Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SONET/0/32372e3130352e3230362e302f32342d3234203d3e203435343734.roa
File: 32372e3130352e3230362e302f32342d3234203d3e203435343734.roa (raw, json)
Hash identifier: 9Cuads8Xj/H3SUpgMMXmElqrysGMLgLQcPn8+WPxZaA=
Subject key identifier: 44:50:C8:0A:F9:7B:06:D2:EE:EA:45:88:52:C1:15:BF:B3:C3:BC:5A
Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Certificate serial: 5CAFDB71E47B79993D697DE5991ECE92EE131F19
Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/32372e3130352e3230362e302f32342d3234203d3e203435343734.roa
Signing time: Mon 11 May 2026 17:18:54 +0000
ROA not before: Mon 11 May 2026 17:13:54 +0000
ROA not after: Mon 10 May 2027 17:18:54 +0000
asID: 45474
IP address blocks: 27.105.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:af:db:71:e4:7b:79:99:3d:69:7d:e5:99:1e:ce:92:ee:13:1f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Validity
Not Before: May 11 17:13:54 2026 GMT
Not After : May 10 17:18:54 2027 GMT
Subject: CN=4450C80AF97B06D2EEEA458852C115BFB3C3BC5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:7b:52:af:a8:62:e3:ab:22:2a:ac:5a:c5:
c5:a6:2b:16:d2:78:a1:81:28:47:99:ed:fa:42:7b:
ad:6e:db:f2:9e:22:d6:d7:5a:71:9e:77:62:c1:a4:
a0:2c:f5:5d:c9:2a:3b:4e:df:f1:76:ec:3d:8c:74:
67:d5:c2:a0:43:0b:f0:87:3e:a6:77:eb:a9:4a:25:
42:b0:86:a5:1f:d5:e3:76:c5:f7:07:91:48:d5:f7:
b9:0e:98:46:ef:f9:cc:50:06:ee:c0:ab:13:7d:e9:
de:69:23:32:eb:24:55:e9:ef:80:b1:38:a4:13:a1:
31:a5:f6:fa:22:64:97:c8:25:c3:a4:8c:36:21:92:
5f:a4:34:7e:d1:6d:02:45:84:31:f8:c8:cf:36:63:
a2:75:9b:7b:1f:22:97:c2:ab:51:d3:91:e1:b8:21:
ad:64:fc:b4:cd:b2:02:24:5a:f7:8a:91:c0:e9:04:
6f:25:0e:1f:c1:c6:fa:53:ce:4d:74:60:86:08:ed:
98:76:be:31:89:9c:98:2f:d2:7f:ad:79:6f:5b:93:
4b:de:13:b4:9a:18:89:45:a8:4a:6a:ff:ea:df:45:
0d:7e:21:9a:22:41:a6:9f:f7:ce:bd:c2:be:a2:6a:
fb:19:78:cf:f6:bb:4f:b9:61:1e:26:de:9a:90:a5:
ee:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:50:C8:0A:F9:7B:06:D2:EE:EA:45:88:52:C1:15:BF:B3:C3:BC:5A
X509v3 Authority Key Identifier:
keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/32372e3130352e3230362e302f32342d3234203d3e203435343734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.105.206.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:f7:cb:f7:47:a4:11:7b:14:18:bb:50:18:91:d6:02:5e:57:
61:c8:11:75:97:cb:85:6d:20:28:8f:bf:e1:bb:e1:84:22:20:
18:2d:16:c8:e9:12:ac:60:61:60:39:df:34:74:d5:14:38:cf:
26:9c:77:0f:a4:73:53:23:43:ec:6f:4c:ed:8b:c6:d6:eb:ce:
1e:b2:d4:c3:bb:2c:39:5e:b3:b7:e5:f6:46:78:bd:67:29:f6:
44:b2:d9:03:98:e2:73:be:4f:c4:1e:d9:32:5b:22:c9:7b:f6:
f0:a8:27:82:29:77:eb:c3:27:5e:f6:2e:80:42:02:6f:88:a0:
dd:42:9d:c3:78:e0:10:d3:5a:85:b6:55:a5:bd:0e:39:e2:04:
43:b9:15:8a:d2:9e:d0:51:10:d7:de:83:be:7e:13:af:1e:04:
19:13:a3:3f:76:39:64:06:0b:57:be:60:24:40:9a:91:67:6c:
3a:12:13:64:1f:c7:13:f9:65:f1:d1:bc:34:30:2f:05:fc:d4:
d8:61:d2:bd:44:7c:51:c9:b9:78:ce:42:a4:54:de:d3:4a:02:
e2:2c:aa:c8:d0:18:8d:dc:07:17:ef:45:1a:19:5d:75:1c:44:
e8:c4:f2:96:f6:db:3c:e8:e6:c4:77:32:2a:10:b7:f9:a5:cc:
c0:ee:41:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:59 2026 by rpki-client