Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/0/AS17421.roa
File: AS17421.roa (raw, json)
Hash identifier: b36d9N/E8xF9UORu3cy5MiSLe4S8vZ7z2+XcW9TPe44=
Subject key identifier: 16:91:4F:BC:D8:AB:33:CB:4B:F2:51:6E:CF:13:A5:3A:F1:88:77:3D
Certificate issuer: /CN=6276AF5AEFB216534D76803A45D67CADC23447BD
Certificate serial: 6E7C3B5EBF6706C17334CD2227E5B1CE86993470
Authority key identifier: 62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/0/AS17421.roa
Signing time: Tue 12 May 2026 01:28:56 +0000
ROA not before: Tue 12 May 2026 01:23:56 +0000
ROA not after: Tue 11 May 2027 01:28:56 +0000
asID: 17421
IP address blocks: 42.64.0.0/12 maxlen: 24
111.70.0.0/15 maxlen: 24
111.80.0.0/14 maxlen: 24
114.136.0.0/15 maxlen: 24
116.59.0.0/16 maxlen: 24
211.79.32.0/20 maxlen: 24
221.120.0.0/18 maxlen: 24
221.120.64.0/19 maxlen: 24
223.136.0.0/13 maxlen: 24
2001:b400::/23 maxlen: 64
2001:b401::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:7c:3b:5e:bf:67:06:c1:73:34:cd:22:27:e5:b1:ce:86:99:34:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6276AF5AEFB216534D76803A45D67CADC23447BD
Validity
Not Before: May 12 01:23:56 2026 GMT
Not After : May 11 01:28:56 2027 GMT
Subject: CN=16914FBCD8AB33CB4BF2516ECF13A53AF188773D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:82:1b:50:62:b7:f0:13:23:03:f1:0d:f1:
76:8b:39:82:0b:c1:2b:6c:25:38:87:57:e9:0c:ab:
d4:ce:06:89:13:8e:ef:de:1e:89:95:5c:98:1b:67:
1e:cc:81:69:20:09:97:ae:53:0b:cb:7b:9d:fd:a5:
b7:52:aa:1e:6e:26:3a:a1:69:5b:b9:ef:94:a2:b5:
c7:9f:ca:a4:d6:8a:62:2d:7d:b4:67:ed:31:1d:0a:
77:5f:1a:97:4f:3f:14:05:78:f1:6f:2d:2f:2e:85:
d0:1d:1a:f4:3b:47:29:bc:0c:f6:52:3a:ed:12:c6:
59:a7:d9:11:6e:46:21:d9:d7:e9:ad:f3:21:69:3a:
fa:23:4c:f9:d6:e9:e6:da:a3:3a:5b:60:21:05:1d:
c4:f8:95:76:06:aa:ed:b8:c5:ce:63:1e:28:63:32:
99:8b:3a:ff:bd:41:97:b5:87:f7:33:99:c4:f1:01:
d2:3f:79:72:a5:98:e5:74:67:7b:de:96:51:4c:ba:
fa:97:a6:3f:3a:61:29:12:61:3e:bc:1d:ec:28:f8:
43:fb:56:a5:08:2e:3a:50:49:37:0e:d0:c9:c7:5e:
a6:75:28:54:ed:c2:5b:1c:ef:68:b6:50:88:e7:01:
66:c7:d9:45:4f:ba:cc:5f:df:c8:57:d5:e8:d9:dc:
71:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:91:4F:BC:D8:AB:33:CB:4B:F2:51:6E:CF:13:A5:3A:F1:88:77:3D
X509v3 Authority Key Identifier:
keyid:62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/0/AS17421.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.64.0.0/12
111.70.0.0/15
111.80.0.0/14
114.136.0.0/15
116.59.0.0/16
211.79.32.0/20
221.120.0.0-221.120.95.255
223.136.0.0/13
IPv6:
2001:b400::/23
Signature Algorithm: sha256WithRSAEncryption
5a:ea:65:99:55:e2:7d:be:e1:82:e2:d3:9f:bd:0d:0c:2a:ac:
8d:dc:33:68:cd:81:46:49:e7:3e:9b:ea:a5:12:59:f6:02:a4:
90:48:e6:fe:a0:11:a6:ef:6f:35:f9:dc:23:2c:0d:3d:e2:99:
3e:2d:3e:24:5b:b7:65:e2:eb:50:bc:c9:c5:ad:32:72:fc:2c:
0e:19:29:ba:e6:e2:80:e4:b5:46:df:82:9e:25:a6:41:30:cb:
ef:e6:45:a0:2e:35:f7:c9:9f:36:66:6f:92:8a:24:a8:38:1f:
f2:dd:c0:7f:3d:aa:81:19:12:9c:9f:d3:c5:3e:38:49:ac:ac:
5c:8b:48:07:c6:ef:60:96:19:82:13:af:74:1f:03:74:c9:ad:
d2:31:6b:2a:3e:9f:72:45:90:85:30:86:e7:a8:84:7b:c4:64:
fe:30:74:41:53:92:1b:a8:41:70:6c:bf:75:b6:c9:7b:26:87:
9c:47:80:68:cc:c6:e6:15:d0:7e:29:5c:d7:db:90:97:d6:05:
3a:dc:7b:54:48:70:55:48:f6:2d:bb:1f:39:60:31:72:f4:5d:
72:00:06:76:56:4c:e0:8a:06:c4:31:5c:11:c3:65:26:97:50:
4d:fa:29:eb:70:08:5e:bc:4b:6d:dd:ad:61:a1:d4:e5:47:0b:
6b:3a:89:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:29 2026 by rpki-client