Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3132392e302f32342d3234203d3e203338383433.roa
File: 3132342e3135302e3132392e302f32342d3234203d3e203338383433.roa (raw, json)
Hash identifier: 9bn1ekea7T8R54cjT8NcvFUCoYBwx8++6VqIH9OQqxk=
Subject key identifier: C1:60:F0:B3:48:FA:F2:0F:3A:76:EA:65:A8:FE:DC:7A:4A:BA:91:C2
Certificate issuer: /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Certificate serial: 5212C592F07E06E13E98F96A9697D0F0BC38212F
Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3132392e302f32342d3234203d3e203338383433.roa
Signing time: Mon 11 May 2026 17:08:18 +0000
ROA not before: Mon 11 May 2026 17:03:18 +0000
ROA not after: Mon 10 May 2027 17:08:18 +0000
asID: 38843
IP address blocks: 124.150.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:12:c5:92:f0:7e:06:e1:3e:98:f9:6a:96:97:d0:f0:bc:38:21:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Validity
Not Before: May 11 17:03:18 2026 GMT
Not After : May 10 17:08:18 2027 GMT
Subject: CN=C160F0B348FAF20F3A76EA65A8FEDC7A4ABA91C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:4f:2c:3d:d6:0f:60:18:cd:c1:66:48:64:
dd:a7:b9:1b:36:ed:5e:1c:2a:b6:bb:db:5b:12:32:
5d:fe:c7:61:d1:bd:6c:13:a1:e0:e7:24:e8:c9:48:
e6:ba:1b:2d:76:64:3f:eb:d1:cf:46:e5:45:f2:23:
ef:7c:4f:3d:9f:a4:99:96:8e:25:a3:78:2d:86:ef:
06:be:23:71:9c:80:53:fc:03:a5:3c:0c:fb:9d:48:
a5:ef:5e:5d:49:ff:e9:f3:44:29:0c:19:e2:e5:fc:
be:59:1b:ec:95:68:b4:a1:80:7c:f7:cf:7f:46:9b:
da:61:5d:c5:fa:78:d5:fc:2e:19:2e:78:ab:25:cc:
3f:17:22:41:0c:f5:90:96:d7:60:e4:e1:f3:32:2c:
1e:76:9e:87:86:a9:bf:04:7e:30:5e:f1:58:43:62:
51:7d:01:ea:9a:69:c8:1b:13:5e:4f:c3:64:50:98:
29:6d:4b:a4:ba:e4:db:17:87:9f:68:e5:c4:e8:5b:
a4:ca:21:b4:7b:4b:06:f9:2e:50:8e:d8:37:6a:76:
ed:48:ea:66:76:52:36:d1:2f:71:22:e2:4a:83:6e:
7a:16:b8:77:cf:4d:74:80:34:b6:50:14:5c:2d:8e:
3c:1e:06:6d:d6:63:e5:42:db:d4:40:09:ca:01:c2:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:60:F0:B3:48:FA:F2:0F:3A:76:EA:65:A8:FE:DC:7A:4A:BA:91:C2
X509v3 Authority Key Identifier:
keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3132392e302f32342d3234203d3e203338383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.150.129.0/24
Signature Algorithm: sha256WithRSAEncryption
54:77:85:fc:9e:29:8b:29:39:a0:85:68:6b:e4:34:3c:42:f1:
2a:8f:a2:82:9d:79:09:bf:bd:9c:a8:61:f3:56:a8:2a:07:aa:
