Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CKMATES/0/3130332e3131392e3231342e302f32342d3234203d3e20313339363337.roa
File: 3130332e3131392e3231342e302f32342d3234203d3e20313339363337.roa (raw, json)
Hash identifier: BkQPXEKbvmbpHuwtKiewh9JYhpq3BksNtpHsw33H1fI=
Subject key identifier: 64:8B:98:52:DA:2E:FD:60:45:96:80:0D:0D:3C:EA:7D:BD:4B:31:ED
Certificate issuer: /CN=3D576C4841082805B3CDBD7337F3963A8833174B
Certificate serial: 4AA5AD26E429C214DB716808E6B6EBE619C9B340
Authority key identifier: 3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3130332e3131392e3231342e302f32342d3234203d3e20313339363337.roa
Signing time: Mon 11 May 2026 17:39:25 +0000
ROA not before: Mon 11 May 2026 17:34:25 +0000
ROA not after: Mon 10 May 2027 17:39:25 +0000
asID: 139637
IP address blocks: 103.119.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:a5:ad:26:e4:29:c2:14:db:71:68:08:e6:b6:eb:e6:19:c9:b3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D576C4841082805B3CDBD7337F3963A8833174B
Validity
Not Before: May 11 17:34:25 2026 GMT
Not After : May 10 17:39:25 2027 GMT
Subject: CN=648B9852DA2EFD604596800D0D3CEA7DBD4B31ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:2e:71:4a:48:2f:38:9b:ae:57:4b:4f:35:
96:3e:b6:33:4f:09:08:fb:49:95:56:e7:f9:98:b0:
5f:86:a0:b5:0e:d3:fd:f2:86:f8:a9:98:fe:eb:f9:
14:8e:f1:53:ea:29:64:c3:fb:d9:1d:70:60:90:46:
9a:95:48:96:31:b0:d2:4b:5f:fd:04:d2:d9:60:21:
b0:78:f7:73:66:81:b8:8d:c1:8f:60:a6:26:41:77:
18:12:cf:ca:f1:52:9d:fc:75:42:ef:72:f7:cd:30:
76:e9:19:46:9a:33:ba:78:37:04:5a:6b:6a:b7:07:
02:5b:51:a5:e0:4c:3f:43:81:3b:6c:84:ad:c1:64:
42:21:21:26:86:b3:c8:b1:25:ab:c8:0f:00:9f:66:
98:b7:f7:00:6e:d2:50:24:cf:f5:00:a4:f8:42:aa:
71:89:87:36:a0:55:6b:e5:6a:f0:76:88:fb:f1:c4:
73:8a:1e:53:83:d6:60:1d:f8:a5:b0:63:07:43:ba:
16:3d:ae:b5:28:47:23:0a:d0:8c:0a:1b:5b:79:aa:
05:45:5b:61:27:3b:ba:93:a0:04:aa:b4:80:62:d6:
eb:94:65:ae:85:e0:13:e5:66:17:5a:93:c2:98:a0:
64:bc:c1:15:85:8d:a3:38:94:57:6e:5e:ff:14:30:
80:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8B:98:52:DA:2E:FD:60:45:96:80:0D:0D:3C:EA:7D:BD:4B:31:ED
X509v3 Authority Key Identifier:
keyid:3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3130332e3131392e3231342e302f32342d3234203d3e20313339363337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.119.214.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:29:71:03:53:a9:d2:18:30:18:2f:d0:73:de:9b:55:f1:bc:
b3:3f:02:76:f8:95:58:f7:94:36:c5:40:04:14:84:2a:fa:ea:
0d:63:45:79:c4:86:bd:ba:16:66:68:b8:7c:02:56:53:5c:0f:
9f:b9:96:cb:9e:0c:2c:47:17:d8:e0:88:99:97:09:1a:1e:bf:
25:1a:3c:d6:28:26:69:d5:98:a2:4a:d2:71:c7:7e:b9:72:cb:
d8:65:4a:0e:56:e2:fa:fb:fc:1c:b5:30:1a:9d:54:58:dd:55:
f7:bb:b6:8c:b7:60:c6:92:e3:8b:3b:55:e4:0b:36:d0:62:91:
2a:30:22:b1:f4:c5:c7:30:59:4b:10:84:c8:dd:8d:c0:bc:1f:
f5:01:26:07:9b:f2:e6:11:5c:a2:31:7f:4b:f6:20:57:0f:10:
ce:61:af:26:be:17:d1:f4:6a:4b:b2:72:71:b3:9d:ea:43:e1:
fc:a8:49:29:f0:01:e5:96:4e:f7:15:5c:34:52:9d:02:91:79:
6a:71:8d:77:13:69:48:45:cc:44:25:89:e9:31:5d:bf:82:d6:
c0:b6:a7:f5:01:54:60:c3:4c:7b:8a:0d:1a:5d:f3:62:2e:0e:
d7:ff:a9:27:e6:7a:39:99:34:c7:1a:b5:ad:33:e9:a1:56:d1:
1b:8e:2a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:12 2026 by rpki-client