Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35322e302f32322d3234203d3e203338383433.roa
File: 3232332e32372e35322e302f32322d3234203d3e203338383433.roa (raw, json)
Hash identifier: 3JH+wvG0pR7q1B2ZXDO82xgeF97kx6AuURGEind2I+c=
Subject key identifier: DE:8D:FC:DF:EF:C3:6B:06:9B:5B:FC:C7:DA:09:0F:7E:FA:29:9A:4F
Certificate issuer: /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Certificate serial: 3139D113026B2F3C8BA50FD7C88CBC4B28BC8D18
Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35322e302f32322d3234203d3e203338383433.roa
Signing time: Mon 11 May 2026 17:11:22 +0000
ROA not before: Mon 11 May 2026 17:06:22 +0000
ROA not after: Mon 10 May 2027 17:11:22 +0000
asID: 38843
IP address blocks: 223.27.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:39:d1:13:02:6b:2f:3c:8b:a5:0f:d7:c8:8c:bc:4b:28:bc:8d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Validity
Not Before: May 11 17:06:22 2026 GMT
Not After : May 10 17:11:22 2027 GMT
Subject: CN=DE8DFCDFEFC36B069B5BFCC7DA090F7EFA299A4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:10:95:25:90:a4:85:9b:10:6c:64:4f:df:
be:e8:05:73:6d:ab:16:c2:7b:06:c0:81:7e:4e:ec:
30:ad:63:fc:7e:65:60:f7:f4:d7:b0:6e:ac:75:cc:
75:f7:78:50:77:b7:9a:e6:d5:4f:54:a1:d3:d2:0e:
f0:43:00:1b:5b:ab:a2:fb:77:6d:b6:7c:2f:c3:fc:
84:5c:66:eb:c1:15:dd:3d:11:f6:e7:fd:fd:3f:e0:
1c:ab:06:8c:99:37:20:dc:3b:8f:53:9a:1c:e5:cd:
fb:e2:48:74:e6:da:ca:94:92:b5:59:b9:fe:31:8a:
9f:0b:4d:ee:a2:5e:96:f0:db:06:6b:6c:79:1a:8a:
3d:87:d7:7a:b7:cb:09:51:98:ea:26:a2:4e:d1:fb:
da:2e:df:05:74:63:96:30:bf:29:82:17:92:83:a7:
86:79:40:98:dd:04:dc:5f:72:85:57:bb:c0:e5:ef:
4b:3c:87:62:69:f5:78:cc:43:a8:04:33:6f:02:05:
8f:79:f8:39:b7:95:1a:57:3f:6b:00:24:36:68:bc:
18:44:99:d3:34:c3:1b:8d:06:2f:20:42:2c:64:a3:
3d:58:9b:47:c5:d8:49:70:11:67:38:54:cc:a9:96:
e3:5f:1e:8f:ce:56:5f:1d:ef:e3:63:70:d8:93:d6:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8D:FC:DF:EF:C3:6B:06:9B:5B:FC:C7:DA:09:0F:7E:FA:29:9A:4F
X509v3 Authority Key Identifier:
keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35322e302f32322d3234203d3e203338383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.27.52.0/22
Signature Algorithm: sha256WithRSAEncryption
22:8b:36:f4:18:57:46:c2:8c:ad:a2:30:c2:8f:18:5e:34:af:
6d:08:4d:7c:00:61:88:83:85:e7:33:ab:68:63:0b:4b:ba:5c:
1e:69:89:98:4b:c8:30:e6:7e:7e:42:05:ec:a9:c4:96:d9:da:
65:75:76:00:04:0f:86:94:05:39:3d:c2:47:da:d5:1b:af:89:
12:03:32:dd:58:fc:64:a4:17:85:07:4a:02:67:56:7c:a7:79:
c5:c9:d9:04:c6:0c:4c:7a:b8:7c:40:6b:1c:a5:b4:81:84:0c:
3d:07:c9:e8:9a:15:70:f8:e7:10:11:36:7a:d7:ad:21:d8:82:
e5:52:2f:07:fb:d7:92:6b:ca:fd:92:13:4c:21:2f:18:a4:36:
67:f7:16:2f:b8:e3:e5:a3:78:bc:a2:58:9a:d3:af:bb:78:f9:
d0:da:32:e1:11:bc:d8:4d:45:f0:aa:9a:05:0d:64:bd:9f:e4:
e7:d6:e7:fd:6e:d8:57:f3:d5:7c:79:c4:10:ca:44:82:c0:f4:
50:11:7e:5b:53:28:54:07:54:8e:8b:d3:07:f2:5c:4b:b1:c8:
de:9c:56:a6:ff:27:07:70:6a:80:4b:27:47:d8:31:58:0b:2b:
2a:25:4d:72:96:ec:2f:cf:30:bf:e8:72:15:d8:6f:41:21:b3:
33:14:d5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:03 2026 by rpki-client