Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3132332e3133322e302f32322d3234203d3e20313334383233.roa
File: 3130332e3132332e3133322e302f32322d3234203d3e20313334383233.roa (raw, json)
Hash identifier: TWQAxE4TuK638NNKsOzZRvFCTF3qf+yBP5Tq3YLqYEs=
Subject key identifier: B7:BD:C2:92:13:65:15:4A:89:42:C4:EE:BD:6B:75:07:F6:CB:24:09
Certificate issuer: /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial: 165183F8A31B82CAF1E4CA3772AD271A4BBBF1AF
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3132332e3133322e302f32322d3234203d3e20313334383233.roa
Signing time: Mon 11 May 2026 17:37:45 +0000
ROA not before: Mon 11 May 2026 17:32:45 +0000
ROA not after: Mon 10 May 2027 17:37:45 +0000
asID: 134823
IP address blocks: 103.123.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:51:83:f8:a3:1b:82:ca:f1:e4:ca:37:72:ad:27:1a:4b:bb:f1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Validity
Not Before: May 11 17:32:45 2026 GMT
Not After : May 10 17:37:45 2027 GMT
Subject: CN=B7BDC2921365154A8942C4EEBD6B7507F6CB2409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:8f:0a:5a:ce:d6:42:4b:b8:ae:6e:d1:4f:
83:86:39:46:f2:74:95:e4:09:a2:db:44:b7:79:9b:
16:8b:e3:01:34:d8:95:82:f0:43:32:52:3c:bf:5a:
87:9f:4f:cc:1a:bc:64:98:25:3c:ce:7b:d6:f3:29:
64:64:86:cd:5f:64:84:8e:38:e6:28:e6:d1:49:00:
c3:ea:be:b8:40:1a:7b:a7:0d:66:5c:39:15:40:32:
72:6b:92:39:cb:75:38:c9:65:06:45:77:f1:28:c0:
90:75:61:92:79:4d:29:e0:d8:9c:62:1e:f0:92:be:
2d:0d:d3:eb:e6:bd:61:0f:4d:ec:8c:83:ea:8f:8b:
5b:e4:78:3e:76:72:ee:e2:6a:0d:a6:3e:91:0c:3a:
a6:9e:3d:31:11:be:f4:db:76:1a:42:aa:e8:04:ab:
08:70:94:ed:d2:08:3b:77:b1:58:08:8f:5c:33:00:
80:8e:aa:e9:30:a4:a2:b6:16:5d:1c:b9:65:a3:2c:
d4:8c:4c:36:81:ee:e5:e9:3f:52:53:4e:59:2b:c5:
97:8e:26:4c:41:04:73:36:09:fa:b8:5a:29:17:6e:
90:0a:f9:fa:3d:76:85:36:1c:ad:ae:a0:34:81:36:
a2:25:fe:09:22:41:15:43:58:3a:8b:ad:b7:f8:54:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BD:C2:92:13:65:15:4A:89:42:C4:EE:BD:6B:75:07:F6:CB:24:09
X509v3 Authority Key Identifier:
keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3132332e3133322e302f32322d3234203d3e20313334383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.132.0/22
Signature Algorithm: sha256WithRSAEncryption
27:6e:86:7f:50:e3:31:e1:76:7b:5e:1c:d3:80:0a:b3:a8:f9:
ae:e5:8a:12:1b:3e:94:5b:70:de:ec:34:16:c3:9e:b1:79:f0:
c1:c2:f9:9e:f1:29:58:24:6e:3f:b6:9a:3b:ff:97:33:29:cc:
bf:1b:76:29:e3:13:1f:a1:2a:95:6e:dc:db:66:69:81:88:1e:
5c:56:e7:55:4c:45:12:3a:2b:e7:93:c9:bc:06:a0:b2:38:15:
e2:04:cb:39:ed:23:f1:08:18:b1:73:a5:25:15:58:be:14:39:
95:92:a9:8b:12:57:a6:94:ac:fd:07:3d:b0:65:99:ea:d0:99:
98:46:48:30:be:d9:90:e6:cd:6b:cc:03:f1:b8:77:1d:02:e2:
c7:d5:f6:dc:e2:84:ec:27:0d:bc:c0:38:a8:e8:3e:27:c5:72:
16:39:fd:03:fd:24:6d:fd:5c:b2:29:0a:39:65:ac:dd:e0:69:
a1:4a:6d:c8:43:16:5a:c3:fe:0d:01:a1:f7:57:6d:fa:c8:cd:
64:05:ed:fc:5a:a1:b2:35:84:67:bb:a6:bd:48:05:1d:d7:a7:
40:6f:88:39:55:84:33:e9:3e:cc:a7:be:93:c2:2a:e4:04:b9:
6b:64:0f:1c:c3:68:6a:48:e8:10:98:6c:53:46:4a:35:c6:d1:
b1:a5:79:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:39:54 2026 by rpki-client