Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/1/3135392e3131372e36342e302f31392d3234203d3e203138303436.roa
File: 3135392e3131372e36342e302f31392d3234203d3e203138303436.roa (raw, json)
Hash identifier: BnOw5LV6cVAcgowH1P0wBRFgURzOj7EomMXHxAWHT28=
Subject key identifier: B1:6D:30:A0:AA:B2:C3:5B:6D:6C:D1:8C:50:BE:5C:B7:A6:D2:C4:F6
Certificate issuer: /CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94
Certificate serial: 0FD4C9AD47D3CE99E3C58735C74AB983A49F2A58
Authority key identifier: 65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/3135392e3131372e36342e302f31392d3234203d3e203138303436.roa
Signing time: Mon 11 May 2026 17:04:05 +0000
ROA not before: Mon 11 May 2026 16:59:05 +0000
ROA not after: Mon 10 May 2027 17:04:05 +0000
asID: 18046
IP address blocks: 159.117.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:d4:c9:ad:47:d3:ce:99:e3:c5:87:35:c7:4a:b9:83:a4:9f:2a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94
Validity
Not Before: May 11 16:59:05 2026 GMT
Not After : May 10 17:04:05 2027 GMT
Subject: CN=B16D30A0AAB2C35B6D6CD18C50BE5CB7A6D2C4F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:e2:78:6f:06:20:1a:71:1e:40:32:ac:2b:
4f:be:72:08:67:de:d3:ac:6c:cc:a2:d1:00:81:d8:
d0:eb:d2:69:17:b2:dc:56:10:c6:c1:08:74:fe:7b:
41:30:55:50:b3:66:63:bb:93:92:c7:12:77:35:a7:
e0:b5:08:c7:20:c5:d2:85:19:a1:01:23:a4:fc:e1:
cf:73:9b:0a:de:40:26:bf:10:00:1d:4b:b8:92:f0:
a7:7e:55:2c:da:51:bd:d3:f4:f0:e3:f6:ef:a7:93:
d5:df:ef:08:3f:47:9a:41:ea:53:a7:c3:f4:1b:7a:
03:ff:cb:4d:97:de:06:1e:f6:ee:15:dd:db:5e:02:
a3:3e:b9:03:93:b9:59:b7:69:4e:93:2f:ff:fd:25:
73:00:bd:fc:fb:73:d9:22:aa:00:56:a7:5f:8b:45:
91:83:f9:26:5c:51:f7:86:0e:19:c5:9e:d9:73:27:
65:8a:9d:8f:5f:66:51:88:3e:0c:62:ce:e8:c0:c6:
ee:0b:04:f0:3f:a0:f9:ca:c0:6e:cb:68:21:cd:7d:
e7:dc:0f:b0:74:5e:f1:b7:cb:64:3a:5a:e4:4f:84:
3c:08:ee:b9:d5:23:00:44:23:77:e9:b5:9d:c2:e1:
bf:78:05:b0:e1:17:a6:c7:16:f1:1e:aa:16:44:b4:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6D:30:A0:AA:B2:C3:5B:6D:6C:D1:8C:50:BE:5C:B7:A6:D2:C4:F6
X509v3 Authority Key Identifier:
keyid:65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/3135392e3131372e36342e302f31392d3234203d3e203138303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.117.64.0/19
Signature Algorithm: sha256WithRSAEncryption
94:79:88:c9:e4:e9:e5:82:b8:0f:97:72:45:18:1c:a4:29:27:
01:10:f7:0f:d6:e7:48:ff:a6:83:72:98:dc:8f:1d:a7:45:25:
43:44:64:b5:18:14:ef:33:b6:f2:87:82:f0:86:f3:61:cb:3f:
