Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/ISHISH/0/323430303a356561303a3a2f33322d3438203d3e203338303437.roa
File: 323430303a356561303a3a2f33322d3438203d3e203338303437.roa (raw, json)
Hash identifier: O+ZSz165chMSG9TTTLbDA5gMMFC44YPDzN30YRcNezw=
Subject key identifier: CA:5F:17:E3:3E:DA:50:3C:2B:A7:B8:9A:2B:97:B4:4F:5D:F6:5A:85
Certificate issuer: /CN=D82B42B328967B86227F939C5515F94575F4B06F
Certificate serial: 59A0E60281C986F0FDCF6DC443909DBC331AB004
Authority key identifier: D8:2B:42:B3:28:96:7B:86:22:7F:93:9C:55:15:F9:45:75:F4:B0:6F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D82B42B328967B86227F939C5515F94575F4B06F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ISHISH/0/323430303a356561303a3a2f33322d3438203d3e203338303437.roa
Signing time: Mon 11 May 2026 17:15:35 +0000
ROA not before: Mon 11 May 2026 17:10:35 +0000
ROA not after: Mon 10 May 2027 17:15:35 +0000
asID: 38047
IP address blocks: 2400:5ea0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a0:e6:02:81:c9:86:f0:fd:cf:6d:c4:43:90:9d:bc:33:1a:b0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D82B42B328967B86227F939C5515F94575F4B06F
Validity
Not Before: May 11 17:10:35 2026 GMT
Not After : May 10 17:15:35 2027 GMT
Subject: CN=CA5F17E33EDA503C2BA7B89A2B97B44F5DF65A85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:8b:ce:c1:76:e3:77:97:af:2e:b5:3a:b1:
e5:61:9f:67:54:ec:2a:09:cd:30:a1:fb:87:d5:83:
94:f6:c0:ef:66:bc:b4:64:c2:7d:db:4a:76:0a:a5:
d4:9b:e0:55:fc:58:7a:a6:dd:7c:5c:eb:a8:3a:d8:
f0:af:9d:07:df:0b:0e:f3:38:d6:5a:31:94:fb:f7:
4a:62:12:b7:74:ed:2c:2d:23:30:39:6a:7c:78:da:
cb:22:6e:ed:ea:96:a8:d9:32:c4:8b:ef:2e:bb:35:
7d:ec:0c:16:ff:27:70:e6:ec:a0:a4:24:e9:b4:96:
f5:71:a7:1e:5d:d1:0a:c7:e1:6b:5b:16:ff:89:8a:
69:a1:cf:74:8d:dd:53:7c:b9:37:cc:a6:d1:d5:23:
5f:b9:a0:4a:02:2e:62:45:42:b5:ec:e0:f7:1a:08:
d4:1e:5e:3e:68:8f:f1:79:1f:1c:2f:89:8c:44:c1:
16:31:3e:44:1d:61:8b:f5:d7:e2:6e:63:7c:b1:f8:
38:0e:65:c2:e1:a5:00:65:28:c5:1f:26:29:29:7e:
2a:f5:19:8c:9d:ae:e9:eb:49:a5:0d:df:7b:1c:eb:
5f:1f:71:24:f7:17:87:a6:dd:22:3a:f6:78:c2:8d:
99:4c:87:bc:e5:bd:8d:12:b4:23:87:a9:dd:9d:c2:
b8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5F:17:E3:3E:DA:50:3C:2B:A7:B8:9A:2B:97:B4:4F:5D:F6:5A:85
X509v3 Authority Key Identifier:
keyid:D8:2B:42:B3:28:96:7B:86:22:7F:93:9C:55:15:F9:45:75:F4:B0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D82B42B328967B86227F939C5515F94575F4B06F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ISHISH/0/323430303a356561303a3a2f33322d3438203d3e203338303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:5ea0::/32
Signature Algorithm: sha256WithRSAEncryption
24:55:38:50:4b:b3:71:45:18:d9:9c:69:0a:3c:09:64:41:81:
91:3e:83:6a:90:05:02:eb:19:9a:1f:de:65:31:d5:4f:05:7e:
61:71:5d:b3:19:53:1c:d9:9b:74:2e:9f:13:c3:84:99:1b:37:
96:83:7c:33:0b:68:d2:3f:c8:b3:1f:ed:93:9d:e5:52:80:f2:
10:b7:15:78:7f:c2:88:8b:0f:77:2e:c8:4b:af:3b:2a:2d:41:
ac:0b:dc:9e:69:18:1e:ba:ec:67:29:ad:36:69:03:8a:2c:c0:
c5:9d:d3:81:a2:ec:45:27:a8:7a:1c:05:5f:60:19:d1:86:76:
4a:91:d4:03:8a:3d:7f:fe:03:17:58:a7:65:b4:60:ee:a8:9e:
00:2e:41:dc:62:07:a7:2b:fe:a0:13:13:3e:fe:d0:87:de:64:
9b:aa:95:6e:22:4a:3d:0f:1f:d5:06:1c:3c:02:fe:f6:39:1e:
b1:b8:a6:a7:24:a4:e6:c7:9c:7f:59:a4:eb:28:b5:c0:7e:a2:
e2:f6:1d:f4:76:c6:82:f4:01:e3:98:15:0c:12:e5:a8:c6:1e:
31:13:c2:97:f8:60:b7:a0:de:a7:32:12:28:52:d4:4f:82:e0:
66:19:ab:45:26:60:32:8b:07:59:46:dc:8b:b0:c3:06:7a:2b:
f9:5c:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:04 2026 by rpki-client