Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35332e302f32342d3234203d3e203338383433.roa
File: 3232332e32372e35332e302f32342d3234203d3e203338383433.roa (raw, json)
Hash identifier: W/7xSrFp16WEMXzXvZwhubvAhWK/W30vGMsvIr6EP/Q=
Subject key identifier: 1F:EA:ED:2B:A2:55:52:8F:D7:38:50:A6:21:FD:FE:EB:DA:0E:E1:7C
Certificate issuer: /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Certificate serial: 150BFDFD0BBE38C499C30376C6108A177725A81D
Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35332e302f32342d3234203d3e203338383433.roa
Signing time: Mon 11 May 2026 17:11:23 +0000
ROA not before: Mon 11 May 2026 17:06:23 +0000
ROA not after: Mon 10 May 2027 17:11:23 +0000
asID: 38843
IP address blocks: 223.27.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:0b:fd:fd:0b:be:38:c4:99:c3:03:76:c6:10:8a:17:77:25:a8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Validity
Not Before: May 11 17:06:23 2026 GMT
Not After : May 10 17:11:23 2027 GMT
Subject: CN=1FEAED2BA255528FD73850A621FDFEEBDA0EE17C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5c:6a:6c:4f:44:25:06:4d:37:01:d7:6c:68:
d3:c6:51:72:07:3e:12:10:8b:56:03:c2:36:28:41:
a6:61:de:77:0a:78:5d:fb:36:54:72:0d:6b:24:b7:
43:f1:bf:57:a4:7a:9b:e4:a2:c1:25:45:1a:0b:08:
d2:9b:29:54:07:aa:f8:1d:c4:c9:e2:f5:d4:9a:c8:
87:ee:0b:79:fd:2d:8b:99:c3:87:38:3b:50:97:04:
08:ec:74:05:a3:4f:0c:d6:3d:fb:6c:ab:a2:43:e6:
57:31:ae:76:eb:5e:35:8a:30:af:41:ae:d1:51:ac:
0f:24:32:15:23:d4:e1:ce:f0:67:16:fb:03:98:3e:
27:d3:46:e3:3b:da:40:f1:00:cf:a8:0a:60:66:06:
c6:d5:5d:a6:dc:ec:7d:50:83:87:73:cf:67:33:3c:
af:41:7b:90:79:a6:29:b4:87:4f:fc:2f:d9:aa:7d:
a6:4a:7e:ed:4c:c7:9b:c4:d6:15:1a:e0:af:9b:d1:
59:1a:e0:97:ce:16:98:02:40:82:e6:d1:d1:5b:8e:
a2:25:e2:6f:9a:fa:14:35:49:bc:0a:7a:79:e8:ae:
d9:b5:f1:4f:af:7b:48:ff:59:87:6d:e9:54:73:2d:
d0:e1:93:52:e3:39:e7:d0:cd:84:21:77:dd:51:a5:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EA:ED:2B:A2:55:52:8F:D7:38:50:A6:21:FD:FE:EB:DA:0E:E1:7C
X509v3 Authority Key Identifier:
keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35332e302f32342d3234203d3e203338383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.27.53.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:9d:36:2c:14:73:ed:22:27:ed:e5:f9:4a:f6:8f:8c:46:e6:
89:15:94:d7:9a:f9:5b:5c:60:a5:16:a2:c3:51:65:fd:43:6f:
81:24:c1:03:a9:f7:14:c7:80:9a:00:b8:d1:ca:38:74:bf:36:
ba:70:cb:c8:64:85:fe:c2:0f:00:21:a2:e0:d3:34:e2:b3:67:
12:6d:29:c1:8b:dd:e7:72:d9:bb:f6:31:1e:0d:cf:46:cb:6c:
92:59:4d:40:6f:d3:9e:ad:cb:a3:2a:f8:01:df:47:ae:bc:9f:
3e:96:be:1a:35:bf:27:84:dd:75:24:2e:5f:2e:8e:32:76:ec:
7e:72:30:56:4a:36:d2:1c:e4:ea:2c:eb:f2:85:2b:7d:3d:7d:
6e:4e:af:7a:1a:9f:18:0c:aa:01:a8:53:d1:43:b7:1c:2f:78:
72:d8:f3:49:fa:e6:d3:68:c0:2d:21:c6:4d:64:d3:29:0a:f1:
d5:f9:9c:a4:1e:2c:ba:4d:cb:cf:4a:1f:a7:7b:51:f7:5f:56:
17:87:da:8d:0e:96:cc:9d:50:f5:99:bf:e3:0c:d4:31:53:b2:
08:17:84:f7:be:1e:28:8b:61:e9:2b:73:7e:af:a5:4d:41:04:
d8:32:cf:a3:c7:a9:8b:4e:2e:2f:ef:39:f9:ed:51:9c:13:a5:
bb:9a:f6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:01 2026 by rpki-client