Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3132332e3133342e302f32332d3234203d3e203338303432.roa
File: 3130332e3132332e3133342e302f32332d3234203d3e203338303432.roa (raw, json)
Hash identifier: M2N3duptFA+bV1Le2KfMm0NhGumIDIKQ5uH8Mkm1Ayk=
Subject key identifier: 37:78:A3:C1:F7:75:9A:74:0E:C0:CD:38:8C:B8:3E:D2:8A:06:5C:BA
Certificate issuer: /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial: 37F158B8BD85039AE9D38A0D707A9E1F4DEE7F3E
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3132332e3133342e302f32332d3234203d3e203338303432.roa
Signing time: Mon 11 May 2026 17:57:36 +0000
ROA not before: Mon 11 May 2026 17:52:36 +0000
ROA not after: Mon 10 May 2027 17:57:36 +0000
asID: 38042
IP address blocks: 103.123.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f1:58:b8:bd:85:03:9a:e9:d3:8a:0d:70:7a:9e:1f:4d:ee:7f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Validity
Not Before: May 11 17:52:36 2026 GMT
Not After : May 10 17:57:36 2027 GMT
Subject: CN=3778A3C1F7759A740EC0CD388CB83ED28A065CBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:36:01:c2:72:9d:80:09:67:6a:24:5a:d1:
18:0f:f0:b1:f0:d7:c1:fd:b2:62:d4:55:d1:0c:bc:
eb:26:53:a8:0b:8f:39:5e:d9:aa:32:8e:cb:97:21:
29:6b:b0:89:8b:36:20:e7:80:73:42:42:88:8c:dc:
86:e8:4f:18:62:27:49:fd:b8:78:cb:b2:dc:3a:da:
02:59:5e:cf:d3:af:2d:a6:d6:e1:3f:fa:f3:d1:7d:
6b:47:03:ac:7f:49:2b:5d:30:c9:d0:86:77:37:01:
95:49:4a:0e:92:64:88:11:f7:72:f3:b5:da:49:2d:
21:d6:4a:49:5f:ad:ff:e5:03:d9:da:c8:76:a6:94:
03:e3:be:db:3d:d1:9c:dd:17:3a:b5:79:e4:a2:11:
eb:77:03:5c:88:89:67:2e:d0:cb:d8:e4:83:a7:ec:
90:1c:41:56:9c:17:6a:e1:e4:1f:3c:81:eb:6c:ab:
7e:a5:82:fe:54:64:5a:e8:a7:d0:d6:c5:b7:f8:53:
e4:51:e7:0a:e0:65:96:0b:79:49:3c:6a:e9:6f:ea:
10:07:de:63:43:34:97:4c:92:0f:d2:61:62:9a:94:
ac:8b:3b:4f:ba:11:9e:99:6d:62:09:29:67:fe:2c:
ea:69:06:91:53:8e:85:05:56:35:46:60:3c:27:f2:
f4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:78:A3:C1:F7:75:9A:74:0E:C0:CD:38:8C:B8:3E:D2:8A:06:5C:BA
X509v3 Authority Key Identifier:
keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3132332e3133342e302f32332d3234203d3e203338303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.134.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:16:fb:0c:28:2c:a4:2d:87:a9:01:ff:9c:1f:8b:cf:63:44:
22:53:f5:8f:0e:fc:83:19:37:5c:42:e3:80:68:ae:b1:f6:25:
5e:60:b5:6f:1d:d7:bf:70:87:7b:11:07:71:6d:3f:de:29:df:
ee:cb:5f:37:36:a4:8c:aa:79:f7:4c:62:37:51:27:59:15:85:
6f:4b:17:f7:e4:dd:99:82:74:29:ed:e5:a6:d4:08:0c:c1:ae:
2f:7f:97:36:a8:78:b5:12:a8:6d:57:94:bf:8a:21:7c:4d:b0:
61:7c:88:b5:dc:f6:a8:bf:b8:e4:0e:7c:d1:31:6a:e2:fb:d7:
72:17:95:7a:7b:b7:c1:6c:6f:79:26:c0:7c:d3:b8:f6:19:aa:
d6:b5:f0:33:a2:d4:13:d0:f6:a1:43:13:e7:43:ae:d9:b3:30:
b4:fe:a9:72:77:4e:7e:da:30:01:48:32:a5:c1:00:ed:b2:d2:
a4:2f:f8:c4:a1:9e:86:0e:40:05:c9:bc:e5:d3:ab:4b:2e:cd:
a1:f3:dc:77:df:2c:67:51:6b:e1:e2:df:c1:1b:fc:79:4a:55:
76:0f:91:34:93:b8:00:ae:1f:bb:e6:1c:e5:d8:e7:15:aa:ea:
8f:d0:ca:ee:3e:57:d2:26:8f:55:f0:91:24:78:3a:8d:95:af:
62:5a:8f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:51 2026 by rpki-client