Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINALIFE/0/3130332e3132332e3138392e302f32342d3234203d3e2039393234.roa
File: 3130332e3132332e3138392e302f32342d3234203d3e2039393234.roa (raw, json)
Hash identifier: ehfoOrBXE/RYfQPRqQV54VXyN1X6HRTFxmEyqkWRtOI=
Subject key identifier: B7:F5:A5:54:CD:E4:81:88:D3:C5:4C:83:C6:42:BD:65:4D:D6:48:D5
Certificate issuer: /CN=CE5A8100BA0994A2B807F5F4FB741C528EEACCDD
Certificate serial: 6F4D9E49742DE4F43954AA19C1A5A956111C8A18
Authority key identifier: CE:5A:81:00:BA:09:94:A2:B8:07:F5:F4:FB:74:1C:52:8E:EA:CC:DD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/3130332e3132332e3138392e302f32342d3234203d3e2039393234.roa
Signing time: Mon 11 May 2026 17:04:13 +0000
ROA not before: Mon 11 May 2026 16:59:13 +0000
ROA not after: Mon 10 May 2027 17:04:13 +0000
asID: 9924
IP address blocks: 103.123.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:4d:9e:49:74:2d:e4:f4:39:54:aa:19:c1:a5:a9:56:11:1c:8a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE5A8100BA0994A2B807F5F4FB741C528EEACCDD
Validity
Not Before: May 11 16:59:13 2026 GMT
Not After : May 10 17:04:13 2027 GMT
Subject: CN=B7F5A554CDE48188D3C54C83C642BD654DD648D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:a7:78:9e:d6:9a:27:fd:07:3e:68:27:5e:
5c:84:e8:35:57:ff:81:93:3f:dd:28:f7:d8:b1:bf:
98:01:6c:01:b8:d7:20:51:90:98:b7:7e:3a:c6:e5:
95:97:b0:a0:9e:9a:55:70:bd:03:3d:d8:64:e0:fb:
54:ad:42:ea:48:53:9b:78:5e:89:aa:9a:89:dc:81:
04:63:44:f3:b6:57:a4:ff:85:e9:f6:0d:eb:26:bc:
4a:76:ea:a5:0a:35:ef:89:0f:80:50:57:ab:e4:53:
27:f0:60:5e:aa:86:81:65:40:52:0f:68:19:10:6b:
a1:1e:f2:b0:4b:09:4f:cd:35:e6:0b:75:d1:8b:f4:
36:a0:07:db:cb:03:90:0c:1e:c9:af:61:f4:4d:f1:
15:8e:de:50:b7:21:84:cc:3b:b0:42:e2:7c:90:d0:
fc:ea:89:c8:2a:22:46:3f:7c:84:6c:53:89:78:ce:
29:68:10:2e:95:0e:08:20:ee:63:ec:12:fc:e5:5f:
f9:3e:cd:d1:33:72:cb:71:40:f5:a4:e1:84:20:86:
4d:90:c8:5b:43:2c:77:eb:b8:43:f1:ec:f2:29:98:
3b:30:8d:41:f7:fb:b9:90:85:cd:30:de:2d:e2:81:
9f:88:ed:84:ef:78:5a:5c:b5:18:6f:34:b7:2c:c2:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F5:A5:54:CD:E4:81:88:D3:C5:4C:83:C6:42:BD:65:4D:D6:48:D5
X509v3 Authority Key Identifier:
keyid:CE:5A:81:00:BA:09:94:A2:B8:07:F5:F4:FB:74:1C:52:8E:EA:CC:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/3130332e3132332e3138392e302f32342d3234203d3e2039393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.189.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:98:2b:4a:fd:63:26:dd:ab:af:be:f3:1b:9e:43:72:17:f7:
71:02:53:47:54:8f:bf:cb:65:ca:40:ac:64:e0:6f:2d:6b:02:
20:bd:c3:f4:98:c5:7c:5d:58:61:73:25:70:7d:de:c0:71:78:
e4:9e:96:f4:db:03:8b:b4:8c:62:41:f1:71:20:72:30:b1:eb:
d1:55:9d:87:a4:ce:ce:74:f8:5c:3a:9e:43:a4:09:f6:20:43:
b1:4e:7f:79:03:b1:c3:6e:82:17:8b:4f:d1:06:63:de:18:e7:
42:9a:22:1e:83:f2:49:9e:eb:0f:75:e1:33:92:5e:42:9c:95:
d8:c1:5e:06:53:47:74:51:67:6e:b4:2f:41:54:9b:7e:2c:d3:
fc:d5:76:0a:c4:7d:c3:36:78:09:75:93:df:40:8c:0a:91:06:
fe:83:13:f9:7a:1b:ba:05:83:6b:39:7a:66:86:69:36:22:55:
7d:33:06:4f:21:2e:70:32:62:57:37:02:c6:80:24:b7:6a:dc:
3f:fe:8b:d7:71:9e:7d:cc:23:56:a5:45:54:a7:cc:c0:5d:a6:
6e:16:23:d0:30:69:ff:1a:77:df:31:fa:26:88:8d:da:db:76:
b2:91:84:4b:11:58:0b:84:f1:cb:a6:3a:ef:b0:cc:22:be:d3:
42:95:ab:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:02 2026 by rpki-client