Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3230332e3131382e3232342e302f32302d3230203d3e203138303432.roa
File: 3230332e3131382e3232342e302f32302d3230203d3e203138303432.roa (raw, json)
Hash identifier: 2exWg2jS2ItjCPg0xipUoannDwWvVERhxvaeyMJgPbs=
Subject key identifier: 9D:B4:CB:49:03:D5:F8:AF:B4:64:52:44:10:2C:F4:3A:CF:98:CD:08
Certificate issuer: /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Certificate serial: 7C86698FFFD9D212FC4F88375D5EED7E005AF03F
Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KE-ING/0/3230332e3131382e3232342e302f32302d3230203d3e203138303432.roa
Signing time: Mon 11 May 2026 17:40:05 +0000
ROA not before: Mon 11 May 2026 17:35:05 +0000
ROA not after: Mon 10 May 2027 17:40:05 +0000
asID: 18042
IP address blocks: 203.118.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:86:69:8f:ff:d9:d2:12:fc:4f:88:37:5d:5e:ed:7e:00:5a:f0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Validity
Not Before: May 11 17:35:05 2026 GMT
Not After : May 10 17:40:05 2027 GMT
Subject: CN=9DB4CB4903D5F8AFB4645244102CF43ACF98CD08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:75:cc:62:fb:69:35:63:12:28:51:8b:f2:
42:3f:62:cf:b5:a9:48:11:80:1b:ab:c5:0c:68:1a:
66:12:8a:d2:ef:2b:1a:6f:6f:b0:fd:fc:7f:b2:23:
b4:59:63:9e:fc:2c:ce:fd:5e:fa:f6:ff:47:8e:af:
14:10:b1:4d:3c:a4:47:5d:e2:97:57:f1:d4:b0:33:
22:40:7e:92:81:ef:ee:e6:57:d0:99:00:02:1b:1e:
5a:ae:e6:fd:39:ea:08:21:d0:ec:5b:5d:25:44:44:
2d:80:57:c0:8d:39:c4:92:a0:b7:97:b1:f5:2e:65:
6b:90:3a:8c:9d:17:f8:fd:26:24:60:bd:f7:fa:d8:
3d:9f:e7:df:f6:01:52:bb:e6:83:6e:35:e9:4c:4e:
e1:4c:03:c6:3c:86:86:89:de:cc:54:c9:c7:85:0e:
2b:1a:62:4b:9b:33:c1:26:34:a9:4f:37:07:42:66:
f2:e8:23:be:ab:32:0b:6b:9f:5f:18:e0:06:4e:d1:
ec:51:b9:c8:e2:1f:b1:48:aa:1f:8d:57:2b:92:9c:
56:70:1f:8b:1b:84:bb:de:09:97:0c:34:bf:2b:ea:
74:81:51:c2:49:76:80:a8:8d:b0:7c:14:6d:0e:e6:
fb:65:59:45:96:74:6b:bd:5c:7b:de:af:e3:d1:8d:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B4:CB:49:03:D5:F8:AF:B4:64:52:44:10:2C:F4:3A:CF:98:CD:08
X509v3 Authority Key Identifier:
keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3230332e3131382e3232342e302f32302d3230203d3e203138303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.118.224.0/20
Signature Algorithm: sha256WithRSAEncryption
07:c9:38:34:e6:dc:8c:71:a6:8a:53:7d:5c:f7:b9:d3:82:d2:
4d:19:7c:08:fe:77:80:d4:2b:38:b6:28:6f:29:23:df:85:a4:
ad:9e:ce:aa:82:16:7e:35:9f:fb:18:e2:19:02:b3:df:96:ca:
1f:5e:7c:42:01:fd:69:b3:d0:55:2a:20:d0:d6:89:58:f1:56:
82:e5:24:3b:ed:00:b7:f5:ae:fe:89:9c:25:48:52:4c:63:be:
84:3b:9b:f3:59:f0:b7:8f:0b:c4:0f:25:8b:06:84:b9:45:1f:
90:00:dc:77:bc:d2:1d:06:b1:4b:dc:da:79:27:49:d8:d7:3b:
90:27:ba:72:5c:56:a1:bf:37:d0:92:0b:ab:26:3a:55:aa:9a:
d1:b6:03:c4:48:eb:66:2e:c0:f0:71:95:31:a6:e6:e8:4a:c5:
82:43:e9:2e:d0:c3:2c:99:8a:10:eb:56:d7:9a:9c:84:ae:02:
2e:ee:9b:6f:ee:6e:f7:f4:04:bf:65:e4:ff:a5:1a:25:45:41:
b9:3e:42:d9:d2:ba:d3:2d:cd:7f:a3:2f:a9:d5:b7:ac:ea:6f:
ae:35:71:76:89:76:40:3c:57:db:c1:89:b3:2d:ea:30:a8:d5:
16:4b:ea:bf:c5:a3:09:23:31:b8:22:64:04:51:cc:c3:8a:87:
94:1b:2b:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:34:04 2026 by rpki-client