAMTKEIyNTg2NDRBQjFCMTQ5MEI4MzQ2QTc0QTE3MjM2N0Y4Q0EzRTBCMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkXmRlAXo8yuAra++RAWoZPMru
ZUqXwJBsxRTbmb0qC6kiLPPZHu4sbah0yrZBcQQMWy1YtNy8VONpVElEwqJm+Bht
hs9I9gWJGK71Z/TRVf4ib69qiekmp3UX6033GJoS5MetcFLwzMsnoMlyCxev/U1p
E2CB6TnZ2Tl8CocarLunYq1SRjUOePyA5TqH/cgJJoxXOvkgxlJ8om1ZTWEtYPtp
XrOCrHHihgy8LTgnqgaOc/sVz4DM2TVJyj8cc8kzNkeRIr6JUuLn4AIyEN5cZDAt
KTmTpbSuKpJj5a9+a35tDLZH8DvE/5n8Q2CaJhiM7qh+nJ+sjVodhbCvXgzBAgMB
AAGjggG3MIIBszAdBgNVHQ4EFgQUslhkSrGxSQuDRqdKFyNn+Mo+CxswHwYDVR0j
BBgwFoAUM8pLX0KVtoEhJ69XYcbXNT0fAxQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJRUYt
VFcvMC8zM0NBNEI1RjQyOTVCNjgxMjEyN0FGNTc2MUM2RDczNTNEMUYwMzE0LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzMzQ0E0QjVGNDI5NUI2ODEyMTI3QUY1NzYx
QzZENzM1M0QxRjAzMTQuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4Yy
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElFRi1UVy8wL0FTOTgzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAMujyTANBgkqhkiG9w0BAQsFAAOCAQEATkz9QAJsA/0+77ZZAytt
cDj1jZnnOFiR8vHLPz+q8eou35Kb1/GYyQsptdtFPf/K7BRw/jIZ1jsTJdgCfkXp
JhoR9YFUTgdQCFrX/G5GlUQ1Wyoa9DQdEhgQRH+aX4tFJMrwZLgv/zDlwpDvehUV
3Rr5oRWVG5FwT5US61bEhXdr+qyyes7SAkt+LlcvRnLR1H+R3t0nxrOjbnTILd+C
K46XYksQACHUTHm4/2FgdKQHTOerdxswmvS13UytDNr2gKjT2OhXNac0NxaxYePR
IblY48LWG4IeghIBguhdo1Pb1dGc9vrt6UGwxJj4yo0apc9w/nOwhxlJKR6ILpLC
7Q==
-----END CERTIFICATE-----
Generated at Wed May 13 02:48:51 2026 by rpki-client