69:70:63:c8:69:87:5c:48:f6:9f:43:a5:e5:08:50:95:20:bb:
72:94:b9:3b:a6:b2:48:15:ca:05:10:55:06:af:e4:bc:48:5a:
5c:2c:7d:97:aa:b6:5e:04:7e:97:b5:b2:b2:15:8a:3a:e9:d5:
f6:e4:d3:52:b5:a0:25:fc:14:7e:13:58:92:4e:0c:4a:f8:f8:
a4:a1:8b:53:b7:e6:d0:e5:3b:65:b0:27:08:95:fb:c3:c4:d7:
08:9a:e3:b3:31:3f:14:24:7c:64:f1:f7:e8:53:ba:2d:89:1b:
2f:1c:b3:f9:b1:67:c7:38:77:d0:36:e4:3f:d5:2f:bf:f2:c1:
6b:a4:9f:5f:73:19:d1:a9:c4:20:a2:db:ad:f6:64:92:d9:44:
ee:86:56:c3:11:d8:8c:bc:99:c6:8d:b0:09:e9:46:f4:74:31:
47:b2:88:46:f1:80:e6:4a:5b:2f:49:d3:8d:de:f6:a9:8f:c1:
de:d9:15:8d:8b:4e:fc:d9:cf:be:98:35:db:89:ff:01:78:82:
5e:1b:52:88:01:ca:c1:66:1c:da:56:0f:25:b8:07:ad:d6:92:
8b:cb:53:de
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIUUhLFkvB+BuE+mPlqlpfQ8Lw4IS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVFQzRGQTFBOEY4QUNENDA4MzNCRDJDM0VFREIyQjcw
ODJDMTc5MTAeFw0yNjA1MTExNzAzMThaFw0yNzA1MTAxNzA4MThaMDMxMTAvBgNV
BAMTKEMxNjBGMEIzNDhGQUYyMEYzQTc2RUE2NUE4RkVEQzdBNEFCQTkxQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXZE8sPdYPYBjNwWZIZN2nuRs2
7V4cKra721sSMl3+x2HRvWwToeDnJOjJSOa6Gy12ZD/r0c9G5UXyI+98Tz2fpJmW
jiWjeC2G7wa+I3GcgFP8A6U8DPudSKXvXl1J/+nzRCkMGeLl/L5ZG+yVaLShgHz3
z39Gm9phXcX6eNX8LhkueKslzD8XIkEM9ZCW12Dk4fMyLB52noeGqb8EfjBe8VhD
YlF9AeqaacgbE15Pw2RQmCltS6S65NsXh59o5cToW6TKIbR7Swb5LlCO2Ddqdu1I
6mZ2UjbRL3Ei4kqDbnoWuHfPTXSANLZQFFwtjjweBm3WY+VC29RACcoBwvHNAgMB
AAGjggHhMIIB3TAdBgNVHQ4EFgQUwWDws0j68g86duplqP7cekq6kcIwHwYDVR0j
BBgwFoAUHuxPoaj4rNQIM70sPu2ytwgsF5EwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUFVNTy8w
LzFFRUM0RkExQThGOEFDRDQwODMzQkQyQzNFRURCMkI3MDgyQzE3OTEuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvMUVFQzRGQTFBOEY4QUNENDA4MzNCRDJDM0VFREIy
QjcwODJDMTc5MS5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1BVTU8vMC8zMTMyMzQyZTMxMzUzMDJl
MzEzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODM4MzQzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHyWgTANBgkqhkiG9w0BAQsFAAOCAQEAVHeF/J4piyk5oIVoa+Q0PELxKo+i
gp15Cb+9nKhh81aoKgeqaXBjyGmHXEj2n0Ol5QhQlSC7cpS5O6aySBXKBRBVBq/k
vEhaXCx9l6q2XgR+l7WyshWKOunV9uTTUrWgJfwUfhNYkk4MSvj4pKGLU7fm0OU7
ZbAnCJX7w8TXCJrjszE/FCR8ZPH36FO6LYkbLxyz+bFnxzh30DbkP9Uvv/LBa6Sf
X3MZ0anEIKLbrfZkktlE7oZWwxHYjLyZxo2wCelG9HQxR7KIRvGA5kpbL0nTjd72
qY/B3tkVjYtO/NnPvpg124n/AXiCXhtSiAHKwWYc2lYPJbgHrdaSi8tT3g==
-----END CERTIFICATE-----
Generated at Wed May 13 02:40:44 2026 by rpki-client