Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NSSCYBER/0/3130332e3135382e37382e302f32332d3234203d3e203633383938.roa
File: 3130332e3135382e37382e302f32332d3234203d3e203633383938.roa (raw, json)
Hash identifier: Q+s1vVVcnXTpW/r/MnON9SbkY3njdmQ1XoB50+rVZow=
Subject key identifier: B3:C9:4E:3A:45:CB:91:8C:BD:08:29:F1:E4:43:2D:2F:A5:57:0D:BC
Certificate issuer: /CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230
Certificate serial: 60FE34BD851C2DAAAB936246647DCED98B080CD0
Authority key identifier: 7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/3130332e3135382e37382e302f32332d3234203d3e203633383938.roa
Signing time: Mon 11 May 2026 17:36:52 +0000
ROA not before: Mon 11 May 2026 17:31:52 +0000
ROA not after: Mon 10 May 2027 17:36:52 +0000
asID: 63898
IP address blocks: 103.158.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:fe:34:bd:85:1c:2d:aa:ab:93:62:46:64:7d:ce:d9:8b:08:0c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230
Validity
Not Before: May 11 17:31:52 2026 GMT
Not After : May 10 17:36:52 2027 GMT
Subject: CN=B3C94E3A45CB918CBD0829F1E4432D2FA5570DBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:ae:24:3d:b8:16:56:fd:ed:26:53:e6:0c:
9f:40:c7:6a:4e:a8:ad:6a:ef:4d:77:b1:55:b1:41:
66:3d:e4:50:07:a0:36:76:ad:6e:03:c3:7c:a5:2d:
d2:9e:29:85:a7:ba:5c:4f:45:98:be:cb:05:9e:80:
82:89:2d:d9:b5:06:ed:0a:f2:7d:32:21:d1:4e:8b:
38:05:0e:d5:45:03:61:02:82:77:c7:1e:a6:8b:29:
b2:17:9e:c0:fd:e8:f2:8f:00:74:83:eb:5f:0d:16:
fd:e4:d8:6a:21:5d:bb:37:1a:3c:6d:47:78:93:cf:
2a:65:04:32:ea:72:1b:10:94:f6:1f:bd:5d:e9:1b:
0f:37:57:bf:a9:bc:26:32:e8:e9:02:ad:19:f1:be:
3a:dd:48:74:67:5f:a0:ef:76:80:b5:bd:31:42:c2:
70:67:b2:77:db:49:c6:ad:ad:be:4c:d8:0d:ad:50:
a7:2e:6c:a2:46:ff:52:e3:c4:b5:3b:12:4a:f2:bf:
4b:a9:17:9c:aa:f4:21:2e:8b:a3:4e:21:da:c9:bf:
5b:22:84:c2:d9:00:6f:86:13:87:48:f4:f5:b4:9e:
b1:0b:24:0e:83:d1:66:32:8f:10:cc:ec:e1:71:11:
c5:54:05:54:dd:0e:6b:6f:82:8a:e8:46:0c:c9:ed:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C9:4E:3A:45:CB:91:8C:BD:08:29:F1:E4:43:2D:2F:A5:57:0D:BC
X509v3 Authority Key Identifier:
keyid:7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/3130332e3135382e37382e302f32332d3234203d3e203633383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.78.0/23
Signature Algorithm: sha256WithRSAEncryption
17:08:a0:1c:13:fa:97:47:67:45:96:3a:6a:53:35:12:05:e7:
d7:fc:b7:da:07:37:9a:7a:16:cd:c7:60:2a:ad:9b:c8:80:09:
38:eb:64:ba:c4:e8:37:e9:9a:a5:d2:7e:51:f9:aa:4e:92:61:
be:76:9f:25:b1:0f:24:de:56:cb:85:43:45:fb:f5:8d:d7:aa:
3a:3f:56:90:3e:89:0f:ac:37:f9:16:b3:0e:2f:f5:f5:96:71:
94:d2:e7:e7:ff:5c:2d:cc:6e:72:2d:e1:01:8f:bd:8c:35:c0:
ac:c2:2c:58:5c:3d:ef:12:9e:b5:52:71:d2:3b:90:c8:2a:b0:
01:2f:82:83:cb:c0:d8:2f:af:70:67:f1:b4:dd:14:06:06:5c:
0f:74:3c:16:15:fd:81:2a:c0:ee:cf:9f:39:b6:10:64:e2:2d:
86:61:3a:01:57:6e:01:b0:e6:87:53:0d:13:86:eb:c2:53:d5:
cc:0a:06:b2:52:1b:cc:43:f5:95:b9:23:96:3e:98:2c:de:2f:
cb:dc:53:9d:69:9e:e9:53:af:fe:f8:a7:88:71:41:94:63:f1:
e1:82:bb:a5:48:b4:08:88:7c:9a:0b:73:f9:9e:3a:f1:6c:26:
3b:09:d4:39:04:cd:09:3e:96:8d:b3:8e:06:3e:65:0c:d7:b9:
f7:00:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:02 2026 by rpki-client