61:91:6d:55:6b:89:a9:cc:00:47:de:02:6d:ca:95:c4:ff:22:
60:94:38:16:1f:97:87:ba:4f:23:de:e0:23:87:29:fc:c5:eb:
94:64:98:96:e8:4e:b6:dd:6f:6a:64:ec:3c:34:65:d0:2a:ea:
15:a6:ef:cd:f1:46:0a:c5:a3:a0:70:cd:f8:76:54:3e:a1:56:
ae:a8:82:8e:e6:c0:1f:c6:b8:4c:d1:2d:7a:01:a3:f3:43:0b:
1e:b6:24:f7:87:5f:3b:e3:aa:c0:03:b1:90:a7:3d:4b:54:69:
ad:78:3f:f9:b0:e6:5f:45:f9:20:12:b7:07:13:21:3d:8a:13:
2f:f4:33:56:a7:2b:7d:04:c4:a6:85:15:1d:39:8a:82:68:95:
d6:33:9b:78:92:d6:44:46:c8:29:18:01:b9:0e:50:9c:2e:10:
c9:3a:6b:3d:13:6f:be:ef:16:b0:c8:05:61:0e:5e:4b:20:07:
00:d2:30:7b:ac:d4:7a:7b:03:51:74:7c:da:1b:55:2d:3e:68:
b4:a7:ec:68
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUD9TJrUfTzpnjxYc1x0q5g6SfKlgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVFOTRDNzc4OUFEQTdFNUY1NDBGREJFOTU4MkQ4RUE3
QUE0NkE5NDAeFw0yNjA1MTExNjU5MDVaFw0yNzA1MTAxNzA0MDVaMDMxMTAvBgNV
BAMTKEIxNkQzMEEwQUFCMkMzNUI2RDZDRDE4QzUwQkU1Q0I3QTZEMkM0RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEz+J4bwYgGnEeQDKsK0++cghn
3tOsbMyi0QCB2NDr0mkXstxWEMbBCHT+e0EwVVCzZmO7k5LHEnc1p+C1CMcgxdKF
GaEBI6T84c9zmwreQCa/EAAdS7iS8Kd+VSzaUb3T9PDj9u+nk9Xf7wg/R5pB6lOn
w/QbegP/y02X3gYe9u4V3dteAqM+uQOTuVm3aU6TL//9JXMAvfz7c9kiqgBWp1+L
RZGD+SZcUfeGDhnFntlzJ2WKnY9fZlGIPgxizujAxu4LBPA/oPnKwG7LaCHNfefc
D7B0XvG3y2Q6WuRPhDwI7rnVIwBEI3fptZ3C4b94BbDhF6bHFvEeqhZEtMtDAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUsW0woKqyw1ttbNGMUL5ct6bSxPYwHwYDVR0j
BBgwFoAUZelMd4mtp+X1QP2+lYLY6nqkapQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9OR0ZP
TkcvMS82NUU5NEM3Nzg5QURBN0U1RjU0MEZEQkU5NTgyRDhFQTdBQTQ2QTk0LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzY1RTk0Qzc3ODlBREE3RTVGNTQwRkRCRTk1
ODJEOEVBN0FBNDZBOTQuY2VyMH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4Zi
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET05HRk9ORy8xLzMxMzUzOTJl
MzEzMTM3MmUzNjM0MmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzODMwMzQzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBZ91QDANBgkqhkiG9w0BAQsFAAOCAQEAlHmIyeTp5YK4D5dyRRgc
pCknARD3D9bnSP+mg3KY3I8dp0UlQ0RktRgU7zO28oeC8IbzYcs/YZFtVWuJqcwA
R94CbcqVxP8iYJQ4Fh+Xh7pPI97gI4cp/MXrlGSYluhOtt1vamTsPDRl0CrqFabv
zfFGCsWjoHDN+HZUPqFWrqiCjubAH8a4TNEtegGj80MLHrYk94dfO+OqwAOxkKc9
S1RprXg/+bDmX0X5IBK3BxMhPYoTL/QzVqcrfQTEpoUVHTmKgmiV1jObeJLWREbI
KRgBuQ5QnC4QyTprPRNvvu8WsMgFYQ5eSyAHANIwe6zUensDUXR82htVLT5otKfs
aA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:40:20 2026 by rpki-client