Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATRUST/0/3130332e3132362e3136342e302f32322d3234203d3e20313331313433.roa
File: 3130332e3132362e3136342e302f32322d3234203d3e20313331313433.roa (raw, json)
Hash identifier: GE6WCLDpaYk350arhm6T0hTObeMU3HA8Pi8MilsnVwk=
Subject key identifier: E8:CA:CD:71:AA:02:97:F6:82:41:21:68:A5:35:35:7C:47:04:E8:8B
Certificate issuer: /CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D
Certificate serial: 3CD77F3AB185B22C2CF0F589CAB7326AD750670F
Authority key identifier: 80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/3130332e3132362e3136342e302f32322d3234203d3e20313331313433.roa
Signing time: Mon 11 May 2026 17:06:41 +0000
ROA not before: Mon 11 May 2026 17:01:41 +0000
ROA not after: Mon 10 May 2027 17:06:41 +0000
asID: 131143
IP address blocks: 103.126.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d7:7f:3a:b1:85:b2:2c:2c:f0:f5:89:ca:b7:32:6a:d7:50:67:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D
Validity
Not Before: May 11 17:01:41 2026 GMT
Not After : May 10 17:06:41 2027 GMT
Subject: CN=E8CACD71AA0297F682412168A535357C4704E88B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:b4:54:d2:7d:f7:32:a3:1d:dd:95:ac:d8:
ab:26:eb:5b:f4:32:a7:b9:e5:f7:b4:ee:0a:79:7b:
35:48:fc:4d:b1:ed:46:a6:61:83:ea:ae:eb:2c:91:
b1:2e:c0:d7:bc:bc:f2:a4:9c:eb:2d:4c:d4:ae:94:
5a:7b:c6:a0:96:cd:18:3f:5c:06:ec:73:60:35:38:
bb:92:e1:1e:55:ab:5c:e1:60:07:58:2d:15:ea:c4:
70:4a:63:e0:97:21:d8:72:45:c6:4f:9a:f9:b3:4c:
fb:36:63:ed:d6:36:56:cc:f0:6b:9f:c2:af:69:d3:
99:be:ef:29:c6:91:b3:15:24:d5:4d:84:b2:7c:26:
68:9c:ba:14:0c:f4:b9:70:48:be:79:bd:05:59:90:
3e:d2:f7:3e:2e:e3:e4:18:b5:a4:6d:fe:05:6b:30:
13:99:8b:fe:25:60:0f:63:1d:b2:5c:d3:93:49:92:
19:08:81:43:5e:47:6c:64:c6:87:72:59:1d:97:cf:
2a:cc:15:1e:f3:06:44:50:c8:28:28:8b:1f:a9:38:
e1:25:cd:a0:a1:de:0a:5d:4d:e4:0e:17:7a:85:e2:
2a:ed:c9:94:f0:6b:b2:f6:f3:ac:9e:e2:b4:5d:28:
59:05:ce:e4:15:6f:65:87:4b:17:1f:66:db:5b:f3:
5e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CA:CD:71:AA:02:97:F6:82:41:21:68:A5:35:35:7C:47:04:E8:8B
X509v3 Authority Key Identifier:
keyid:80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/3130332e3132362e3136342e302f32322d3234203d3e20313331313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.126.164.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:05:d7:5d:92:03:a6:e7:2e:1d:e5:ea:4e:c1:ca:55:e0:00:
f3:02:99:11:0a:47:ad:a3:58:6a:e3:ae:16:69:5a:fb:e9:ac:
c4:ec:dc:35:38:dc:72:47:36:8e:67:f4:d7:95:2b:6b:0f:c6:
3f:7f:0b:e2:8a:49:30:bd:85:19:45:80:17:3f:4a:94:20:5d:
39:12:02:b1:83:a8:aa:00:cf:c8:60:e8:62:31:bd:55:32:62:
b2:d2:0b:12:3e:68:b9:1e:17:6a:e6:d1:ed:4a:fa:0f:07:c1:
9d:e2:94:dd:30:14:6c:a8:d0:c2:20:ac:eb:89:8e:a3:b0:a6:
ae:5f:bf:1b:28:78:c3:c5:b3:25:2f:df:35:cf:0a:c4:b1:2f:
e8:e3:7a:12:9d:f4:f0:1a:06:04:39:5c:fa:7b:cd:47:68:c9:
3d:d2:d3:82:85:34:00:a0:57:b5:9a:8b:1f:3c:de:b1:4a:58:
e2:0a:b6:c0:f1:0c:b3:04:9c:e3:3c:21:5b:4a:c3:37:0d:15:
bd:d3:65:36:14:14:83:1b:32:36:d2:aa:27:69:50:3e:30:83:
11:54:de:ab:be:20:c7:2e:a8:39:54:27:c5:2b:9d:a7:69:b9:
b0:ce:5d:a1:d7:a9:71:51:4e:bd:a9:63:33:a3:a0:f2:f6:d3:
08:cc:61:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:31 2026 by rpki-client