Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3132382e302e302f31362d3136203d3e2031363539.roa
File: 3134302e3132382e302e302f31362d3136203d3e2031363539.roa (raw, json)
Hash identifier: 54/nbMVNuUia+0IjIwJ1LorXuY/uIwJtzE5IwhswqbQ=
Subject key identifier: 85:1A:87:85:F6:44:EF:28:19:9F:FC:23:90:82:E8:18:78:EE:3F:02
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 6F6AD241DF5404FC0524436954B1C18A86D1E0D1
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132382e302e302f31362d3136203d3e2031363539.roa
Signing time: Mon 11 May 2026 20:59:33 +0000
ROA not before: Mon 11 May 2026 20:54:33 +0000
ROA not after: Mon 10 May 2027 20:59:33 +0000
asID: 1659
IP address blocks: 140.128.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:6a:d2:41:df:54:04:fc:05:24:43:69:54:b1:c1:8a:86:d1:e0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: May 11 20:54:33 2026 GMT
Not After : May 10 20:59:33 2027 GMT
Subject: CN=851A8785F644EF28199FFC239082E81878EE3F02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:fa:47:ac:07:77:be:ce:d8:a0:40:1b:16:
68:d9:e8:a2:27:e0:52:c4:da:93:e7:28:6e:98:b2:
de:5e:a6:85:4c:aa:cc:f3:68:be:40:02:72:46:c6:
5e:9c:60:89:83:09:7e:9b:69:20:23:cf:b5:1e:3b:
1a:17:b1:30:6b:35:bd:2e:fd:68:a9:db:25:29:6e:
82:ed:a0:29:21:28:fe:19:ad:70:fa:e6:ed:89:db:
82:11:99:4f:e7:d1:bb:31:7c:62:e2:23:e4:e3:01:
26:cb:a4:62:32:d6:fa:f0:58:d4:f6:23:f3:54:0f:
6d:bd:49:b1:65:66:85:5e:9c:48:4f:3c:20:54:63:
73:52:a9:2d:93:d2:01:81:31:a5:9f:9a:3a:8a:8e:
13:1e:98:8d:5d:1a:41:11:27:25:31:62:58:70:9f:
03:63:67:95:03:68:20:18:7b:e9:8c:84:95:7b:e3:
40:28:ee:7b:fe:9e:66:90:d9:9a:85:8e:9c:e8:be:
06:8f:8d:98:9e:4e:5e:26:6b:e8:fa:b6:db:e2:15:
42:70:17:41:67:66:40:00:5e:c2:b8:8d:29:b9:a7:
05:dc:d6:62:a9:ad:4f:88:f4:74:1b:5f:02:88:94:
c6:21:55:60:12:31:7f:fd:ae:09:ea:cf:cc:83:09:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1A:87:85:F6:44:EF:28:19:9F:FC:23:90:82:E8:18:78:EE:3F:02
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132382e302e302f31362d3136203d3e2031363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.128.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:e0:fc:6f:65:16:dc:a8:fb:1b:c4:de:0e:e9:57:96:1a:22:
91:d7:c3:20:f1:ff:45:e5:17:86:32:c5:8b:dc:d1:28:36:80:
13:0f:ce:a5:27:8f:75:46:ac:72:3e:46:82:2b:a5:56:d8:27:
1d:29:86:5c:f1:9c:e8:79:6c:ed:c2:2d:bf:80:42:5c:31:4f:
83:b5:af:4e:0a:7f:85:d3:47:78:76:65:88:4b:39:59:e5:6b:
3b:70:16:f4:3b:8e:ae:5d:b4:9b:d0:7f:b3:31:b0:3e:7f:a3:
62:59:26:16:da:2b:cf:4d:9d:96:5c:1e:df:e5:71:73:04:3f:
db:8d:3f:16:69:7b:11:2e:a8:ad:fe:ad:18:62:02:67:55:9d:
d3:74:da:13:64:a2:73:f2:88:55:b7:6d:a6:75:d0:cd:e4:b7:
96:75:0a:d5:e1:6b:d4:d4:3b:26:52:b4:f9:3f:b4:e7:28:df:
35:1b:30:d6:f9:ec:ab:fb:e0:5d:89:f2:93:00:b6:08:ff:38:
0d:63:3f:c0:ef:71:cd:7f:08:08:af:68:d5:86:47:81:5f:3c:
57:ab:db:04:b0:5b:b7:85:eb:a2:b4:33:a1:aa:af:38:1f:23:
a4:ed:64:01:8a:a0:8a:45:4c:b1:c6:93:fd:0b:ab:87:28:5b:
3b:1f:cc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:39:52 2026 by rpki-client