Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/36312e36332e36342e302f31392d3234203d3e203138303432.roa
File: 36312e36332e36342e302f31392d3234203d3e203138303432.roa (raw, json)
Hash identifier: o8lP6wN1YoXlc135dAR+pjKDRDFMUY9ed02kJcD94DU=
Subject key identifier: 42:8C:40:D0:E1:9E:C5:D3:E0:7D:3D:59:93:E0:56:37:E7:3C:3A:49
Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589
Certificate serial: 6097BF1BC4A104BD20BFC7E10EFCA37017B42838
Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/36312e36332e36342e302f31392d3234203d3e203138303432.roa
Signing time: Tue 12 May 2026 01:29:18 +0000
ROA not before: Tue 12 May 2026 01:24:18 +0000
ROA not after: Tue 11 May 2027 01:29:18 +0000
asID: 18042
IP address blocks: 61.63.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:97:bf:1b:c4:a1:04:bd:20:bf:c7:e1:0e:fc:a3:70:17:b4:28:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589
Validity
Not Before: May 12 01:24:18 2026 GMT
Not After : May 11 01:29:18 2027 GMT
Subject: CN=428C40D0E19EC5D3E07D3D5993E05637E73C3A49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:88:83:76:ad:c8:c5:bb:b0:b1:1f:95:f9:
78:9c:11:ab:85:d2:89:0d:65:7c:0b:c9:04:05:b8:
10:8c:6a:b7:11:4c:6e:79:b9:8a:9a:51:60:20:0f:
ed:d9:34:41:06:48:ed:7c:63:c9:66:04:f6:96:54:
42:10:cb:69:43:71:e0:dd:39:f8:89:aa:d2:5c:a5:
ac:12:6e:67:4e:5a:2d:82:0a:99:85:94:ee:1d:8f:
1c:81:d4:0a:1b:78:da:a3:48:5a:61:af:b6:6e:13:
46:1b:01:93:43:0b:0e:d5:d8:64:fd:71:8b:a9:d9:
23:52:f4:0d:12:4a:e2:8a:3c:0e:65:7e:e7:54:7e:
50:eb:d4:6d:52:47:44:1e:6b:3c:25:d8:73:48:46:
83:04:6a:e7:65:5c:09:f8:09:03:07:2b:f1:ec:70:
68:cf:d6:de:08:21:f2:05:88:2a:2b:73:ab:74:0e:
e9:d6:9a:d4:42:8c:d5:de:61:01:b6:89:f6:6a:b2:
82:43:96:78:7a:f1:c6:6a:06:e4:8e:c0:f8:e7:5d:
cc:fd:16:f3:46:7e:3e:7d:a4:08:d6:04:9a:3f:87:
35:f6:d6:2d:3f:45:06:fc:8b:21:cc:72:79:de:56:
3f:59:ac:51:74:9b:28:2a:ac:f2:a1:1d:8c:30:53:
75:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8C:40:D0:E1:9E:C5:D3:E0:7D:3D:59:93:E0:56:37:E7:3C:3A:49
X509v3 Authority Key Identifier:
keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/36312e36332e36342e302f31392d3234203d3e203138303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.63.64.0/19
Signature Algorithm: sha256WithRSAEncryption
84:b1:0d:7b:2c:8c:10:47:91:79:df:06:0b:ce:63:9e:a1:fe:
ce:e0:d7:6c:67:55:cb:fc:4b:6e:60:6d:d2:5c:8e:45:e5:9f:
5c:ad:d5:8f:f7:e0:5c:33:bf:d6:7e:24:63:b8:c1:83:34:a0:
4f:96:af:04:fe:14:8f:64:1f:bd:55:1d:0f:da:19:81:84:45:
ae:e6:be:38:7c:83:87:9e:05:e2:19:5d:d9:a3:80:8a:d5:40:
26:2f:5d:73:a6:75:c2:6f:b5:3e:eb:0b:ad:b6:da:76:12:0c:
ca:75:13:c1:4e:ac:d6:5a:cf:26:62:11:02:dd:8f:b1:3e:1e:
9b:33:81:ed:a7:34:1c:ea:61:10:17:be:13:f1:3a:d5:9c:c9:
a8:bf:af:69:ff:31:65:36:c8:b3:0b:12:84:e7:91:6b:c5:b8:
ef:fa:75:99:fd:38:73:c0:5d:47:55:c5:c0:6d:68:57:01:66:
ac:88:29:dc:51:e1:e7:e7:76:43:ac:cc:16:8f:66:06:e8:03:
53:67:60:15:2a:ee:97:56:04:df:9d:f2:81:79:51:11:1f:ba:
6a:fe:aa:90:61:8f:d0:d6:c3:1b:2f:6e:6f:80:5e:bf:c6:90:
a0:75:06:85:ec:6e:0a:e0:56:e7:ba:37:c0:00:96:6b:e7:0d:
ce:df:e7:2a
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgIUYJe/G8ShBL0gv8fhDvyjcBe0KDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC
N0VBMTU4OTAeFw0yNjA1MTIwMTI0MThaFw0yNzA1MTEwMTI5MThaMDMxMTAvBgNV
BAMTKDQyOEM0MEQwRTE5RUM1RDNFMDdEM0Q1OTkzRTA1NjM3RTczQzNBNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrc4iDdq3IxbuwsR+V+XicEauF
0okNZXwLyQQFuBCMarcRTG55uYqaUWAgD+3ZNEEGSO18Y8lmBPaWVEIQy2lDceDd
OfiJqtJcpawSbmdOWi2CCpmFlO4djxyB1AobeNqjSFphr7ZuE0YbAZNDCw7V2GT9
cYup2SNS9A0SSuKKPA5lfudUflDr1G1SR0Qeazwl2HNIRoMEaudlXAn4CQMHK/Hs
cGjP1t4IIfIFiCorc6t0DunWmtRCjNXeYQG2ifZqsoJDlnh68cZqBuSOwPjnXcz9
FvNGfj59pAjWBJo/hzX21i0/RQb8iyHMcnneVj9ZrFF0mygqrPKhHYwwU3W7AgMB
AAGjggHZMIIB1TAdBgNVHQ4EFgQUQoxA0OGexdPgfT1Zk+BWN+c8OkkwHwYDVR0j
BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv
OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0
QUI3RUExNTg5LmNlcjB1BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzYzMTJlMzYzMzJlMzYzNDJl
MzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzgzMDM0MzIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9P0Aw
DQYJKoZIhvcNAQELBQADggEBAISxDXssjBBHkXnfBgvOY56h/s7g12xnVcv8S25g
bdJcjkXln1yt1Y/34Fwzv9Z+JGO4wYM0oE+WrwT+FI9kH71VHQ/aGYGERa7mvjh8
g4eeBeIZXdmjgIrVQCYvXXOmdcJvtT7rC6222nYSDMp1E8FOrNZazyZiEQLdj7E+
Hpszge2nNBzqYRAXvhPxOtWcyai/r2n/MWU2yLMLEoTnkWvFuO/6dZn9OHPAXUdV
xcBtaFcBZqyIKdxR4efndkOszBaPZgboA1NnYBUq7pdWBN+d8oF5UREfumr+qpBh
j9DWwxsvbm+AXr/GkKB1BoXsbgrgVue6N8AAlmvnDc7f5yo=
-----END CERTIFICATE-----
Generated at Wed May 13 02:33:36 2026 by rpki-client