Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/3130332e39382e37322e302f32342d3234203d3e2039363738.roa
File: 3130332e39382e37322e302f32342d3234203d3e2039363738.roa (raw, json)
Hash identifier: +QkVrz2UrUc1xKgslAqv4U092I7kUGBfoilfgqBhzdM=
Subject key identifier: 3B:25:4A:A1:03:41:A0:D4:1E:98:83:5F:66:7A:C6:EF:1E:C6:62:A4
Certificate issuer: /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial: 274FF6E828CF9C9C5C01FCA44D120EFAD7B9C3C3
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3130332e39382e37322e302f32342d3234203d3e2039363738.roa
Signing time: Mon 11 May 2026 17:06:53 +0000
ROA not before: Mon 11 May 2026 17:01:53 +0000
ROA not after: Mon 10 May 2027 17:06:53 +0000
asID: 9678
IP address blocks: 103.98.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:4f:f6:e8:28:cf:9c:9c:5c:01:fc:a4:4d:12:0e:fa:d7:b9:c3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Validity
Not Before: May 11 17:01:53 2026 GMT
Not After : May 10 17:06:53 2027 GMT
Subject: CN=3B254AA10341A0D41E98835F667AC6EF1EC662A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:96:50:dc:9f:46:cd:89:f3:06:31:3a:5d:91:
3e:d0:cf:3d:d6:1b:fe:69:d7:b0:62:ac:69:d1:dc:
86:61:99:64:88:ea:bb:30:21:6e:7b:71:8c:a4:f8:
06:97:5d:0f:26:b6:aa:e8:c8:3f:a2:6f:9e:bf:de:
3e:04:a8:66:eb:c2:ff:1e:9d:59:44:c5:41:37:cf:
9a:1f:8f:af:28:b0:13:68:a7:23:a1:4a:cd:e0:c7:
39:ed:d3:15:fb:9b:2a:58:8e:66:fe:49:49:5c:8d:
58:b1:76:8a:d2:73:e1:08:ba:b2:de:35:23:f2:d5:
8d:c7:64:1c:6a:e4:aa:0d:c1:b0:ec:6f:cc:43:0b:
63:5c:ba:7d:67:e4:63:9d:34:9b:b8:68:3b:2b:70:
e0:90:89:9e:ff:a8:7c:e9:7c:d2:4e:99:a8:b1:63:
c0:28:bf:36:83:f1:f5:81:38:78:d4:d7:f1:a2:8f:
46:d5:b2:28:dc:0e:88:b8:77:60:43:31:f6:9c:3b:
3d:02:12:61:40:7b:ed:4f:dc:1e:31:1b:4c:d0:86:
dd:85:79:fc:8d:d4:61:b7:64:9d:c3:ea:bf:19:d0:
33:b9:fe:fb:8c:15:1c:60:4b:3f:bf:e1:3e:03:38:
df:c6:ad:96:94:48:4f:dd:6d:99:0f:3a:11:6f:5f:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:25:4A:A1:03:41:A0:D4:1E:98:83:5F:66:7A:C6:EF:1E:C6:62:A4
X509v3 Authority Key Identifier:
keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3130332e39382e37322e302f32342d3234203d3e2039363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.98.72.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b3:70:f3:73:0c:f8:55:04:13:3c:b0:21:d4:50:5e:c2:df:
79:89:63:d5:a9:e1:2e:06:dd:8d:03:42:df:a2:a4:ba:d4:34:
8d:00:c6:79:b0:bd:a9:d9:ad:4a:4f:1d:77:2e:c1:c4:9c:2b:
05:08:a9:97:72:19:02:1c:f8:6a:e2:14:f3:71:64:7a:5c:4d:
60:30:6f:88:f2:ad:06:ea:c1:11:f5:7e:4f:13:cf:f6:81:76:
84:57:1d:88:54:1a:e3:37:7d:f0:50:f4:e5:d5:af:fb:26:b2:
8c:47:bb:f6:62:83:4d:76:28:ad:7e:11:90:3b:fa:53:d3:b7:
74:6a:16:a3:2f:ec:5c:30:ad:9f:bb:8c:3b:f4:22:ed:47:5b:
c9:b1:c1:b4:42:19:75:f1:95:67:40:d1:2c:69:88:ac:6d:be:
d5:ab:26:ad:58:2f:77:5b:4f:70:2a:d6:be:36:09:f3:07:d8:
b0:c1:82:8d:3f:39:13:b5:fa:74:02:80:c3:04:cc:36:79:88:
cf:96:e6:67:53:48:16:a3:29:7b:f4:0e:ea:a9:b2:d9:8b:db:
65:c3:c9:8b:72:00:22:20:53:35:fe:36:11:79:92:73:b7:3d:
d5:26:18:42:ed:9b:50:5c:94:37:55:b4:27:48:18:07:6b:13:
3a:f7:be:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:33 2026 by rpki-client