Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NSS/0/3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa
File: 3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa (raw, json)
Hash identifier: 7ZYOaD4BiHJMT5uylYeAq6oBkT9jOAeVwRTnZzrlVB0=
Subject key identifier: 04:49:4A:7A:B3:89:B0:F5:36:98:1B:34:01:9F:A5:08:AA:5C:C7:0F
Certificate issuer: /CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E
Certificate serial: 2E055A1B9843DA68F8C261E9A25B530FEFC8A450
Authority key identifier: 9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NSS/0/3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa
Signing time: Mon 11 May 2026 17:36:53 +0000
ROA not before: Mon 11 May 2026 17:31:53 +0000
ROA not after: Mon 10 May 2027 17:36:53 +0000
asID: 131626
IP address blocks: 103.118.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:05:5a:1b:98:43:da:68:f8:c2:61:e9:a2:5b:53:0f:ef:c8:a4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E
Validity
Not Before: May 11 17:31:53 2026 GMT
Not After : May 10 17:36:53 2027 GMT
Subject: CN=04494A7AB389B0F536981B34019FA508AA5CC70F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:51:bc:d7:20:97:b5:7a:ac:89:db:a7:f8:
09:7a:0c:ed:7e:1e:28:69:6e:a6:58:50:d6:99:c2:
33:f2:e5:2f:3b:57:23:b1:26:d7:fb:fd:54:0c:d1:
0c:5c:57:fb:9b:06:9c:ee:d7:54:69:fe:00:40:a8:
8f:0b:1f:d8:91:6f:4c:24:a0:8d:c9:3f:9e:9f:cc:
b0:64:67:ea:c2:b8:ea:1a:3e:1e:82:f1:ec:77:3d:
b2:45:78:fb:15:6b:90:19:d2:87:52:a4:14:b6:7b:
5b:ca:23:f0:ad:5d:4a:8c:a9:26:31:41:de:aa:3a:
01:8a:ce:24:38:e5:d6:5f:0e:78:f6:d1:c9:a6:a7:
cf:e8:28:e8:fe:d2:0d:1d:1e:29:9b:8c:47:f0:14:
63:d1:2c:3d:11:17:6a:61:65:da:2b:83:d6:68:88:
9e:58:59:dc:b7:ae:e8:30:57:a1:5a:b7:13:d4:07:
10:fd:49:d1:5a:26:a5:72:20:88:20:21:f8:ca:1a:
d6:40:f3:ed:82:59:04:77:32:96:3f:28:18:9c:f4:
b6:de:39:98:7a:ae:37:6b:68:55:df:27:25:dc:cb:
68:f4:97:a4:76:8d:3a:9d:58:e4:73:df:40:47:d0:
5b:fd:30:64:2a:d8:08:3c:4f:1b:85:cd:8d:3f:b6:
9c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:49:4A:7A:B3:89:B0:F5:36:98:1B:34:01:9F:A5:08:AA:5C:C7:0F
X509v3 Authority Key Identifier:
keyid:9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSS/0/3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.24.0/22
Signature Algorithm: sha256WithRSAEncryption
86:b7:db:a5:90:94:eb:51:34:4b:b9:a0:9a:7d:9c:19:1e:d1:
67:bd:c8:8f:ba:c8:1c:aa:d4:64:1a:ab:e2:c5:d3:c6:0e:f5:
87:2f:ad:f3:23:5d:9e:9c:47:28:40:95:cf:54:5a:39:16:eb:
a0:a7:f2:ec:b4:35:85:ce:b9:43:fa:00:0e:be:00:bb:72:7a:
6c:85:4a:bb:e3:4c:3b:5f:2f:2a:37:a5:d8:a4:33:24:66:9d:
5f:0a:6d:36:83:5d:5d:40:02:75:f2:ed:94:44:92:01:c9:03:
44:a8:6d:90:52:db:5b:ee:13:9a:ad:bc:88:f6:07:fe:6b:61:
32:2f:74:bc:78:ae:34:bb:a2:56:ef:69:4c:c8:fe:41:fc:65:
66:bc:b9:dc:60:0f:2e:f6:8a:cf:2f:91:79:34:02:c4:6d:f6:
c2:d3:7d:d8:e6:0c:2e:79:ad:04:0c:96:c0:86:31:d2:60:fc:
4a:a4:b1:29:a9:76:ee:8b:64:16:4f:28:ae:41:76:1c:6e:cf:
94:c2:4b:42:7e:5c:c7:c7:f8:04:ec:fc:0a:08:a1:b8:74:99:
bf:f3:3a:1d:0e:57:b3:2d:9c:c8:13:a4:87:f9:90:76:01:26:
c1:1b:67:63:e8:a1:47:84:ec:ba:27:36:13:a9:a4:48:ae:df:
51:3c:b1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:06 2026 by rpki-client