Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CJME/1/3135372e32302e3139392e302f32342d3234203d3e203633383937.roa
File: 3135372e32302e3139392e302f32342d3234203d3e203633383937.roa (raw, json)
Hash identifier: MfbOWwd7Hn558DgriVzN99X3bjQPD3CS9r1j+Tc4hjs=
Subject key identifier: 57:4D:76:05:9E:93:1B:EA:A0:92:0D:26:B9:FE:7D:1B:6C:4C:D0:C4
Certificate issuer: /CN=809400EAA50A7EB3BAC78EED2B98CD40B809FE9E
Certificate serial: 2E18F18228C10215B6D99C1DD8FED70540465182
Authority key identifier: 80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CJME/1/3135372e32302e3139392e302f32342d3234203d3e203633383937.roa
Signing time: Mon 11 May 2026 17:37:33 +0000
ROA not before: Mon 11 May 2026 17:32:33 +0000
ROA not after: Mon 10 May 2027 17:37:33 +0000
asID: 63897
IP address blocks: 157.20.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:18:f1:82:28:c1:02:15:b6:d9:9c:1d:d8:fe:d7:05:40:46:51:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809400EAA50A7EB3BAC78EED2B98CD40B809FE9E
Validity
Not Before: May 11 17:32:33 2026 GMT
Not After : May 10 17:37:33 2027 GMT
Subject: CN=574D76059E931BEAA0920D26B9FE7D1B6C4CD0C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:14:cc:5a:f7:71:32:79:4d:ee:f0:b0:a7:
a3:00:ae:be:3b:74:95:62:03:16:a3:2a:9a:fa:4c:
3f:dc:91:eb:0b:fb:11:4c:3b:15:24:fa:2c:07:1f:
26:06:89:70:9f:69:ae:ca:7a:a2:89:f9:e3:5e:64:
d0:54:2c:8d:3b:f7:cb:a9:b6:b5:1b:df:e1:cc:ae:
71:61:21:d3:de:4f:cf:86:37:f1:4a:16:8f:22:6b:
e4:95:a9:b3:ca:f8:56:0f:51:2a:f1:27:d8:89:29:
07:da:76:90:89:8b:24:45:57:f8:45:f3:75:98:32:
9a:2b:2c:b3:4e:2c:e9:c7:7f:9f:06:bd:5d:74:e7:
5e:42:c3:9a:47:e2:2b:0f:cc:a3:70:13:10:9c:d2:
27:8b:f9:58:ec:66:d4:e6:10:fe:af:b8:fe:78:4c:
52:de:b2:be:e3:33:99:dc:ff:85:4b:04:ea:4c:12:
2c:16:a4:d3:29:52:1f:61:dd:a5:3b:05:e8:05:02:
84:75:b5:71:03:f4:a1:ce:67:5d:3a:89:bb:f0:17:
85:5f:e8:60:ce:c5:ff:ee:4b:cb:32:ba:1b:7e:60:
51:af:4f:34:54:d6:5e:a9:2a:72:4b:03:d1:0a:a5:
ac:92:cd:fb:a9:cb:93:60:6d:fd:1d:ba:fd:f5:d5:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4D:76:05:9E:93:1B:EA:A0:92:0D:26:B9:FE:7D:1B:6C:4C:D0:C4
X509v3 Authority Key Identifier:
keyid:80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CJME/1/3135372e32302e3139392e302f32342d3234203d3e203633383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.199.0/24
Signature Algorithm: sha256WithRSAEncryption
39:5a:b3:ce:1f:fa:71:fa:9a:af:d8:c1:84:a1:40:b8:d4:d7:
6f:46:bd:ca:c6:d5:30:19:09:d6:61:b9:26:67:ad:10:82:5a:
12:e9:16:8a:80:60:57:66:68:88:79:ac:5f:8a:a7:4e:3e:21:
63:17:79:8f:8c:f6:f9:a6:58:92:4b:70:79:81:c2:e1:ae:9a:
5a:44:cd:6e:84:a8:0e:69:ef:e4:9c:d8:46:1b:fd:5d:f9:d6:
39:ee:ee:70:bf:23:ab:51:58:2d:f5:6d:a9:da:52:4f:0f:fd:
43:da:11:e4:e3:86:3c:e6:84:a0:5b:ee:e5:d0:00:80:2f:81:
9d:70:de:6b:59:cd:8b:84:34:6b:01:35:90:82:86:7a:54:12:
e1:91:05:5c:8e:09:c7:42:b7:b5:84:d1:08:54:d9:15:2c:8b:
12:7e:07:a8:80:c3:4b:bc:fe:ed:25:af:26:74:8b:7b:2f:34:
ca:23:19:e8:14:42:12:30:e1:0c:57:22:bc:ad:3f:3d:67:c2:
db:ca:aa:82:d5:6a:87:e3:96:bd:33:98:99:2a:66:d9:15:90:
6a:e9:16:d6:c8:1d:5a:5b:dd:f9:42:1f:6c:26:f6:a5:91:f2:
05:d6:c1:15:ab:9a:9b:fd:40:f7:4d:9c:b5:96:1a:bb:9b:f6:
bf:f7:0e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:34 2026 by rpki-client