Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3132332e3235322e302e302f31372d3234203d3e203138303432.roa
File: 3132332e3235322e302e302f31372d3234203d3e203138303432.roa (raw, json)
Hash identifier: eh2WLuFL8JfqsgGPL8GnRsMff9j5TtrpXmSa0C/O+SY=
Subject key identifier: E6:2B:4E:77:A1:A7:D1:9A:80:01:F2:32:39:00:B3:AD:54:B0:B3:92
Certificate issuer: /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Certificate serial: 0F2F352617FAFCDDEFBF9BAC22861E56D9EF75D1
Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KE-ING/0/3132332e3235322e302e302f31372d3234203d3e203138303432.roa
Signing time: Mon 11 May 2026 17:09:16 +0000
ROA not before: Mon 11 May 2026 17:04:16 +0000
ROA not after: Mon 10 May 2027 17:09:16 +0000
asID: 18042
IP address blocks: 123.252.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:2f:35:26:17:fa:fc:dd:ef:bf:9b:ac:22:86:1e:56:d9:ef:75:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Validity
Not Before: May 11 17:04:16 2026 GMT
Not After : May 10 17:09:16 2027 GMT
Subject: CN=E62B4E77A1A7D19A8001F2323900B3AD54B0B392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:f1:52:d5:18:06:8f:3d:ad:40:14:7e:e3:
ba:82:46:8d:94:eb:b7:f3:c7:6f:49:48:74:12:9a:
72:1e:66:9d:0f:fe:71:b0:da:45:a9:da:4d:df:0c:
28:ca:d2:11:2f:2a:42:5d:d5:93:f2:00:cd:59:f0:
c2:c2:99:27:29:63:df:7e:82:b3:d7:7c:26:f4:46:
1b:aa:0d:b3:66:f5:38:07:a2:77:ab:84:0b:35:13:
6e:b6:f0:b3:4a:97:f1:37:df:73:4e:cf:88:1f:75:
91:ec:6d:55:8d:6f:3f:3f:e8:2d:27:ee:2c:91:a7:
6d:01:fd:01:d7:f9:4b:71:ee:8f:3e:4b:0e:34:9c:
77:c3:39:94:0e:f2:c2:85:6e:c6:42:cc:37:3e:bd:
94:be:9c:bb:3d:b0:c9:ae:3f:5b:10:12:bc:0e:f3:
41:b6:77:5b:db:7e:7e:56:2c:35:c0:27:a0:1b:2a:
f0:33:0c:49:4a:1e:96:bb:6d:b5:a5:1e:f2:a2:8a:
a8:df:ff:f3:5c:54:93:f0:93:5f:f6:66:5a:5d:03:
12:3f:79:da:c0:a7:1a:cc:5e:06:29:21:d7:9c:20:
7e:82:9b:86:ca:a4:5f:75:bb:66:c3:d5:51:8e:ae:
a7:69:19:b3:00:ed:c8:9e:ce:9c:10:8b:6f:14:ce:
0f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2B:4E:77:A1:A7:D1:9A:80:01:F2:32:39:00:B3:AD:54:B0:B3:92
X509v3 Authority Key Identifier:
keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3132332e3235322e302e302f31372d3234203d3e203138303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.252.0.0/17
Signature Algorithm: sha256WithRSAEncryption
17:b2:dc:17:eb:09:e2:40:53:75:89:8d:81:36:20:e2:06:70:
3a:41:86:98:81:ea:ea:d8:35:56:c4:7e:df:39:13:59:a8:8c:
9a:4f:b9:c0:5f:49:23:1e:eb:3c:47:be:f7:07:b1:f6:e1:e0:
20:6c:1b:fb:83:38:b3:d6:83:7f:83:c9:c5:16:59:3a:cb:27:
db:24:56:43:eb:36:55:eb:e7:03:29:16:1d:86:b2:72:ea:5f:
94:0d:90:bf:e9:61:35:51:c6:2e:9b:4b:7c:8c:c7:08:cc:87:
99:48:bc:94:8e:2f:18:f7:44:80:f6:ef:44:de:34:b8:f4:a1:
b4:d0:73:8b:d3:69:c1:5e:1c:f1:07:04:00:e1:26:45:b9:90:
d2:36:88:b2:36:22:59:8b:3c:b4:4e:0d:86:44:3c:c0:5a:17:
93:80:01:e2:d8:9f:90:1e:cc:99:90:fe:48:ba:0e:aa:90:34:
73:33:f4:bd:5c:26:c2:7d:06:a0:35:2e:ca:0e:2f:24:14:7f:
e7:b2:05:a8:b1:14:97:72:14:88:63:c2:5d:74:93:c1:6c:6d:
63:c0:2d:4b:18:c8:77:dd:14:be:10:98:ba:09:6e:8a:17:a6:
2b:56:bb:a4:84:be:5e:d8:6c:ba:a6:09:81:48:eb:b2:d1:93:
dd:7a:82:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:46 2026 by rpki-client