Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/STW/1/3136312e3234382e3136312e302f32342d3234203d3e203633383937.roa
File: 3136312e3234382e3136312e302f32342d3234203d3e203633383937.roa (raw, json)
Hash identifier: 2l7F3xR6CEzktzgJrO3SJv5piK3jtEcJIxeyuIWLklM=
Subject key identifier: E0:94:AF:42:35:8D:E4:F0:39:13:1B:B5:81:BD:82:D4:A5:61:63:4B
Certificate issuer: /CN=FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874
Certificate serial: 2017EE87CFFCC02F8F965BE1331D8A7036261E2F
Authority key identifier: FB:7C:91:F7:E5:33:43:F5:CF:24:F9:F8:21:2F:28:A8:BE:2E:F8:74
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/STW/1/3136312e3234382e3136312e302f32342d3234203d3e203633383937.roa
Signing time: Mon 11 May 2026 17:56:10 +0000
ROA not before: Mon 11 May 2026 17:51:10 +0000
ROA not after: Mon 10 May 2027 17:56:10 +0000
asID: 63897
IP address blocks: 161.248.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:17:ee:87:cf:fc:c0:2f:8f:96:5b:e1:33:1d:8a:70:36:26:1e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874
Validity
Not Before: May 11 17:51:10 2026 GMT
Not After : May 10 17:56:10 2027 GMT
Subject: CN=E094AF42358DE4F039131BB581BD82D4A561634B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:82:42:de:98:22:78:47:ce:f7:7d:1b:cd:
54:81:31:f7:0c:14:bb:3e:d8:c7:74:ab:1d:d0:85:
cc:38:b8:69:1b:2f:03:d4:ca:29:63:7f:1f:f9:0a:
8f:3a:36:08:de:99:30:9c:c4:11:91:13:f3:b5:2e:
23:67:41:80:32:81:b6:d6:90:56:20:0f:64:6a:db:
f3:d1:9f:51:1e:02:2c:46:26:b1:e6:4b:a5:4c:d3:
ab:e7:da:60:06:d1:0a:6a:e7:17:c1:22:ed:16:77:
1b:2c:1f:8b:d0:53:ee:c0:a8:38:64:31:f9:9d:e3:
72:22:27:c5:c4:ca:69:8b:7f:41:c6:32:0d:1f:a6:
f0:38:a1:64:df:2d:28:40:49:38:11:86:61:ef:4a:
e7:6d:ef:ac:17:bd:69:62:29:73:7a:04:99:65:9e:
c5:15:41:1d:88:0a:6a:03:c2:f1:13:54:48:31:e3:
a0:82:e3:27:46:f2:f8:52:7f:af:c1:72:38:09:b0:
de:06:09:91:d4:82:17:a5:75:78:2d:30:e6:dc:13:
20:45:1f:13:0a:c1:6f:d8:37:23:66:f0:19:21:81:
27:cb:a5:5a:2f:48:1b:f5:ba:0b:23:76:fb:25:a0:
b7:29:d1:77:2f:2b:f0:7f:62:0f:a9:02:b9:eb:13:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:94:AF:42:35:8D:E4:F0:39:13:1B:B5:81:BD:82:D4:A5:61:63:4B
X509v3 Authority Key Identifier:
keyid:FB:7C:91:F7:E5:33:43:F5:CF:24:F9:F8:21:2F:28:A8:BE:2E:F8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STW/1/3136312e3234382e3136312e302f32342d3234203d3e203633383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.248.161.0/24
Signature Algorithm: sha256WithRSAEncryption
17:21:bb:dc:74:24:4c:31:08:65:1b:eb:07:f2:4e:d7:b9:76:
d5:23:00:5c:91:e3:1e:2d:17:99:9c:ec:cb:be:62:89:76:70:
3f:4b:c1:e0:08:1e:b8:ff:41:ea:a0:95:a4:62:83:e2:a6:6a:
2e:76:e0:c4:5b:cd:8e:b8:fe:b7:a3:dc:fb:29:9d:f9:f1:fb:
35:ac:67:32:b6:61:85:3c:fa:a5:64:b4:02:23:0e:9f:8b:66:
c1:99:14:5c:c8:9f:7a:a7:67:3c:46:eb:5f:21:4f:07:fa:f7:
99:f8:10:90:e3:b4:1b:b2:9f:f1:3f:49:1d:79:6e:9b:10:e7:
ee:c7:54:d7:17:94:2a:bc:b0:b8:fc:62:31:6a:0d:cd:ec:10:
4d:98:dd:db:8b:8a:df:9c:2e:46:ff:b5:01:8f:f0:4c:2e:b9:
04:c6:b0:5a:b0:4d:87:a0:49:24:b6:4b:75:76:36:06:71:06:
89:c5:7c:47:60:95:d4:9f:16:8d:e4:43:f7:2e:b6:08:8a:b7:
1b:ff:24:4c:28:e9:96:fa:6c:72:95:ea:fa:a3:5f:cd:0f:42:
f6:7a:5c:b2:61:60:29:85:51:d8:7e:60:58:46:52:a4:e5:76:
de:0c:a5:e4:1b:30:ab:49:a7:d9:d9:55:7c:2c:5e:76:b2:02:
bf:a4:68:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:42 2026 by rpki-client