Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/1/3135392e3131372e38342e302f32342d3234203d3e203138303436.roa
File: 3135392e3131372e38342e302f32342d3234203d3e203138303436.roa (raw, json)
Hash identifier: k6/jJKCg7k9igf9mXdOBVLZ2L1gd68NXx+o3im+bxhY=
Subject key identifier: 3B:CE:4D:9C:BC:F8:E3:AF:68:B8:E3:6A:64:4A:DD:2E:7D:8F:8F:B3
Certificate issuer: /CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94
Certificate serial: 07663874131B4ED4B3267970A8B756E18A4CE2C5
Authority key identifier: 65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/3135392e3131372e38342e302f32342d3234203d3e203138303436.roa
Signing time: Mon 11 May 2026 17:04:12 +0000
ROA not before: Mon 11 May 2026 16:59:12 +0000
ROA not after: Mon 10 May 2027 17:04:12 +0000
asID: 18046
IP address blocks: 159.117.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:66:38:74:13:1b:4e:d4:b3:26:79:70:a8:b7:56:e1:8a:4c:e2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94
Validity
Not Before: May 11 16:59:12 2026 GMT
Not After : May 10 17:04:12 2027 GMT
Subject: CN=3BCE4D9CBCF8E3AF68B8E36A644ADD2E7D8F8FB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:c2:c5:d9:4d:4c:3a:3c:2d:d9:18:cc:2c:
a7:7a:4d:70:30:d5:c7:a4:90:c1:e9:9c:09:43:f5:
af:91:42:ac:69:b8:4c:74:a1:f1:67:fa:1c:06:98:
03:de:79:60:47:96:47:57:ce:1b:16:ce:3e:f0:7c:
59:c5:f6:49:10:78:ff:39:f8:4e:f6:fa:07:78:80:
36:b8:f4:ba:3b:80:1e:d5:0f:6e:4b:fc:a0:bb:3d:
05:2a:87:a4:00:92:b6:e4:97:4c:e0:ac:39:97:f5:
7a:eb:d4:81:94:60:07:9a:c4:2e:1c:51:a1:9c:60:
de:94:20:52:63:50:7b:6e:e1:11:0a:91:4f:7f:6e:
4b:5c:00:3b:47:63:8b:c6:ea:8a:4b:b9:00:c3:c4:
36:5d:04:5a:b2:3a:f0:dd:e9:ac:06:0c:89:37:e4:
ce:cd:77:55:50:05:24:e1:87:f4:ca:39:ec:3c:f5:
e5:53:86:48:4c:b8:dc:7f:92:ea:14:41:6e:2d:0e:
a9:7b:7d:40:b4:11:4c:63:0a:47:f8:b9:c4:bf:f1:
4e:06:7b:fa:ff:63:94:89:82:35:ba:f8:59:68:7b:
71:ca:96:be:57:79:d6:db:19:f1:ef:03:3e:00:75:
b4:53:8c:9f:39:d9:8f:ba:07:99:a7:14:ab:b4:84:
9a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CE:4D:9C:BC:F8:E3:AF:68:B8:E3:6A:64:4A:DD:2E:7D:8F:8F:B3
X509v3 Authority Key Identifier:
keyid:65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/3135392e3131372e38342e302f32342d3234203d3e203138303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.117.84.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:5e:ed:5f:9b:ec:09:04:84:28:bb:e6:f4:9b:c9:bb:62:c4:
7a:0b:c1:bc:e7:ad:ad:3f:da:31:39:88:c9:28:2c:a9:a6:25:
ec:b0:45:9f:1b:78:6d:14:56:0c:bc:4c:24:4f:47:50:2b:3a:
