Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e34342e302f32322d3234203d3e203338383433.roa
File: 3232332e32372e34342e302f32322d3234203d3e203338383433.roa (raw, json)
Hash identifier: XYJTZ3u5vWR6T5KTk/fuIKLdgS4Js+5kBMHIGoMaO6E=
Subject key identifier: 98:BE:BD:91:64:9E:80:81:B1:F4:74:09:B0:08:98:DC:61:C5:63:4F
Certificate issuer: /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Certificate serial: 5248C9F352A8F95C5EE7760514E2C8397E4B8058
Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e34342e302f32322d3234203d3e203338383433.roa
Signing time: Mon 11 May 2026 17:11:19 +0000
ROA not before: Mon 11 May 2026 17:06:19 +0000
ROA not after: Mon 10 May 2027 17:11:19 +0000
asID: 38843
IP address blocks: 223.27.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:48:c9:f3:52:a8:f9:5c:5e:e7:76:05:14:e2:c8:39:7e:4b:80:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Validity
Not Before: May 11 17:06:19 2026 GMT
Not After : May 10 17:11:19 2027 GMT
Subject: CN=98BEBD91649E8081B1F47409B00898DC61C5634F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:00:16:3d:67:67:29:17:56:b2:f8:83:d6:
3d:e0:f3:8a:de:c1:08:5d:c5:23:0a:dd:f1:18:eb:
87:f9:32:eb:06:50:b3:e6:ac:7d:33:ef:7a:87:37:
03:57:31:d0:ce:93:94:4d:26:56:1a:6a:a7:0a:c5:
79:92:37:be:a9:4b:f1:98:17:18:1a:8b:cc:56:e2:
d5:72:cb:ab:d8:b0:e1:3a:31:0f:df:13:82:64:16:
33:c8:01:25:0e:65:84:05:39:6f:bb:13:04:83:14:
b1:1e:ec:8d:4b:6f:de:d0:43:a8:ec:a9:32:26:3e:
b7:3f:b0:d3:16:39:99:a4:b5:cd:8c:aa:d6:df:13:
9c:b6:06:bf:95:2e:37:b4:8e:e7:68:a1:a1:f8:4d:
be:ae:dc:81:de:23:31:7f:20:8d:9a:0d:74:95:a9:
5a:b5:50:36:6e:c4:81:2e:8f:67:8a:f2:42:5d:64:
9f:1e:81:7e:26:37:16:18:60:b8:f3:b0:2f:09:02:
21:3c:59:c7:03:e4:69:bb:6c:87:a9:1b:5f:6f:0d:
ac:30:f8:fb:82:62:bf:18:7f:9b:2c:d5:44:d5:58:
55:a9:a7:cd:23:80:24:9e:d9:ab:ee:1c:5d:af:28:
6c:e8:da:aa:56:aa:e9:98:eb:2b:ab:0b:7b:ea:d9:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BE:BD:91:64:9E:80:81:B1:F4:74:09:B0:08:98:DC:61:C5:63:4F
X509v3 Authority Key Identifier:
keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e34342e302f32322d3234203d3e203338383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.27.44.0/22
Signature Algorithm: sha256WithRSAEncryption
79:2a:e9:08:fc:57:85:8d:61:7d:f3:86:24:8d:a3:c7:75:a6:
67:4d:bd:a6:a5:78:9e:32:7c:84:b8:90:90:aa:63:40:50:f0:
67:77:14:af:6d:81:85:15:93:c5:c4:aa:a3:7d:4a:d1:48:04:
5b:07:50:a9:08:e7:c4:14:82:f1:3b:10:c3:a5:c5:0d:9b:8f:
ba:b5:e2:a0:e3:9d:14:db:ec:a3:38:be:17:00:c8:80:b8:1c:
33:82:db:90:cb:84:a8:63:5f:e5:92:e8:3c:9d:b4:bd:9e:0e:
8e:00:d4:a0:82:fb:d4:ac:55:8c:ed:39:3e:de:a7:50:c8:4b:
4f:6a:16:02:c0:49:ee:14:fe:c2:18:e7:90:e1:56:5d:6a:b6:
ba:96:b5:80:6c:5f:d8:b2:1f:d5:97:4a:cd:d2:53:3b:09:f7:
a0:5f:9f:e6:09:1b:32:f3:68:12:3d:7f:b5:e8:a0:f8:24:fe:
3c:ad:7f:bf:8f:bc:3e:dd:08:0d:78:c9:be:7f:f6:24:a0:2b:
19:62:a4:73:cb:c0:10:42:47:0b:67:3f:15:92:72:4a:69:3c:
22:d1:54:d4:a3:e2:99:ba:61:b5:37:9b:87:3c:1c:38:08:1a:
ba:71:89:45:be:95:07:f2:59:34:a6:43:2f:bb:55:2f:b9:c4:
9d:8b:b3:5a
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUUkjJ81Ko+Vxe53YFFOLIOX5LgFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVFQzRGQTFBOEY4QUNENDA4MzNCRDJDM0VFREIyQjcw
ODJDMTc5MTAeFw0yNjA1MTExNzA2MTlaFw0yNzA1MTAxNzExMTlaMDMxMTAvBgNV
BAMTKDk4QkVCRDkxNjQ5RTgwODFCMUY0NzQwOUIwMDg5OERDNjFDNTYzNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnKAAWPWdnKRdWsviD1j3g84re
wQhdxSMK3fEY64f5MusGULPmrH0z73qHNwNXMdDOk5RNJlYaaqcKxXmSN76pS/GY
Fxgai8xW4tVyy6vYsOE6MQ/fE4JkFjPIASUOZYQFOW+7EwSDFLEe7I1Lb97QQ6js
qTImPrc/sNMWOZmktc2MqtbfE5y2Br+VLje0judooaH4Tb6u3IHeIzF/II2aDXSV
qVq1UDZuxIEuj2eK8kJdZJ8egX4mNxYYYLjzsC8JAiE8WccD5Gm7bIepG19vDaww
+PuCYr8Yf5ss1UTVWFWpp80jgCSe2avuHF2vKGzo2qpWqumY6yurC3vq2TsDAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUmL69kWSegIGx9HQJsAiY3GHFY08wHwYDVR0j
BBgwFoAUHuxPoaj4rNQIM70sPu2ytwgsF5EwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUFVNTy8w
LzFFRUM0RkExQThGOEFDRDQwODMzQkQyQzNFRURCMkI3MDgyQzE3OTEuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvMUVFQzRGQTFBOEY4QUNENDA4MzNCRDJDM0VFREIy
QjcwODJDMTc5MS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1BVTU8vMC8zMjMyMzMyZTMyMzcyZTM0
MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMzM4MzgzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
3xssMA0GCSqGSIb3DQEBCwUAA4IBAQB5KukI/FeFjWF984YkjaPHdaZnTb2mpXie
MnyEuJCQqmNAUPBndxSvbYGFFZPFxKqjfUrRSARbB1CpCOfEFILxOxDDpcUNm4+6
teKg450U2+yjOL4XAMiAuBwzgtuQy4SoY1/lkug8nbS9ng6OANSggvvUrFWM7Tk+
3qdQyEtPahYCwEnuFP7CGOeQ4VZdara6lrWAbF/Ysh/Vl0rN0lM7CfegX5/mCRsy
82gSPX+16KD4JP48rX+/j7w+3QgNeMm+f/YkoCsZYqRzy8AQQkcLZz8VknJKaTwi
0VTUo+KZumG1N5uHPBw4CBq6cYlFvpUH8lk0pkMvu1UvucSdi7Na
-----END CERTIFICATE-----
Generated at Wed May 13 02:47:51 2026 by rpki-client