Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/FET/0/AS38843.roa
File: AS38843.roa (raw, json)
Hash identifier: jM7g2m0zCuiB1qlWCZch8/MFHF41yFm0b+Reg/rCla4=
Subject key identifier: 8C:D9:B3:58:55:8B:C2:12:7E:81:FA:98:46:EA:73:C4:2B:30:AA:AB
Certificate issuer: /CN=71FA20FC269CE9805B2C67E59B357AA684246D10
Certificate serial: 14E16B9B9C12DE8087C080BADBDB9902C093E4CE
Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/FET/0/AS38843.roa
Signing time: Mon 11 May 2026 17:35:22 +0000
ROA not before: Mon 11 May 2026 17:30:22 +0000
ROA not after: Mon 10 May 2027 17:35:22 +0000
asID: 38843
IP address blocks: 210.58.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e1:6b:9b:9c:12:de:80:87:c0:80:ba:db:db:99:02:c0:93:e4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10
Validity
Not Before: May 11 17:30:22 2026 GMT
Not After : May 10 17:35:22 2027 GMT
Subject: CN=8CD9B358558BC2127E81FA9846EA73C42B30AAAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:43:de:f3:33:f6:84:ac:7c:4c:0b:56:cd:77:
86:57:1b:37:b8:0d:a8:e3:60:43:9f:87:6f:3a:da:
23:11:d6:7d:fa:81:6d:e4:7e:95:fb:30:a4:c9:af:
96:7a:4d:d5:f6:75:c7:bb:14:82:c0:73:7e:25:72:
a1:e6:9f:cd:d6:04:00:d0:fd:64:92:e7:af:1a:af:
95:96:cd:03:eb:c6:05:c9:d6:51:9e:93:fc:93:58:
91:1f:6f:c5:de:b4:02:a2:ea:4e:d3:c2:73:04:0d:
98:48:4b:5b:7c:60:43:38:82:7f:40:7a:ad:2e:2a:
37:d2:4a:85:b4:cf:23:a1:c0:c8:ad:b4:9a:22:f0:
5e:44:aa:5e:d4:2e:69:2f:88:23:a7:b9:4d:0a:d8:
a2:ad:33:88:aa:bf:ae:36:fe:e4:39:83:d2:d4:7b:
46:4d:9c:7d:47:34:1b:21:04:48:6d:0e:db:73:ea:
76:a8:4a:26:99:61:e4:a1:19:65:46:de:12:b6:9d:
89:ea:c4:ce:41:0a:7c:61:58:b9:49:4c:93:57:c1:
8f:f3:6f:ba:49:83:28:60:81:90:0d:76:58:0b:60:
20:a1:b3:b7:e4:d2:d4:21:53:ad:8d:ab:76:21:7e:
8f:86:0b:c8:5c:8d:8b:99:1e:72:f2:15:3e:d2:6a:
da:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D9:B3:58:55:8B:C2:12:7E:81:FA:98:46:EA:73:C4:2B:30:AA:AB
X509v3 Authority Key Identifier:
keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/AS38843.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.58.92.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:4f:c7:b1:aa:7f:5c:e9:37:c1:e3:69:d6:91:b8:a1:99:ca:
e9:18:8b:29:86:62:ae:61:22:81:91:cc:c6:35:23:45:39:f9:
e2:d6:80:20:f1:ce:53:65:d8:b8:17:d1:1d:76:3e:21:29:e0:
74:ba:f5:ca:cb:30:2c:63:96:a8:b4:16:8f:2c:8e:fa:e4:b8:
e0:38:10:79:4d:b7:53:89:2e:95:e4:01:7b:54:7d:96:f6:b4:
e7:a3:bd:e3:36:8b:3b:7c:0a:e5:f9:91:c3:94:7c:9d:10:94:
56:de:f3:19:73:dc:4c:33:32:36:0b:c7:23:ef:9c:2f:91:9c:
5d:36:f1:f5:e6:d5:2a:c9:ca:f9:3f:45:a9:d5:24:7f:5b:68:
9b:da:b1:9e:52:1d:39:d7:33:ec:c8:13:4b:47:0d:9c:8a:ec:
c1:d0:c2:f6:31:94:6a:85:e2:2b:ec:a4:48:b5:5f:fd:3b:f5:
d0:bb:d0:2a:7b:f2:00:82:3e:a8:52:8e:98:00:6e:05:a5:b9:
6b:25:a2:fa:cc:70:5a:e6:f0:4e:0b:ba:3f:39:c2:52:84:14:
22:de:36:75:2f:5c:2a:87:ac:fb:e2:4b:0b:0e:7a:f2:6f:85:
b8:7a:c2:32:69:2c:7a:8a:a5:cd:e5:61:70:db:d3:c8:e3:6f:
8d:2a:b9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:50 2026 by rpki-client