Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3131352e34332e3132382e302f31372d3137203d3e2039343136.roa
File: 3131352e34332e3132382e302f31372d3137203d3e2039343136.roa (raw, json)
Hash identifier: St+0TPB6YfmeZtsKtmzv7EeJUGiMlhWPr0IbfUc/xZE=
Subject key identifier: C9:01:C3:D4:2F:00:8A:2A:A5:61:F9:5E:BA:55:AB:8F:6A:F1:8B:53
Certificate issuer: /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Certificate serial: 23D09A2ECC46FF7E9C74ACE93C1B28A77813D4E0
Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KE-ING/0/3131352e34332e3132382e302f31372d3137203d3e2039343136.roa
Signing time: Mon 11 May 2026 16:48:51 +0000
ROA not before: Mon 11 May 2026 16:43:51 +0000
ROA not after: Mon 10 May 2027 16:48:51 +0000
asID: 9416
IP address blocks: 115.43.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:d0:9a:2e:cc:46:ff:7e:9c:74:ac:e9:3c:1b:28:a7:78:13:d4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Validity
Not Before: May 11 16:43:51 2026 GMT
Not After : May 10 16:48:51 2027 GMT
Subject: CN=C901C3D42F008A2AA561F95EBA55AB8F6AF18B53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:f2:db:cc:b1:b8:7a:f6:a4:87:68:9d:3d:
b7:98:41:9b:96:40:62:a1:b4:d9:91:3f:ba:94:d7:
57:1c:08:de:4f:67:42:58:e4:55:ab:4d:46:b3:c9:
98:5b:13:8d:b2:86:c3:fd:2f:6f:1d:11:db:80:70:
38:20:0a:d0:16:b4:71:dc:24:e8:99:35:3e:9a:34:
49:c4:1b:be:8a:d2:64:4c:ea:30:3b:a7:dc:08:75:
6f:a5:f6:80:91:8b:05:9b:7d:24:6b:18:15:52:36:
10:65:20:11:62:da:9e:08:d2:8f:91:18:6e:84:4b:
45:7a:43:96:f2:d9:75:cd:6f:b5:7f:be:22:31:83:
0a:fd:02:ce:4b:00:60:d3:a9:7f:fc:40:68:a1:9f:
7c:ea:28:0e:fd:21:bc:be:48:e6:87:82:12:a6:75:
1a:90:ae:8e:0e:8f:96:4b:ab:1a:20:bb:52:20:fa:
72:2b:f6:fb:c2:ce:c8:3c:7c:39:b3:a0:9c:e6:86:
b2:0d:c9:69:cf:f5:73:d8:48:1e:ab:a8:6b:59:fc:
e9:69:ff:2f:94:4a:1e:a6:ca:a6:16:85:f9:48:6a:
76:28:b1:ea:7c:ff:c0:e7:e1:06:a6:19:c9:87:03:
40:34:1d:8c:9c:cc:ab:37:6d:a0:9f:75:d5:3f:1b:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:01:C3:D4:2F:00:8A:2A:A5:61:F9:5E:BA:55:AB:8F:6A:F1:8B:53
X509v3 Authority Key Identifier:
keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3131352e34332e3132382e302f31372d3137203d3e2039343136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.43.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1e:11:8d:0a:32:10:46:93:12:c9:51:49:77:25:ac:f6:eb:32:
07:75:08:6c:64:8f:6f:62:58:56:aa:7a:ff:5b:ed:ae:8d:7d:
2c:5b:bb:a5:42:bc:8e:73:cf:2e:fa:ba:4b:f9:a1:e1:a2:c2:
3f:59:ec:20:fb:e5:1e:71:ab:34:25:6d:d2:5d:1b:71:1d:bc:
16:0d:a2:c4:f1:3c:f6:1b:b6:d6:7b:ce:53:8e:2c:3b:cb:22:
8d:c1:3c:c1:0a:42:8e:2e:03:b1:98:b7:1c:c2:ff:e7:51:c8:
b3:69:95:be:83:f2:79:42:bb:ed:f4:45:0d:63:35:08:6f:1e:
6d:c2:33:e2:bc:2e:48:27:ed:fe:18:ef:27:68:6c:28:09:18:
0e:10:2e:4e:47:4a:35:23:29:f6:07:ce:2d:aa:3b:ae:3a:b1:
fa:c6:f4:0e:84:54:44:71:1e:da:ad:84:03:8e:aa:31:3f:f9:
28:01:bb:a3:4a:4d:6b:54:fd:d1:1f:81:29:06:6e:0c:d4:0b:
80:3d:59:17:21:b5:63:7a:8d:b9:88:04:35:d6:f2:f7:85:66:
90:89:9c:9e:07:6f:8b:2a:ca:da:9c:f1:86:d5:d7:24:0e:b2:
92:43:e0:2e:07:9e:3f:52:4f:26:ef:56:ff:2f:70:03:ee:4e:
24:d9:72:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:53 2026 by rpki-client