Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/JDA/0/3231302e37392e3135342e302f32332d3234203d3e203138303431.roa
File: 3231302e37392e3135342e302f32332d3234203d3e203138303431.roa (raw, json)
Hash identifier: 6gHJfiK63fKOqTCfE1ImEP6HSow+veqBLLBJ8NhAMVM=
Subject key identifier: 4E:D4:2B:C4:1B:82:3A:C2:29:2A:92:27:A7:12:DD:12:DC:5D:9E:FA
Certificate issuer: /CN=3E0842CB09173FD62797099AF95D837AFF05C8C1
Certificate serial: 071959F59643C2C27C6CF2F46582E6D671125B33
Authority key identifier: 3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/JDA/0/3231302e37392e3135342e302f32332d3234203d3e203138303431.roa
Signing time: Mon 11 May 2026 17:32:44 +0000
ROA not before: Mon 11 May 2026 17:27:44 +0000
ROA not after: Mon 10 May 2027 17:32:44 +0000
asID: 18041
IP address blocks: 210.79.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:19:59:f5:96:43:c2:c2:7c:6c:f2:f4:65:82:e6:d6:71:12:5b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E0842CB09173FD62797099AF95D837AFF05C8C1
Validity
Not Before: May 11 17:27:44 2026 GMT
Not After : May 10 17:32:44 2027 GMT
Subject: CN=4ED42BC41B823AC2292A9227A712DD12DC5D9EFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:0a:cb:0c:80:7f:74:57:db:00:96:83:b1:
1b:13:0e:42:19:c9:56:a2:47:86:aa:f2:93:54:bf:
83:de:b6:59:1b:90:40:09:c7:e7:b5:6e:27:1a:44:
8e:d5:df:c9:f6:c8:34:ac:10:0e:36:f8:33:29:c5:
46:60:ac:ae:57:17:28:41:06:e7:95:56:5c:b7:07:
78:7d:59:ca:f7:ee:fc:c9:f3:44:e3:98:0a:46:51:
d9:80:a4:0d:8f:f8:56:26:a3:0b:64:56:cf:cf:db:
7e:f2:2c:1b:0a:75:14:d7:4c:66:3d:16:ed:42:56:
62:a1:17:40:4e:9f:a5:fd:02:da:1c:94:fd:e0:5e:
d7:d9:81:e8:2a:c9:91:34:ce:82:9d:ea:3f:ce:ed:
b0:c7:97:c4:79:3b:fe:4c:76:33:fd:82:31:42:8a:
7b:bf:86:33:35:1c:87:3b:67:e5:fd:03:eb:72:d2:
f9:da:cf:b0:ab:ce:e0:1c:de:46:2f:35:b6:8f:26:
e3:8b:c1:73:cc:15:e5:9e:95:a0:9f:3f:82:e6:cf:
61:4c:6b:46:4a:00:a2:26:fb:e7:5f:cd:5a:95:e0:
8b:90:45:bd:9c:af:2c:31:2d:e2:fb:58:68:7e:2a:
5a:b0:3a:a5:28:1e:57:c5:5d:4e:1a:4c:9c:a8:78:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D4:2B:C4:1B:82:3A:C2:29:2A:92:27:A7:12:DD:12:DC:5D:9E:FA
X509v3 Authority Key Identifier:
keyid:3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3231302e37392e3135342e302f32332d3234203d3e203138303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.79.154.0/23
Signature Algorithm: sha256WithRSAEncryption
31:c2:e1:5a:67:39:60:17:1b:c8:48:da:1c:b8:1c:af:34:9d:
f3:16:ac:72:49:44:95:f3:3f:63:b9:00:c3:5f:d9:ea:8e:d9:
19:89:98:70:4c:0c:9b:44:32:27:b2:fe:40:e8:0d:37:55:e0:
81:45:8e:9d:ca:e6:71:c3:ac:98:e1:56:47:a6:7f:2a:ec:71:
bf:18:ef:a1:3f:c0:9c:f3:c6:7e:93:d5:86:f1:3f:c3:c6:73:
ba:ee:be:e8:18:77:e6:ca:dd:24:eb:4f:4a:90:9d:0d:df:5c:
3b:cd:eb:c3:f7:f4:0f:78:ea:b4:76:ec:e9:30:89:fa:90:f4:
de:24:5d:cd:8b:3f:ab:61:4a:17:87:12:b4:ab:58:f4:f0:d3:
72:b3:73:9f:22:cb:cc:48:fc:14:70:f9:66:24:a9:9c:04:be:
f9:a8:d2:bf:22:b5:9e:43:d7:69:41:aa:5c:39:07:f5:5d:97:
a7:13:f1:59:f6:b7:e6:d4:2b:00:0e:29:0d:14:88:1f:1c:15:
eb:3a:99:63:05:5a:41:cc:33:ed:36:ae:4e:63:b7:86:51:ff:
0f:ac:5a:06:2c:c0:5c:c9:b6:a8:d9:41:b5:c1:de:51:41:4c:
07:d3:9b:62:f0:03:3e:b0:0c:0e:9d:3a:a0:84:74:fe:f8:4d:
91:bc:4f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:30 2026 by rpki-client