Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SECUNET/0/3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa
File: 3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa (raw, json)
Hash identifier: lozDj5Lx5lP+vcH1OuWHc2uSVB3sN9/AJEBNfjtjdxc=
Subject key identifier: C4:87:EE:FC:8E:8C:AE:56:5D:61:D8:49:3D:55:38:9D:EC:79:F2:0D
Certificate issuer: /CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
Certificate serial: 10FA5D336F2B6850368CD95E9CA588F2C7CE408F
Authority key identifier: 4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SECUNET/0/3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa
Signing time: Mon 11 May 2026 17:37:48 +0000
ROA not before: Mon 11 May 2026 17:32:48 +0000
ROA not after: Mon 10 May 2027 17:37:48 +0000
asID: 7538
IP address blocks: 103.198.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:fa:5d:33:6f:2b:68:50:36:8c:d9:5e:9c:a5:88:f2:c7:ce:40:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
Validity
Not Before: May 11 17:32:48 2026 GMT
Not After : May 10 17:37:48 2027 GMT
Subject: CN=C487EEFC8E8CAE565D61D8493D55389DEC79F20D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:f5:be:e0:be:05:d9:16:8e:57:6d:58:c2:
2a:9e:75:bb:20:45:b1:3f:90:aa:33:4a:f2:de:fd:
2f:65:ae:93:b5:e3:c2:7d:dd:6e:75:8d:98:40:af:
ab:23:46:0d:a5:28:2d:86:5e:bf:3c:f5:86:93:00:
6c:6e:04:aa:77:a4:f0:2b:a2:1b:4b:c5:4f:bb:89:
35:65:95:b0:9c:ab:92:88:ab:38:f6:1d:21:70:ef:
ec:03:b6:f6:33:b5:ee:0f:70:cb:da:2a:af:20:4b:
9b:89:20:50:af:0b:bd:ce:dc:7d:c3:b0:0c:00:42:
da:e4:95:e6:30:c3:19:a5:11:6b:55:22:9f:59:c7:
92:5a:a2:5b:da:22:9a:6c:82:09:02:7c:08:ed:e6:
3d:f0:b9:6e:3a:79:4f:d4:dd:98:f2:74:b6:8a:45:
44:3d:02:38:a3:66:1d:4c:e8:47:98:c2:b4:c8:c0:
e5:a7:03:a1:d5:5c:13:2d:50:8a:88:28:63:c6:01:
97:2e:a1:c6:3e:f8:a0:e4:d3:de:43:8b:5e:d1:af:
eb:9d:4b:fa:e3:e6:48:77:7a:22:6b:e2:fa:6e:67:
8b:c9:fc:02:dd:c2:9f:42:c3:cd:bf:68:e6:47:30:
50:d0:3e:e2:57:2e:69:4c:4a:4b:97:9c:1c:6f:0d:
e9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:87:EE:FC:8E:8C:AE:56:5D:61:D8:49:3D:55:38:9D:EC:79:F2:0D
X509v3 Authority Key Identifier:
keyid:4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.198.152.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:70:c4:4b:8d:ef:89:e6:43:11:e0:02:8d:0f:07:1a:d8:07:
ae:d0:ed:b6:b6:e1:dc:69:14:bb:9c:b8:fd:11:b0:b2:55:08:
18:18:65:72:3d:52:1c:69:0e:ad:3a:71:87:36:ff:28:4c:7b:
3c:3d:17:e9:ea:81:ba:91:31:d1:64:52:99:b8:e6:e5:c7:c6:
dd:1e:ae:f2:84:0c:57:28:5b:eb:e8:c0:43:ba:53:d6:d5:7b:
ed:ad:1d:38:bc:ce:25:7c:cc:46:2a:f5:bf:b6:c7:dc:f0:63:
d4:3d:44:3e:15:49:8a:29:aa:9b:0a:c8:98:82:23:f6:d4:f6:
5c:5b:ad:28:7f:d1:82:bf:7f:68:ea:ea:bc:16:03:7a:b4:f6:
88:13:6a:40:15:d5:05:8b:13:9b:c8:fb:8a:70:4d:e6:bb:b8:
c9:87:46:45:7d:97:21:b8:42:f4:e4:24:db:11:96:b1:11:3a:
c0:05:25:19:ca:77:62:11:20:c9:56:27:f7:17:ef:c0:65:e7:
87:5a:3c:f5:85:10:4c:b5:be:38:b6:78:a8:12:fe:3e:47:d4:
5c:88:ba:3f:17:e9:88:8f:2c:6f:fa:41:38:e5:41:ee:4f:90:
f2:7b:f2:54:28:04:ea:f3:f7:86:d1:a2:ef:e7:2f:0f:6c:7e:
85:fe:27:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:59:42 2026 by rpki-client