Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NARL/0/3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa
File: 3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa (raw, json)
Hash identifier: gNPPk70chubQg8rvqCFhjNMJr/GwTZPy8GKS/JxLGtk=
Subject key identifier: 3F:AD:D6:EA:6C:0D:71:7C:72:61:67:4A:D6:1F:E8:EE:9B:C4:E9:68
Certificate issuer: /CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
Certificate serial: 753D00982456BE71BF8CA4273E387E5DBDE556C9
Authority key identifier: 9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NARL/0/3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa
Signing time: Mon 11 May 2026 16:50:19 +0000
ROA not before: Mon 11 May 2026 16:45:19 +0000
ROA not after: Mon 10 May 2027 16:50:19 +0000
asID: 18426
IP address blocks: 203.145.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:3d:00:98:24:56:be:71:bf:8c:a4:27:3e:38:7e:5d:bd:e5:56:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
Validity
Not Before: May 11 16:45:19 2026 GMT
Not After : May 10 16:50:19 2027 GMT
Subject: CN=3FADD6EA6C0D717C7261674AD61FE8EE9BC4E968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a7:bf:57:a2:1c:fe:1d:5a:eb:8a:ca:1f:f9:
fd:bb:52:a5:6f:f2:84:47:d3:cc:96:d8:76:cf:23:
9c:d9:38:32:fb:69:12:c8:39:22:d9:6e:78:2e:11:
0b:69:ee:da:c6:f6:3f:dc:cb:5e:71:c5:c8:93:22:
6b:eb:0e:da:44:32:8c:1b:56:d1:bc:cd:e5:e2:5a:
42:64:cf:34:70:c8:48:4f:5d:65:20:c9:58:99:95:
e2:a3:e7:fd:e6:55:40:5c:1b:da:db:83:75:4e:7e:
58:ae:8f:ef:f4:6d:64:a9:b1:2a:bd:d8:5d:48:5d:
bc:52:23:c8:f4:0e:0e:46:8e:10:4f:93:35:a5:22:
27:cc:49:bd:33:da:6a:db:62:bb:58:65:23:f0:b0:
6a:31:a1:e9:44:74:dd:d6:93:33:a3:e0:a8:d3:94:
3d:6b:3f:21:eb:f7:71:de:2d:cf:52:e5:33:9a:46:
38:0c:2a:ae:d2:7c:e4:3e:87:e6:cb:bc:0a:b3:a8:
7a:7e:a0:27:63:c1:1c:7d:14:9e:ff:76:8a:29:1e:
ed:5e:65:bd:94:03:d4:e2:7d:73:15:f7:8c:b9:ed:
4b:5e:8e:0c:f3:bc:05:4b:49:50:ab:78:3c:be:59:
5b:ab:08:ce:42:b1:a4:19:00:f6:37:57:45:ea:3f:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AD:D6:EA:6C:0D:71:7C:72:61:67:4A:D6:1F:E8:EE:9B:C4:E9:68
X509v3 Authority Key Identifier:
keyid:9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.145.192.0/21
Signature Algorithm: sha256WithRSAEncryption
ce:4b:6f:b9:4e:57:e1:eb:a0:ea:f1:2a:11:98:d9:4e:d1:56:
59:e0:4d:05:da:b3:15:79:b3:ba:63:0c:b5:fa:f0:f9:44:2d:
c7:e3:e3:7a:f9:6c:cc:a6:ff:8b:b4:a3:a9:b3:0b:dc:5b:23:
91:ea:5b:b7:aa:0e:f5:9b:d0:80:4c:60:c3:7c:c3:53:38:87:
a6:e5:aa:d3:0e:fc:7c:b2:91:1f:29:6e:15:9b:7a:39:99:4f:
1d:97:aa:ec:5e:c3:6b:59:cd:61:8d:54:32:f5:b0:48:18:14:
dc:22:03:3e:e2:25:05:ca:c4:5a:17:3a:3c:99:eb:b1:af:b5:
29:0a:2e:42:fe:df:ab:63:46:32:df:26:4f:b9:cd:8d:a6:d4:
d3:74:43:22:19:98:cf:7a:7f:9f:ec:68:93:3d:c2:76:c9:b4:
5c:5c:4c:54:df:87:9c:6c:89:39:6c:7e:cf:c0:53:e5:d5:c3:
5b:55:68:22:22:3d:0f:96:89:f2:84:7c:4a:d6:4f:65:05:15:
03:b5:17:aa:4d:f2:9a:34:ab:66:70:9e:6d:68:6b:f7:ef:b8:
ec:f0:d2:e5:b5:bf:ac:9d:79:52:9a:56:8f:5b:ff:e0:44:89:
98:98:7c:ba:25:f3:12:21:95:a7:fb:48:0c:77:60:91:78:3b:
66:53:1e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:07 2026 by rpki-client