Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/III/0/3134302e39322e302e302f31362d3234203d3e2031363539.roa
File: 3134302e39322e302e302f31362d3234203d3e2031363539.roa (raw, json)
Hash identifier: rvl3iJZidfPVj8QIpPoFpRfFHf2uQD3RRvMQXspZm6A=
Subject key identifier: 96:A1:68:6D:B7:51:14:B7:E2:D2:1C:95:2D:0E:A1:3F:09:2D:3C:05
Certificate issuer: /CN=86E5C9C6D878819F10BEC976A116DB8148A15794
Certificate serial: 1EAE9655C50D5D4E040DC636E389CF7361682A47
Authority key identifier: 86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/III/0/3134302e39322e302e302f31362d3234203d3e2031363539.roa
Signing time: Mon 11 May 2026 17:57:12 +0000
ROA not before: Mon 11 May 2026 17:52:12 +0000
ROA not after: Mon 10 May 2027 17:57:12 +0000
asID: 1659
IP address blocks: 140.92.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ae:96:55:c5:0d:5d:4e:04:0d:c6:36:e3:89:cf:73:61:68:2a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86E5C9C6D878819F10BEC976A116DB8148A15794
Validity
Not Before: May 11 17:52:12 2026 GMT
Not After : May 10 17:57:12 2027 GMT
Subject: CN=96A1686DB75114B7E2D21C952D0EA13F092D3C05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:42:86:29:e9:9c:08:92:86:e1:63:5b:18:ba:
96:e1:ec:ac:47:75:d7:14:24:12:2a:de:3f:5a:29:
02:aa:22:73:b9:1c:9d:c9:de:23:10:55:e0:bb:e1:
1b:1b:48:a5:f5:c8:9d:d2:57:1e:ca:71:ad:06:76:
85:3e:c4:3d:f8:7d:3d:05:71:c0:24:00:3e:e5:66:
b4:01:70:7a:84:1b:97:ce:d3:d2:b6:44:d7:b2:4a:
ab:51:c1:35:4c:d4:3a:c8:e9:8c:af:87:e3:3f:29:
d3:e1:fb:0e:93:6a:28:19:f5:ce:c7:ff:e1:94:c1:
52:ba:6b:02:b7:c1:dc:9c:2d:ef:5f:37:0c:19:c4:
ff:4b:1b:ff:ae:a6:6b:07:f7:4a:5d:2d:05:fd:00:
e3:e1:18:5c:84:5a:fa:8f:e0:67:40:a9:9a:a6:7e:
84:57:48:d2:e2:25:f3:5a:26:1b:3c:3c:1d:8f:d8:
b9:b9:68:53:ba:6b:a1:68:6b:b5:92:52:5d:a3:89:
84:9a:73:7d:55:da:76:25:14:58:bc:1b:cf:85:fe:
76:e1:4c:9b:d1:80:14:aa:92:c0:d4:d1:0b:b7:be:
2e:61:eb:70:31:5b:d8:7d:25:0b:39:b4:05:36:14:
76:b8:34:2b:ea:dc:09:d9:08:cf:f5:94:4f:e6:9a:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A1:68:6D:B7:51:14:B7:E2:D2:1C:95:2D:0E:A1:3F:09:2D:3C:05
X509v3 Authority Key Identifier:
keyid:86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/III/0/3134302e39322e302e302f31362d3234203d3e2031363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:11:f5:8a:6f:be:0b:7e:27:a7:2e:b7:85:ea:d7:46:79:6d:
96:d7:28:e1:29:a5:49:a1:e0:8b:de:81:84:6d:c4:78:f5:a8:
08:fe:fa:32:f0:6a:a1:15:f6:32:f8:e7:a8:09:4e:8b:1b:1d:
ab:97:81:46:35:06:b8:7e:26:a1:18:99:ef:0e:44:8f:af:94:
7d:29:5b:54:91:f9:36:f9:46:f2:de:5c:58:e5:f0:37:e8:c5:
fc:8f:6c:ec:46:ff:32:f5:53:5d:72:7b:c1:ec:68:dd:41:99:
b8:49:99:9d:9d:12:cf:75:72:3b:47:6e:5d:2a:44:41:28:df:
38:17:3b:5d:f8:07:47:5a:63:f7:35:d3:38:b9:51:b0:31:95:
8a:69:dc:24:f6:12:31:ba:1c:86:ba:c4:0c:ad:e3:b7:48:f4:
21:af:df:0f:00:2f:2c:25:1d:aa:e8:29:bf:8e:5c:e5:df:4a:
90:0f:ca:9c:c2:93:b0:0b:a3:da:36:69:63:10:5d:7f:db:19:
cb:8e:cb:93:25:d4:07:c8:1d:3d:9b:f2:b5:f4:e8:81:1c:27:
aa:68:38:b7:8d:b5:b6:03:79:15:ea:e9:d9:f4:ca:6b:46:f2:
a5:a6:29:25:0d:9f:25:48:95:2c:b7:40:c4:4b:d8:28:1d:30:
91:29:43:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:59 2026 by rpki-client