Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3132332e3133302e302f32342d3234203d3e203134363138.roa
File: 3130332e3132332e3133302e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: Z+uz749mg+ZrLlWw12y0B3Ll+9VkgYTQP5LOcpJblvs=
Subject key identifier: 91:78:66:CC:33:02:AA:87:45:73:18:A1:BA:37:43:8A:77:15:D6:8B
Certificate issuer: /CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
Certificate serial: 4C05D080E9D44FEABA299EDAA182496E4C848BBD
Authority key identifier: 05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3132332e3133302e302f32342d3234203d3e203134363138.roa
Signing time: Mon 11 May 2026 17:44:50 +0000
ROA not before: Mon 11 May 2026 17:39:50 +0000
ROA not after: Mon 10 May 2027 17:44:50 +0000
asID: 14618
IP address blocks: 103.123.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:05:d0:80:e9:d4:4f:ea:ba:29:9e:da:a1:82:49:6e:4c:84:8b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
Validity
Not Before: May 11 17:39:50 2026 GMT
Not After : May 10 17:44:50 2027 GMT
Subject: CN=917866CC3302AA87457318A1BA37438A7715D68B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7a:b6:0e:f1:9c:8b:3e:47:7d:b4:84:96:8a:
b6:bd:56:c4:b7:0c:ff:d4:15:e7:e8:15:a7:89:4a:
de:8f:00:59:f6:71:a0:30:2d:0d:da:f7:4e:e8:50:
94:41:6a:e6:39:f2:76:8b:19:e9:b8:76:1f:cc:be:
56:57:f0:7d:9d:cf:08:dc:d4:51:c9:be:7c:fe:c5:
f7:ed:a4:17:92:42:d8:5f:3d:55:3c:a8:9b:db:91:
07:0c:64:77:97:75:66:64:24:6c:25:ab:0d:de:68:
a4:28:eb:77:6d:7c:b1:14:a4:3f:c3:0a:c1:46:b1:
b9:64:05:bb:e2:20:96:78:4f:35:05:72:59:e9:e4:
76:39:f4:1e:7a:4a:bc:f2:1e:1d:40:bf:6e:01:fd:
ec:04:0f:4e:6e:20:4a:49:1d:fe:a7:69:78:d2:d3:
c1:3c:5e:f8:34:d3:6d:6a:ae:50:88:a5:2e:9b:23:
0a:05:f7:2b:90:e6:e0:5f:bf:89:8a:a6:93:9f:89:
ad:ca:4c:67:03:e7:2e:0e:52:4e:81:7a:88:48:be:
ee:0d:be:60:b9:ad:6c:1d:28:44:7a:3f:10:aa:a8:
e4:42:eb:97:a7:d4:5a:54:74:34:8d:67:9c:b7:80:
48:28:31:f6:0a:ea:e6:e0:a4:bb:bf:f9:31:7f:2a:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:78:66:CC:33:02:AA:87:45:73:18:A1:BA:37:43:8A:77:15:D6:8B
X509v3 Authority Key Identifier:
keyid:05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3132332e3133302e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.130.0/24
Signature Algorithm: sha256WithRSAEncryption
27:cb:77:97:0b:8e:78:cf:6b:88:3e:1e:b2:1f:b8:56:91:df:
a3:21:37:3b:e9:79:9d:4f:29:56:85:8e:1c:13:45:73:4b:01:
32:a0:48:74:1b:e5:19:63:e8:3b:dc:24:5d:ad:99:cc:40:01:
e4:d7:53:d6:5a:9f:2b:a7:19:fc:d1:2f:90:12:01:20:96:57:
64:9c:57:44:fd:65:d9:1e:dd:ae:3f:7f:e7:81:cb:7d:63:d5:
06:d5:d3:ec:e3:96:35:ce:c0:ce:70:80:48:33:12:9e:82:b1:
fe:40:76:48:01:a1:98:ab:a2:0c:04:8b:b8:fc:1a:14:95:22:
cd:9f:86:a1:bc:db:2b:9d:2c:7e:b6:a1:fe:cb:84:53:03:a5:
ca:8f:c7:d1:ff:0c:0f:3a:78:0c:55:c2:fe:9b:15:08:c3:a4:
00:11:46:4c:b8:b3:f1:bb:8c:6b:12:6d:8e:4e:08:6a:19:a8:
15:a5:b8:ed:a8:3d:d0:4a:62:3d:f1:c5:46:f7:fe:a3:22:a5:
cf:23:19:00:36:cf:c3:80:f4:3b:78:94:15:0b:c8:49:52:59:
63:7e:0a:6e:ae:c0:06:98:e6:d8:e7:7b:d9:2b:49:76:fb:bf:
c2:22:26:b8:71:90:f7:ca:4b:44:48:0e:ed:f3:d1:2d:f8:b1:
71:f9:f9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:39 2026 by rpki-client