Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e34332e302f32342d3234203d3e203338383433.roa
File: 3232332e32372e34332e302f32342d3234203d3e203338383433.roa (raw, json)
Hash identifier: d2i5s9QtLbe+t4uZPM6c/JzFuy7mZTYCXY7EKi4L1Ug=
Subject key identifier: 78:A7:5F:B5:91:C6:84:D8:BE:C0:FB:AC:1C:C9:CC:F6:04:23:0E:1F
Certificate issuer: /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Certificate serial: 0C4CFB590052E6E2A15F32A609B3DA1B608075A1
Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e34332e302f32342d3234203d3e203338383433.roa
Signing time: Mon 11 May 2026 17:08:26 +0000
ROA not before: Mon 11 May 2026 17:03:26 +0000
ROA not after: Mon 10 May 2027 17:08:26 +0000
asID: 38843
IP address blocks: 223.27.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:4c:fb:59:00:52:e6:e2:a1:5f:32:a6:09:b3:da:1b:60:80:75:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Validity
Not Before: May 11 17:03:26 2026 GMT
Not After : May 10 17:08:26 2027 GMT
Subject: CN=78A75FB591C684D8BEC0FBAC1CC9CCF604230E1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:93:fb:4f:92:4c:a7:68:11:b9:d7:cb:12:
d9:30:d7:75:f9:b8:b3:d9:6c:9c:ea:be:90:b4:0d:
16:c4:0c:89:5c:aa:1e:4a:f8:31:d9:67:10:9b:1f:
1b:6e:d9:ae:9e:a3:d3:44:4f:a6:6f:d1:94:43:ed:
a9:a4:d5:05:82:2b:88:4c:d5:a1:36:80:3e:bc:f9:
4e:b1:eb:0b:23:dd:2c:fb:40:0a:fa:0f:6b:92:45:
1b:09:8a:1b:d8:ee:c9:ac:bc:52:09:e4:0b:d2:38:
ae:21:d7:a3:66:56:5b:e3:d5:51:0f:14:15:2c:43:
dc:eb:08:09:57:87:99:11:22:29:9c:ae:8b:00:2c:
87:ba:be:06:3f:ff:3d:3d:28:50:00:36:aa:08:32:
5b:a6:55:ef:10:5e:09:96:28:dc:2e:d9:c0:6c:cf:
6f:3a:3e:e6:88:6b:a0:07:9f:5e:bf:b4:ec:09:9f:
55:c5:a7:e2:72:48:ba:d6:ad:77:fe:a7:a1:52:c1:
4c:37:cb:97:4c:de:e1:7f:2b:7c:63:6b:95:ee:24:
a9:9b:1e:9e:bd:25:e1:39:5c:fc:e5:49:d1:8a:01:
1a:82:8f:0b:c1:8d:5c:aa:d0:e9:7d:52:cf:14:b1:
8d:2e:09:84:77:a5:6a:33:8a:a8:1b:98:42:ad:6c:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A7:5F:B5:91:C6:84:D8:BE:C0:FB:AC:1C:C9:CC:F6:04:23:0E:1F
X509v3 Authority Key Identifier:
keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e34332e302f32342d3234203d3e203338383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.27.43.0/24
Signature Algorithm: sha256WithRSAEncryption
69:89:84:1b:87:40:90:0b:03:9b:d4:40:16:70:2d:6c:a9:0f:
a7:3a:bf:4a:17:9f:71:05:a3:b6:d0:e1:65:41:a8:f2:f9:69:
13:ad:80:80:f4:bc:09:cf:b7:76:9a:f3:7c:d7:94:60:6c:00:
