Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3132332e3133322e302f32322d3234203d3e20313331313531.roa
File: 3130332e3132332e3133322e302f32322d3234203d3e20313331313531.roa (raw, json)
Hash identifier: H4J8aYtZ2lQXywkXl0ThjqAPLa0AaGzOIFqfGA0h3G0=
Subject key identifier: F7:6F:62:80:19:E5:44:90:2B:1B:0F:73:16:8D:C6:10:65:8A:0F:37
Certificate issuer: /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial: 21811F7E2D6859D925DA29CAEF7B3E33512A9B32
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3132332e3133322e302f32322d3234203d3e20313331313531.roa
Signing time: Mon 11 May 2026 17:57:35 +0000
ROA not before: Mon 11 May 2026 17:52:35 +0000
ROA not after: Mon 10 May 2027 17:57:35 +0000
asID: 131151
IP address blocks: 103.123.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:81:1f:7e:2d:68:59:d9:25:da:29:ca:ef:7b:3e:33:51:2a:9b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Validity
Not Before: May 11 17:52:35 2026 GMT
Not After : May 10 17:57:35 2027 GMT
Subject: CN=F76F628019E544902B1B0F73168DC610658A0F37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4e:ed:12:f7:06:87:dd:42:a8:3c:dd:5e:87:
06:a5:3e:f5:d9:af:e9:bb:d4:08:af:ad:ef:36:5d:
b0:2f:ae:dd:f6:12:4e:e3:2c:03:fe:75:02:e3:c3:
1e:5f:e5:71:da:ba:bf:9a:03:2f:b3:61:ea:66:98:
f6:fb:d6:da:77:f3:0b:8b:37:13:34:c8:c3:66:76:
43:e0:c3:b0:7c:fa:58:99:7c:a2:d9:17:21:82:0a:
dd:0f:88:49:e3:9f:82:59:c3:54:f5:c4:a5:d2:57:
8c:2a:e3:12:64:0f:1f:c4:ef:67:b9:c7:34:53:46:
48:54:36:60:15:43:c7:08:f7:35:94:13:cb:7b:45:
67:ca:f3:9e:ee:98:13:77:54:c9:ae:29:c4:06:9b:
59:50:51:ff:04:11:72:07:2d:6a:ad:88:14:34:fb:
69:3f:e2:26:fb:4f:60:22:ac:8c:21:6b:01:08:18:
3c:7e:7b:bd:4f:f6:a5:98:5e:5d:73:f1:47:81:f0:
f7:32:85:b3:b6:23:ac:78:4b:e1:e9:0b:ae:69:7b:
b4:0c:4e:a1:3a:c0:34:f4:35:04:e0:22:73:37:a9:
37:2f:9a:d7:7c:a4:9c:4f:ad:05:87:75:6d:50:92:
3a:a9:96:84:62:4d:5f:da:27:6b:9b:ce:84:b3:a0:
c1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6F:62:80:19:E5:44:90:2B:1B:0F:73:16:8D:C6:10:65:8A:0F:37
X509v3 Authority Key Identifier:
keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3132332e3133322e302f32322d3234203d3e20313331313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.132.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:be:ec:fc:a7:97:96:52:3b:e4:38:ec:cf:46:88:f6:92:d5:
8c:c2:2c:de:98:a0:e0:25:7f:ef:a7:45:bf:7b:22:29:29:f2:
d8:5a:92:68:f8:78:7c:0d:c5:0d:f7:ad:90:56:91:1f:f4:0f:
2f:f9:b6:ce:11:91:5d:a2:57:54:e4:30:20:fe:d4:21:10:74:
8a:2a:9d:37:5b:2e:8b:37:62:eb:80:f7:84:65:66:ff:ae:31:
b3:97:b0:35:01:15:06:88:68:86:72:5a:7a:a5:2c:2a:1f:55:
3a:aa:ff:a8:6d:93:04:a5:28:e9:7f:97:50:3c:47:f1:61:a1:
53:10:b3:f5:96:d6:5c:43:53:05:f3:7a:f6:1b:1d:ca:2f:7b:
0e:ee:02:58:6c:e9:0d:d1:f6:cc:b6:8e:fd:83:44:8f:1b:db:
45:da:cc:e2:87:17:5c:cf:bb:46:05:ce:b8:46:ae:58:c4:4d:
4f:2e:02:98:2c:20:e5:08:e7:7b:91:f5:9c:d3:60:28:a7:13:
09:ef:67:9e:bb:6c:a2:33:1f:dc:ab:47:96:18:b9:bb:4c:d9:
91:af:8d:c0:9b:ac:25:0b:43:96:33:67:20:a1:43:44:7c:fb:
11:4a:0d:74:b1:b0:a7:d1:db:13:7b:d1:08:0a:ce:3f:83:b6:
47:ca:25:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:30 2026 by rpki-client