Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35392e302f32342d3234203d3e203338383433.roa
File: 3232332e32372e35392e302f32342d3234203d3e203338383433.roa (raw, json)
Hash identifier: QTE/s4zVHJ6mF38FV8jT4+buqUGVRIOOKccgSs2UzrY=
Subject key identifier: AB:96:0A:2B:4D:0A:01:58:90:18:4E:A4:BC:13:AC:37:B1:7A:AD:EE
Certificate issuer: /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Certificate serial: 09632BD07E7E9E164AB494E5DDD230B455D25C19
Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35392e302f32342d3234203d3e203338383433.roa
Signing time: Mon 11 May 2026 17:11:27 +0000
ROA not before: Mon 11 May 2026 17:06:27 +0000
ROA not after: Mon 10 May 2027 17:11:27 +0000
asID: 38843
IP address blocks: 223.27.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:63:2b:d0:7e:7e:9e:16:4a:b4:94:e5:dd:d2:30:b4:55:d2:5c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Validity
Not Before: May 11 17:06:27 2026 GMT
Not After : May 10 17:11:27 2027 GMT
Subject: CN=AB960A2B4D0A015890184EA4BC13AC37B17AADEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:14:ca:10:78:22:e7:89:17:9f:8b:a7:1f:95:
39:20:58:26:f0:50:e3:52:89:9e:3b:1f:f7:e0:bd:
bc:4c:de:a5:a2:c4:7f:6a:6b:80:e8:e9:29:ea:64:
74:b2:5f:8f:bf:72:a1:1f:3b:db:f2:4d:c3:df:19:
ab:3c:ef:13:a6:d5:c7:2e:f7:be:be:fe:4a:49:f2:
ed:04:7e:e3:0b:ab:20:68:59:be:79:e5:d9:f1:c2:
6a:b8:0d:95:4d:38:fc:19:9d:94:1e:89:7a:f9:2e:
69:3c:d1:eb:c1:b3:bb:79:1c:a7:f5:f3:ff:10:0e:
4a:6c:5c:43:8b:36:ee:a4:f4:0c:49:f3:2f:94:da:
c2:73:97:4a:43:22:d6:dd:f8:ac:23:db:48:ed:c9:
f1:6e:75:9a:59:ce:5f:be:59:f6:b0:9f:61:03:12:
f2:be:92:9b:57:53:f6:4b:95:7b:0e:b0:d3:ed:13:
3c:ba:1d:0d:ec:a1:f2:ac:6f:68:2d:7b:5b:e9:f3:
79:36:0a:2a:f0:c4:2b:a1:12:37:90:0a:f1:0c:5f:
75:a0:bb:eb:28:4b:c8:f8:83:c5:f1:64:a7:80:4e:
21:8c:f9:7e:f3:77:0e:43:d3:48:35:92:b4:2b:77:
e8:7f:8d:b6:a4:8a:cc:68:a2:47:9a:af:3d:c9:8c:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:96:0A:2B:4D:0A:01:58:90:18:4E:A4:BC:13:AC:37:B1:7A:AD:EE
X509v3 Authority Key Identifier:
keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35392e302f32342d3234203d3e203338383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.27.59.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d9:5a:be:b1:16:ae:37:04:08:db:a9:4b:40:93:ab:25:86:
2f:06:57:ac:63:64:1e:ec:80:40:59:3b:8b:e6:83:af:7e:6a:
64:6c:1e:b7:51:ae:cb:00:d8:7e:2d:a1:b8:b8:3d:af:fe:7c:
71:6a:93:55:a0:0b:e5:0f:78:2e:53:80:37:4b:76:c4:0e:ce:
a3:76:91:2a:3c:57:82:9c:cb:fc:f9:88:7b:bd:b8:a3:6e:21:
c0:4b:f7:b0:8b:4c:7c:fd:ee:2c:4d:40:5b:b3:48:1a:ff:81:
ad:c8:dd:19:4e:d0:f0:88:be:c1:8a:8a:f2:0f:70:ff:e1:6c:
10:3e:df:01:9c:06:28:5f:80:03:74:d1:c4:53:d8:bc:9c:15:
8a:c1:1f:4d:77:f7:14:a7:a5:1a:8a:75:d8:85:b0:ed:8d:fc:
87:68:90:5c:67:89:8b:23:88:40:d2:89:51:9c:6d:4e:ad:60:
17:99:65:5b:9f:12:17:d6:29:d5:b8:c1:8a:9f:47:f6:fd:38:
67:d8:51:1a:16:c5:52:0b:24:eb:39:29:37:5a:35:d3:75:4e:
dc:9a:be:a0:b0:71:ac:0f:92:3d:10:ca:98:89:ac:2a:16:71:
5a:21:44:f5:09:0f:c7:50:94:fb:7d:6b:ba:c8:6d:17:ca:65:
ea:79:11:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:40 2026 by rpki-client