63:93:24:14:37:ca:91:66:c3:d9:a7:1b:fb:d7:9d:50:c2:38:
0e:9b:3a:b2:6b:4f:21:8c:d5:4c:5a:6f:0b:d8:80:c7:55:fd:
2b:0e:b6:2a:22:bf:86:44:28:cb:36:1d:13:40:6b:4c:fa:44:
8c:6d:98:9a:7c:66:c8:1f:df:43:18:eb:ab:81:ad:5a:1f:51:
73:db:1c:39:ac:ec:1b:19:2b:ac:bc:3a:12:87:42:3f:d6:ef:
dd:2e:20:bd:9f:78:91:75:79:c7:57:2c:de:2e:17:b5:f3:f9:
0c:5d:ea:b2:5c:e1:c0:68:e0:f0:15:90:6d:f7:0f:23:78:1f:
2b:f3:72:46:a4:4e:bd:fe:95:1c:cb:83:65:a0:d6:30:56:3d:
6e:61:f0:6f:19:0b:65:5c:2f:c2:9f:43:00:e6:b4:03:f5:1e:
d4:cc:4f:ef:aa:c0:e1:54:b5:b4:d8:6f:6d:ae:21:57:5e:9c:
dc:88:67:da:79:3e:b9:ac:00:c6:5d:5e:d2:4e:4d:f5:c4:e8:
b9:ee:e2:c2
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUDEz7WQBS5uKhXzKmCbPaG2CAdaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVFQzRGQTFBOEY4QUNENDA4MzNCRDJDM0VFREIyQjcw
ODJDMTc5MTAeFw0yNjA1MTExNzAzMjZaFw0yNzA1MTAxNzA4MjZaMDMxMTAvBgNV
BAMTKDc4QTc1RkI1OTFDNjg0RDhCRUMwRkJBQzFDQzlDQ0Y2MDQyMzBFMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+JP7T5JMp2gRudfLEtkw13X5
uLPZbJzqvpC0DRbEDIlcqh5K+DHZZxCbHxtu2a6eo9NET6Zv0ZRD7amk1QWCK4hM
1aE2gD68+U6x6wsj3Sz7QAr6D2uSRRsJihvY7smsvFIJ5AvSOK4h16NmVlvj1VEP
FBUsQ9zrCAlXh5kRIimcrosALIe6vgY//z09KFAANqoIMlumVe8QXgmWKNwu2cBs
z286PuaIa6AHn16/tOwJn1XFp+JySLrWrXf+p6FSwUw3y5dM3uF/K3xja5XuJKmb
Hp69JeE5XPzlSdGKARqCjwvBjVyq0Ol9Us8UsY0uCYR3pWoziqgbmEKtbP0dAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUeKdftZHGhNi+wPusHMnM9gQjDh8wHwYDVR0j
BBgwFoAUHuxPoaj4rNQIM70sPu2ytwgsF5EwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUFVNTy8w
LzFFRUM0RkExQThGOEFDRDQwODMzQkQyQzNFRURCMkI3MDgyQzE3OTEuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvMUVFQzRGQTFBOEY4QUNENDA4MzNCRDJDM0VFREIy
QjcwODJDMTc5MS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1BVTU8vMC8zMjMyMzMyZTMyMzcyZTM0
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM4MzgzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
3xsrMA0GCSqGSIb3DQEBCwUAA4IBAQBpiYQbh0CQCwOb1EAWcC1sqQ+nOr9KF59x
BaO20OFlQajy+WkTrYCA9LwJz7d2mvN815RgbABjkyQUN8qRZsPZpxv7151QwjgO
mzqya08hjNVMWm8L2IDHVf0rDrYqIr+GRCjLNh0TQGtM+kSMbZiafGbIH99DGOur
ga1aH1Fz2xw5rOwbGSusvDoSh0I/1u/dLiC9n3iRdXnHVyzeLhe18/kMXeqyXOHA
aODwFZBt9w8jeB8r83JGpE69/pUcy4NloNYwVj1uYfBvGQtlXC/Cn0MA5rQD9R7U
zE/vqsDhVLW02G9triFXXpzciGfaeT65rADGXV7STk31xOi57uLC
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:37 2026 by rpki-client