Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3232332e32362e322e302f32332d3332203d3e20313331363537.roa
File: 3232332e32362e322e302f32332d3332203d3e20313331363537.roa (raw, json)
Hash identifier: 33w5HhB2Xw04h8mHJ0gVGqc5Dc4p5hZA5nIUL6jcDsg=
Subject key identifier: B3:53:5E:0F:79:AA:AC:F0:89:CD:A1:C3:AC:76:0D:07:2C:59:09:D5
Certificate issuer: /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial: 4348D81D0AC59CFC1C0741CEB04F1F8EFC21D2E8
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HONGDA/0/3232332e32362e322e302f32332d3332203d3e20313331363537.roa
Signing time: Mon 11 May 2026 17:55:56 +0000
ROA not before: Mon 11 May 2026 17:50:56 +0000
ROA not after: Mon 10 May 2027 17:55:56 +0000
asID: 131657
IP address blocks: 223.26.2.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:48:d8:1d:0a:c5:9c:fc:1c:07:41:ce:b0:4f:1f:8e:fc:21:d2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Validity
Not Before: May 11 17:50:56 2026 GMT
Not After : May 10 17:55:56 2027 GMT
Subject: CN=B3535E0F79AAACF089CDA1C3AC760D072C5909D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:15:48:10:92:8c:2c:2f:29:1c:7e:85:8b:6f:
0d:34:67:b4:da:5f:93:9c:b1:74:98:8f:05:f1:33:
94:c1:ff:25:c4:3b:a8:8c:c1:96:3f:c6:4b:74:87:
d2:31:80:5b:40:81:5d:2e:8e:6b:4a:83:32:d1:f3:
26:9d:c1:76:1e:e4:32:2f:84:5b:5d:02:c6:53:68:
1c:94:cd:55:93:ed:58:09:9b:4f:85:28:8b:fe:75:
95:86:9d:f4:5d:6c:fa:98:5b:1c:8d:f3:73:52:61:
2e:0d:7d:ff:06:70:4b:7c:d9:b7:f4:1c:08:1f:e1:
b8:c6:e4:ee:29:0b:7a:b1:43:b7:80:75:3a:39:97:
98:4c:61:39:b0:d4:3d:c3:2e:ff:13:a5:90:f4:e9:
37:05:1d:91:dc:86:35:a6:fe:b6:67:31:3d:71:30:
7a:ba:7e:b9:0c:14:14:26:65:97:fd:f5:17:71:27:
e6:3a:f5:57:3e:5b:f2:50:23:2a:2b:37:df:5b:ac:
82:27:31:0d:33:ff:fc:ed:83:89:5b:69:4d:49:8c:
b9:ee:2f:a6:a7:fa:df:a1:82:01:90:a3:dd:af:5a:
d3:89:4c:70:89:3c:4c:44:85:9d:bd:f4:bf:10:b2:
c9:dd:35:10:a4:6a:5b:62:34:e8:20:b5:b7:b0:86:
62:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:53:5E:0F:79:AA:AC:F0:89:CD:A1:C3:AC:76:0D:07:2C:59:09:D5
X509v3 Authority Key Identifier:
keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3232332e32362e322e302f32332d3332203d3e20313331363537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.26.2.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:12:95:a9:ee:18:a4:76:88:35:9a:47:5a:8e:04:46:97:b6:
7d:c8:53:07:2e:a7:19:90:bd:b0:54:53:eb:b5:54:43:73:93:
be:36:ec:a0:6b:18:1c:6f:dd:63:c9:fd:cd:80:4b:ac:0e:83:
59:3e:96:ee:ab:d1:96:46:be:db:ac:58:41:3f:f0:16:b5:56:
5d:b4:9a:fa:eb:3c:7a:48:6a:a2:59:a9:59:b0:0a:c3:c7:0e:
12:3c:44:57:2b:42:a1:d8:e2:4b:c7:4f:16:c7:a3:2a:58:52:
5f:e5:ba:4e:36:29:e3:ba:27:5e:a0:d7:cb:6f:b9:90:a1:46:
74:9b:3c:75:4f:e8:d5:ef:26:d6:54:68:7e:d7:9b:e9:38:41:
84:8d:9e:ac:5a:8b:65:5e:87:c4:7b:68:4b:0e:b5:8c:c8:8a:
98:5f:5c:8a:f2:c7:e8:5d:6c:07:7c:6f:d9:d8:c1:f6:a7:99:
6f:45:56:35:23:31:77:08:21:b7:9b:56:2a:e4:b9:3d:25:5b:
03:8c:ca:a3:fc:e0:d1:ad:c1:ee:7a:98:de:dc:fa:d5:be:52:
24:06:cf:2f:28:06:68:0d:4c:5f:2a:71:f2:8d:fe:ea:25:de:
da:71:2f:63:23:d6:21:30:33:f9:f9:f8:61:a8:4f:f5:ef:85:
f0:12:08:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:27 2026 by rpki-client