Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SONET/0/32372e3130352e38322e302f32342d3234203d3e203332373837.roa
File: 32372e3130352e38322e302f32342d3234203d3e203332373837.roa (raw, json)
Hash identifier: 1sg7Wk2e/ZdonH5PhiuzAv6jLByDCAyoVpPFtRuPk6A=
Subject key identifier: 5E:33:04:AC:28:3E:56:68:15:73:89:61:51:33:19:37:F0:9C:90:F3
Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Certificate serial: 38CD0F90B08520B0F0A29FDE630C03B8BB538B6C
Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/32372e3130352e38322e302f32342d3234203d3e203332373837.roa
Signing time: Mon 11 May 2026 16:48:55 +0000
ROA not before: Mon 11 May 2026 16:43:55 +0000
ROA not after: Mon 10 May 2027 16:48:55 +0000
asID: 32787
IP address blocks: 27.105.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:cd:0f:90:b0:85:20:b0:f0:a2:9f:de:63:0c:03:b8:bb:53:8b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Validity
Not Before: May 11 16:43:55 2026 GMT
Not After : May 10 16:48:55 2027 GMT
Subject: CN=5E3304AC283E56681573896151331937F09C90F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:2f:e9:9e:55:7d:7d:e8:4d:62:c5:69:75:
63:2a:78:74:17:c8:42:bd:71:58:ab:46:8d:36:6e:
98:c0:25:21:ca:1c:32:34:8c:0d:94:02:fd:db:44:
1b:50:0f:67:db:39:ca:e7:0d:54:14:cc:fc:ac:00:
63:4f:02:58:df:1b:3d:87:c5:b2:af:57:01:5b:f0:
15:0d:48:2d:c6:2f:34:43:af:f7:34:f0:8d:90:be:
60:b4:52:6e:28:6d:1d:f8:c7:92:6c:0f:a2:3d:4f:
57:c5:77:bd:f5:cc:d9:93:29:0d:33:8f:d2:ca:a4:
e9:99:fb:e1:25:17:2f:14:17:1a:23:56:17:56:62:
19:78:69:fe:2c:ce:94:ec:04:20:44:07:4d:8c:52:
a1:9c:f5:45:61:fe:1a:58:67:0c:70:de:a5:31:a3:
7b:05:05:f5:59:c7:6f:70:d0:8f:54:9f:7d:10:c0:
b7:a5:19:3b:52:1e:20:fa:4c:60:70:5f:6f:08:fe:
f5:0f:5a:7f:ff:44:5a:d2:bd:23:51:a5:a2:84:26:
99:8d:60:bd:68:9b:2e:ec:b7:29:04:bf:9a:59:66:
16:ca:a6:a8:8a:20:92:b4:57:40:1a:f2:88:39:3c:
e0:e5:12:84:1a:a6:85:91:69:16:c2:e3:6c:67:06:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:33:04:AC:28:3E:56:68:15:73:89:61:51:33:19:37:F0:9C:90:F3
X509v3 Authority Key Identifier:
keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/32372e3130352e38322e302f32342d3234203d3e203332373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.105.82.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:e3:0e:0c:6a:dd:ac:26:a9:1d:41:9b:85:c0:fb:44:8f:36:
b4:e3:44:e4:9b:9e:c4:ea:08:0d:3b:5d:64:da:13:1a:69:d6:
41:07:11:cf:10:47:8d:30:ee:9b:b6:5d:48:22:bc:7a:1a:28:
e9:10:47:29:35:1c:0f:37:c1:02:b8:b8:30:1a:6d:9e:c9:90:
72:aa:d6:02:f0:ae:ae:0f:20:24:cb:96:76:f4:54:f8:79:23:
85:6e:8c:40:43:fc:ad:a2:19:81:09:ee:cc:84:5e:63:69:28:
f2:0f:95:e5:ef:5c:0c:21:52:d5:25:89:bb:e2:37:cc:7b:e0:
14:aa:aa:9a:8e:42:e5:be:d0:16:01:c2:61:ac:41:b3:33:ac:
52:f3:cd:4a:97:84:00:c6:92:be:cc:ce:64:21:64:96:15:26:
8c:7f:39:3b:99:fc:44:be:a5:bf:e4:2b:81:d1:d4:64:a4:a3:
3f:fd:9f:ad:0f:da:c1:94:25:6e:59:6f:c5:22:da:b5:f8:8d:
b8:e3:bf:51:b1:13:f1:23:5d:e7:ea:1b:75:c5:43:38:71:db:
66:0b:b9:76:fe:ca:42:2c:a9:fe:18:89:6d:eb:5f:35:d9:d5:
99:f9:b4:3a:de:66:d6:49:2a:61:78:b1:fb:f8:99:06:04:a7:
ec:17:c0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:56 2026 by rpki-client