3a:4f:f3:f5:9e:62:b7:53:30:08:e1:b3:02:c7:cf:0d:a8:2f:
b6:78:ea:2a:46:e3:3d:89:fe:40:0c:6c:c3:32:95:5a:0a:8c:
f5:50:ae:d3:bc:17:77:b7:10:26:bc:de:ff:72:8a:b2:4e:bf:
a1:50:67:49:c1:54:26:bd:57:2b:2b:bb:06:db:af:0c:93:ee:
87:a4:09:2d:96:38:be:4c:9f:38:d6:0c:c8:f2:3d:31:12:de:
44:77:54:17:48:28:11:73:7b:4a:ba:78:2b:70:76:6b:6c:e6:
5d:96:2c:e9:b6:94:56:e3:db:92:49:da:c9:d7:71:42:79:53:
7a:1d:dd:5f:f4:e6:db:64:31:fa:68:51:cc:08:c8:61:bd:0b:
15:cc:17:fd:f4:ca:0e:e1:48:10:f1:72:26:d1:6f:6c:de:31:
ea:c4:81:2a:d9:52:ee:f3:21:8c:52:b4:00:b7:79:e9:4e:bc:
2a:02:a3:ec:12:b1:82:ab:cc:ef:58:d1:85:11:a5:a0:91:bb:
d4:35:8d:f3
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUB2Y4dBMbTtSzJnlwqLdW4YpM4sUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVFOTRDNzc4OUFEQTdFNUY1NDBGREJFOTU4MkQ4RUE3
QUE0NkE5NDAeFw0yNjA1MTExNjU5MTJaFw0yNzA1MTAxNzA0MTJaMDMxMTAvBgNV
BAMTKDNCQ0U0RDlDQkNGOEUzQUY2OEI4RTM2QTY0NEFERDJFN0Q4RjhGQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjQ8LF2U1MOjwt2RjMLKd6TXAw
1cekkMHpnAlD9a+RQqxpuEx0ofFn+hwGmAPeeWBHlkdXzhsWzj7wfFnF9kkQeP85
+E72+gd4gDa49Lo7gB7VD25L/KC7PQUqh6QAkrbkl0zgrDmX9Xrr1IGUYAeaxC4c
UaGcYN6UIFJjUHtu4REKkU9/bktcADtHY4vG6opLuQDDxDZdBFqyOvDd6awGDIk3
5M7Nd1VQBSThh/TKOew89eVThkhMuNx/kuoUQW4tDql7fUC0EUxjCkf4ucS/8U4G
e/r/Y5SJgjW6+Floe3HKlr5XedbbGfHvAz4AdbRTjJ852Y+6B5mnFKu0hJqfAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUO85NnLz4469ouONqZErdLn2Pj7MwHwYDVR0j
BBgwFoAUZelMd4mtp+X1QP2+lYLY6nqkapQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9OR0ZP
TkcvMS82NUU5NEM3Nzg5QURBN0U1RjU0MEZEQkU5NTgyRDhFQTdBQTQ2QTk0LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzY1RTk0Qzc3ODlBREE3RTVGNTQwRkRCRTk1
ODJEOEVBN0FBNDZBOTQuY2VyMH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4Zi
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET05HRk9ORy8xLzMxMzUzOTJl
MzEzMTM3MmUzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODMwMzQzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAJ91VDANBgkqhkiG9w0BAQsFAAOCAQEADl7tX5vsCQSEKLvm9JvJ
u2LEegvBvOetrT/aMTmIySgsqaYl7LBFnxt4bRRWDLxMJE9HUCs6Ok/z9Z5it1Mw
COGzAsfPDagvtnjqKkbjPYn+QAxswzKVWgqM9VCu07wXd7cQJrze/3KKsk6/oVBn
ScFUJr1XKyu7BtuvDJPuh6QJLZY4vkyfONYMyPI9MRLeRHdUF0goEXN7Srp4K3B2
a2zmXZYs6baUVuPbkknayddxQnlTeh3dX/Tm22Qx+mhRzAjIYb0LFcwX/fTKDuFI
EPFyJtFvbN4x6sSBKtlS7vMhjFK0ALd56U68KgKj7BKxgqvM71jRhRGloJG71DWN
8w==
-----END CERTIFICATE-----
Generated at Wed May 13 02:16:16 2026 by rpki-client