Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3132382e302e302f31332d3133203d3e2031363539.roa
File: 3134302e3132382e302e302f31332d3133203d3e2031363539.roa (raw, json)
Hash identifier: d4lfwSuNh7G0Rop0eNh8FxevP3/XAutfM5qAecSXRuo=
Subject key identifier: 61:D3:98:87:59:1F:84:89:5D:9E:AA:BD:4A:A1:38:BA:20:2F:3A:8B
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 5E9193200887CAF966CC39CB8169C79ADF603F45
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132382e302e302f31332d3133203d3e2031363539.roa
Signing time: Mon 11 May 2026 20:59:37 +0000
ROA not before: Mon 11 May 2026 20:54:37 +0000
ROA not after: Mon 10 May 2027 20:59:37 +0000
asID: 1659
IP address blocks: 140.128.0.0/13 maxlen: 13
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:91:93:20:08:87:ca:f9:66:cc:39:cb:81:69:c7:9a:df:60:3f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: May 11 20:54:37 2026 GMT
Not After : May 10 20:59:37 2027 GMT
Subject: CN=61D39887591F84895D9EAABD4AA138BA202F3A8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:a2:bc:df:93:7f:0d:86:25:ed:33:65:c3:
6f:ad:e5:6a:0c:2d:7f:d4:42:df:9d:65:ef:63:f8:
94:e4:6f:84:b1:d7:77:43:d6:27:65:90:34:1d:ee:
cf:ac:bb:3a:33:a0:6a:60:d1:50:ea:a2:77:67:43:
3a:70:90:34:44:af:65:89:67:33:a0:60:d0:51:a1:
a6:64:b3:e0:e3:8c:d3:6f:95:20:cf:79:6a:27:c2:
44:3f:90:fb:0a:d5:f8:1c:cc:97:1b:ff:c1:c4:16:
4d:9d:a1:95:c7:af:ba:93:6b:5c:50:52:42:02:90:
0b:68:62:c6:cc:b6:35:4c:2d:c5:16:31:10:a8:df:
30:b1:42:c2:1e:67:af:06:39:68:e6:7f:d1:8f:72:
d4:6b:d5:13:fe:47:59:c4:bb:22:15:13:d5:78:18:
2b:f4:38:21:68:f1:1b:10:ec:f8:71:80:31:81:30:
81:af:ee:2d:d0:03:b1:1c:c4:3e:26:e3:aa:70:a1:
27:1a:af:ae:f5:10:b7:5f:76:74:76:90:37:3e:be:
c8:a0:a8:59:ea:a6:31:54:cc:31:1d:70:a6:b6:38:
5f:2c:48:5c:30:89:8d:b2:41:75:a0:89:79:e5:f4:
52:ce:2f:32:dd:ae:57:d6:0f:61:e3:e3:05:6b:94:
88:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D3:98:87:59:1F:84:89:5D:9E:AA:BD:4A:A1:38:BA:20:2F:3A:8B
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132382e302e302f31332d3133203d3e2031363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.128.0.0/13
Signature Algorithm: sha256WithRSAEncryption
2e:9f:49:cf:5c:c0:0b:63:ad:c4:a8:75:42:df:73:21:89:b5:
44:10:f0:ea:cb:7f:11:e1:f3:e7:3b:41:5f:c8:d0:1c:35:2f:
06:25:1d:9e:eb:7c:a7:5a:76:54:03:ae:14:cf:b5:8b:51:39:
b1:da:cc:52:8d:93:8f:b3:76:66:c0:b4:c0:9b:1f:30:58:31:
3b:ca:f5:01:83:cb:13:cf:9d:11:a7:10:ea:a0:40:fb:12:5c:
68:fc:5b:81:22:c0:05:bc:f9:64:aa:a8:c9:89:f9:78:f3:23:
45:55:0e:5e:8f:ef:0d:84:bd:34:41:68:28:74:48:59:97:9f:
68:f8:e4:88:e1:01:0d:01:22:77:5e:6a:94:6b:b7:49:f6:e8:
06:99:64:3e:fc:cc:b2:19:18:dd:22:99:2c:28:72:57:1c:b0:
2d:9b:61:6b:74:57:e6:80:51:80:07:b5:96:b9:d3:35:17:08:
d2:ec:ab:ad:3f:07:a5:4c:2f:cf:98:03:98:b5:72:43:5d:1c:
f1:ed:2e:8a:13:e6:93:03:c8:48:6e:88:00:ba:58:a8:14:f5:
cb:fb:3f:b8:f8:39:9e:2e:5e:0a:ca:6e:c4:5e:f5:22:64:fe:
84:32:8d:06:38:74:a5:09:ed:45:34:76:42:7a:b2:b5:38:9a:
b0:13:4b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:48 2026 by rpki-client