Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/KAIWEI/0/3230322e34372e3137322e302f32332d3332203d3e203134383734.roa
File: 3230322e34372e3137322e302f32332d3332203d3e203134383734.roa (raw, json)
Hash identifier: z5ttCw1NDbIiW26b4wnwRq+YuLtgcLQsIT0yR4YwdOc=
Subject key identifier: F9:D3:23:65:74:0F:A7:5D:2A:F8:88:3F:5C:67:57:C9:24:F5:3F:83
Certificate issuer: /CN=084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD
Certificate serial: 703A0E9096DD9CFF1F4ACE53F1B3A99E689F9459
Authority key identifier: 08:4F:CA:ED:B5:0B:B0:39:5F:4B:B9:1B:91:C0:F2:E4:E8:4C:B7:BD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KAIWEI/0/3230322e34372e3137322e302f32332d3332203d3e203134383734.roa
Signing time: Mon 11 May 2026 17:38:46 +0000
ROA not before: Mon 11 May 2026 17:33:46 +0000
ROA not after: Mon 10 May 2027 17:38:46 +0000
asID: 14874
IP address blocks: 202.47.172.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:3a:0e:90:96:dd:9c:ff:1f:4a:ce:53:f1:b3:a9:9e:68:9f:94:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD
Validity
Not Before: May 11 17:33:46 2026 GMT
Not After : May 10 17:38:46 2027 GMT
Subject: CN=F9D32365740FA75D2AF8883F5C6757C924F53F83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a6:67:24:da:97:9f:c7:81:f0:56:d8:d1:50:
03:7a:f1:23:37:b2:41:0a:9a:84:c4:8b:44:22:03:
3b:16:8f:ad:5f:f9:b5:97:2e:a2:bf:e1:d0:01:47:
17:a5:bd:cf:56:ee:0f:f0:cc:57:9a:9d:2e:0f:8d:
ae:1e:ca:1e:d0:18:d5:b9:ab:c9:95:92:41:65:80:
1f:91:f9:89:af:1d:61:75:9d:ee:31:e7:70:7b:0e:
9b:86:47:9f:c1:93:f5:fd:ed:7a:d7:08:47:ef:64:
70:f7:fd:0b:5a:cf:a7:fd:12:67:ff:e7:2f:8e:fc:
cc:fb:1b:bb:cf:ab:3d:64:de:0d:8f:3b:3a:0d:71:
43:be:01:14:8a:94:a4:b6:9e:0d:1c:ae:d7:6e:00:
a9:f5:72:de:25:c8:34:4e:70:52:5e:d1:b1:d6:10:
33:d1:91:11:f3:97:ce:d7:36:b2:d0:31:23:f5:7d:
9c:04:d3:c4:39:52:be:73:f8:2c:1b:6b:2f:43:09:
ab:ca:c6:1c:fc:62:e8:bd:f9:52:56:ae:f4:ba:cf:
81:ff:16:da:b7:97:45:b7:75:76:f2:42:81:ae:62:
80:38:ec:53:e1:86:23:1d:80:74:5e:39:b9:d1:ee:
be:1a:fe:9f:80:06:81:4d:32:c7:dd:ed:cc:36:78:
0f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D3:23:65:74:0F:A7:5D:2A:F8:88:3F:5C:67:57:C9:24:F5:3F:83
X509v3 Authority Key Identifier:
keyid:08:4F:CA:ED:B5:0B:B0:39:5F:4B:B9:1B:91:C0:F2:E4:E8:4C:B7:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KAIWEI/0/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KAIWEI/0/3230322e34372e3137322e302f32332d3332203d3e203134383734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.172.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:8b:0d:6c:d1:a0:04:50:fc:d8:88:e2:0d:c8:b6:f8:c6:81:
96:16:e5:64:28:c3:51:0f:9f:82:94:78:99:a1:85:1c:71:76:
9b:2c:e5:b3:02:4d:58:b1:0e:33:e7:c9:eb:9e:ab:35:b8:80:
dd:f7:41:e3:1c:39:4a:b6:93:18:aa:47:f9:01:5f:cd:54:ad:
0b:69:4e:bd:37:df:a3:67:99:c5:a4:80:f7:73:60:1c:10:7c:
4f:1c:9c:15:31:38:37:8b:b2:bc:74:a5:0f:bf:76:c7:db:e1:
78:3a:45:05:97:8c:3b:7c:64:63:2f:43:dd:ba:a6:c7:02:3a:
29:ab:c2:2b:d7:ba:b9:c1:ad:4d:a8:20:2a:b2:a6:95:eb:73:
fa:b9:fe:16:50:98:77:5a:e4:93:a6:16:ca:ee:57:9a:88:b1:
c7:8b:1e:82:f5:60:68:80:ed:35:13:aa:df:ed:4b:0a:2e:2f:
02:02:ec:5b:10:2e:64:f3:dd:88:b7:c6:b4:2d:cf:47:1f:7c:
14:22:11:d0:6a:9c:66:0c:4b:83:19:0e:ec:f1:8e:ba:5b:1d:
08:c5:96:ad:7d:6a:38:0c:cf:b0:f8:f1:ea:4a:f3:80:12:05:
57:18:a6:aa:06:a5:39:35:8c:ac:46:43:99:43:a6:9d:ff:6b:
20:4e:a5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:11 2026 by rpki-client