Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35342e302f32342d3234203d3e203338383433.roa
File: 3232332e32372e35342e302f32342d3234203d3e203338383433.roa (raw, json)
Hash identifier: hK3eTtk1Aw6p+n+a1+H+oEQEXBUn0p2NRcZ6c1f842c=
Subject key identifier: 82:DE:86:C6:CF:B6:B1:7C:EE:DE:E6:0D:62:A9:B9:56:F0:85:B0:08
Certificate issuer: /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Certificate serial: 11090730D3753BEF9189AFAA0DB6724C5A8C0C8F
Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35342e302f32342d3234203d3e203338383433.roa
Signing time: Mon 11 May 2026 17:11:24 +0000
ROA not before: Mon 11 May 2026 17:06:24 +0000
ROA not after: Mon 10 May 2027 17:11:24 +0000
asID: 38843
IP address blocks: 223.27.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:09:07:30:d3:75:3b:ef:91:89:af:aa:0d:b6:72:4c:5a:8c:0c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Validity
Not Before: May 11 17:06:24 2026 GMT
Not After : May 10 17:11:24 2027 GMT
Subject: CN=82DE86C6CFB6B17CEEDEE60D62A9B956F085B008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:71:8d:04:cd:b9:fa:18:cb:0c:87:a4:31:
3f:39:f3:7d:8a:93:eb:10:0f:16:29:af:98:48:15:
2c:d9:03:b3:6f:2c:72:15:99:b3:6e:92:88:c6:d8:
42:13:65:4a:47:f6:2d:1e:0e:1b:4a:a2:21:09:c0:
3c:c4:53:00:db:ec:8d:e8:ce:9d:1e:e6:37:d0:7a:
ad:5b:2e:a6:e8:5c:fe:25:a7:97:b0:c9:a5:9a:38:
ef:94:82:2c:a1:15:d2:8a:6a:ef:42:35:86:a2:46:
54:a7:b4:23:16:7b:fd:40:e3:23:20:eb:16:67:9d:
d8:47:8f:c5:9c:e0:a6:60:cf:b9:76:e0:89:bf:35:
56:d0:55:9d:32:37:b5:8c:b1:14:50:af:1c:6d:e4:
de:96:1e:8d:40:3f:88:33:7c:6d:27:0c:79:6a:28:
d3:81:e9:d1:7f:9f:01:a2:6b:92:8b:a1:3d:d0:4a:
23:4c:8f:1b:12:fe:18:ae:7b:2d:39:be:96:8f:c6:
61:c0:a1:52:f5:15:1d:b5:f7:4a:aa:a6:42:f8:af:
02:cf:d4:c6:54:e7:5f:22:ce:df:4e:07:6b:1c:c4:
5c:27:e2:f3:31:cf:8b:ea:d3:34:bc:e0:fa:24:e3:
3e:dd:1a:ba:d5:56:0b:c6:02:18:73:0b:e3:31:1e:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DE:86:C6:CF:B6:B1:7C:EE:DE:E6:0D:62:A9:B9:56:F0:85:B0:08
X509v3 Authority Key Identifier:
keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35342e302f32342d3234203d3e203338383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.27.54.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e1:78:a0:31:23:01:75:28:7c:0c:f3:d4:5b:7a:73:09:33:
94:55:c6:50:55:c6:35:f3:a0:25:b8:46:23:c6:85:a1:85:e9:
f2:4b:a8:15:f7:99:94:5d:3a:9c:87:84:f8:4a:b9:c1:b8:1f:
09:ba:03:0b:66:79:1b:4a:f5:d2:05:27:f1:65:f1:39:99:22:
ba:c0:e1:6d:2a:61:68:0d:d0:b5:7c:07:af:32:07:ca:8e:66:
8e:e4:55:56:dd:16:22:b2:0e:86:f4:96:24:d4:2d:05:97:69:
e1:8a:58:60:94:ed:d8:f2:3d:bd:59:bb:7b:55:27:2c:78:ca:
38:f5:cc:58:e7:77:a9:0f:6e:c4:b4:b3:fa:d7:8f:24:1b:27:
46:d9:d6:8a:d8:ff:e8:8d:91:a8:67:fe:5a:42:29:eb:7b:d8:
b5:6f:41:9e:82:c0:a4:3e:d0:0f:68:9a:f0:ca:0d:99:6b:ba:
85:40:53:f4:87:c6:79:72:1a:d1:81:ac:04:5b:ce:7e:bb:5e:
64:bc:dc:2a:e2:5a:b0:d1:79:4e:5e:34:3e:3d:fd:c3:1e:00:
22:ff:e6:0e:55:e3:d1:fd:7b:e0:3b:72:dd:5b:d2:88:be:e9:
a1:bf:52:0a:13:cc:38:87:6e:3b:76:77:09:78:2c:54:e6:fe:
a3:e5:a7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:18 2026 by rpki-client