Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3131392e31342e302e302f31372d3137203d3e203138303432.roa
File: 3131392e31342e302e302f31372d3137203d3e203138303432.roa (raw, json)
Hash identifier: izV5LKXyRkMjgziCJgXNzX9mmTRUejlC9TqllBbTJjE=
Subject key identifier: 29:C6:5A:DD:F7:E8:13:0B:7B:A7:41:0B:9F:BD:4E:C2:91:1E:65:31
Certificate issuer: /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Certificate serial: 02EFFB9959EEA591AFEBCBB83C825FB506617658
Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KE-ING/0/3131392e31342e302e302f31372d3137203d3e203138303432.roa
Signing time: Mon 11 May 2026 17:09:15 +0000
ROA not before: Mon 11 May 2026 17:04:15 +0000
ROA not after: Mon 10 May 2027 17:09:15 +0000
asID: 18042
IP address blocks: 119.14.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:ef:fb:99:59:ee:a5:91:af:eb:cb:b8:3c:82:5f:b5:06:61:76:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Validity
Not Before: May 11 17:04:15 2026 GMT
Not After : May 10 17:09:15 2027 GMT
Subject: CN=29C65ADDF7E8130B7BA7410B9FBD4EC2911E6531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:45:b8:4d:67:7c:13:a0:3f:73:6a:b1:52:
df:73:71:cb:94:2c:fb:f7:08:0f:ec:a7:0d:27:79:
33:5e:c9:0c:e9:ef:a7:1a:ca:bb:69:48:f9:53:3b:
fc:03:52:4c:b8:65:7f:98:6d:db:70:57:8f:8a:62:
c3:d7:cc:29:42:c6:1b:1b:52:c2:f1:ce:e7:ac:b4:
18:ad:fe:ba:a0:82:94:7e:a0:ca:80:31:7f:c5:61:
8a:82:b0:87:ec:0a:9d:72:fa:01:73:a7:12:af:5a:
a9:62:66:e4:8a:68:9d:1a:84:0e:23:ee:38:90:a9:
99:82:0c:df:2d:5a:9a:5b:f1:b2:02:38:8a:4b:52:
ca:e5:53:1a:49:57:eb:19:96:9a:cb:82:66:92:ca:
8d:e7:10:c3:ce:3b:68:43:6a:7e:04:20:cb:ea:52:
96:c1:82:93:1b:b3:44:0a:a2:97:c6:eb:45:09:4b:
5f:b2:f8:ff:24:86:01:4f:67:8b:be:98:5d:0b:45:
13:1c:fe:0b:7c:0f:70:d3:cc:aa:8f:bc:88:ca:6d:
d1:f7:af:91:18:f5:a6:d4:3d:23:30:56:3f:96:06:
21:42:53:61:78:ce:8b:f3:1b:ce:29:d4:f8:7e:38:
9d:61:ed:65:22:3f:26:10:2c:a3:b2:07:73:64:52:
63:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C6:5A:DD:F7:E8:13:0B:7B:A7:41:0B:9F:BD:4E:C2:91:1E:65:31
X509v3 Authority Key Identifier:
keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3131392e31342e302e302f31372d3137203d3e203138303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.14.0.0/17
Signature Algorithm: sha256WithRSAEncryption
77:03:ae:81:b6:e6:b8:73:df:90:64:f6:b2:30:06:51:c2:31:
8d:88:05:b2:e1:8b:8c:d7:4a:3e:ca:f2:ca:25:43:d3:1a:d3:
0b:71:da:2a:37:78:6d:b5:f3:e7:4f:4b:30:85:49:4d:44:bf:
80:82:ab:6c:1a:84:cd:04:44:ad:ff:96:53:fe:41:dc:62:55:
6d:9a:55:1e:c8:f2:e8:92:07:bf:36:fb:74:2c:e9:d1:8d:e0:
01:9a:32:1b:76:36:d9:32:d6:d0:2d:09:53:e5:c8:06:30:62:
2f:07:72:20:39:cc:c7:5c:6a:a5:2e:7a:b7:f2:34:14:2a:c8:
13:ee:f6:fb:20:6c:e0:bc:56:b3:53:b8:8b:d2:dc:bb:05:81:
01:94:5c:61:94:6d:19:28:22:41:0f:88:61:82:a5:fa:af:d6:
5e:e1:73:8b:02:22:06:e8:13:4b:33:7e:0f:54:c0:a7:9e:bb:
52:f7:2c:69:e9:b3:2a:5e:bf:17:60:f1:8f:bd:ca:43:e1:78:
d4:d3:27:a6:a1:f3:3d:4c:34:5d:5c:dc:8f:79:3a:b8:d6:e4:
17:8a:5e:84:9c:6a:02:12:85:67:53:0a:0c:64:dd:76:8a:99:
9a:27:2e:22:7e:05:31:9b:c6:14:a5:fb:1c:49:82:58:2e:f5:
b9:20:a5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:26 2026 by rpki-client