Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3133322e302e302f31362d3136203d3e2031363539.roa
File: 3134302e3133322e302e302f31362d3136203d3e2031363539.roa (raw, json)
Hash identifier: Z/2vTJsXgeUAePQAtOoF5y/rVOlzNThd6KbhuYjZYPQ=
Subject key identifier: 4C:4C:81:28:F8:1E:BB:72:CE:93:2C:3B:E1:C8:DA:64:38:4B:C0:6C
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 606A52D23A2A2F6D86FA85B8978F6A0F79E73DFF
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133322e302e302f31362d3136203d3e2031363539.roa
Signing time: Mon 11 May 2026 21:00:25 +0000
ROA not before: Mon 11 May 2026 20:55:25 +0000
ROA not after: Mon 10 May 2027 21:00:25 +0000
asID: 1659
IP address blocks: 140.132.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:6a:52:d2:3a:2a:2f:6d:86:fa:85:b8:97:8f:6a:0f:79:e7:3d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: May 11 20:55:25 2026 GMT
Not After : May 10 21:00:25 2027 GMT
Subject: CN=4C4C8128F81EBB72CE932C3BE1C8DA64384BC06C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:ed:1a:27:1e:d3:31:03:6d:31:26:00:97:
fd:21:dc:e8:7f:2b:f5:fa:a1:24:eb:fb:df:c4:30:
e4:dc:bf:ef:50:55:69:94:66:8a:8d:17:d6:44:1d:
26:08:7a:e4:83:f0:39:cd:88:c5:56:ab:e1:83:c7:
01:f7:1d:7f:de:4d:9c:ec:1d:3f:ef:44:93:f9:1c:
3b:48:3e:7d:a7:a2:2b:5e:6a:05:37:0d:94:c6:2e:
8f:89:97:5f:41:16:fe:7b:6b:4e:7c:b3:92:cb:64:
bf:ad:8a:36:d5:0f:b5:3a:31:20:a1:fa:55:10:ea:
aa:7d:75:99:1e:49:e3:cd:90:8e:11:a5:91:9d:2f:
a3:13:e5:1b:73:01:1b:d2:de:37:04:25:bf:e5:ac:
42:20:2c:c8:34:5d:3b:fb:18:b9:2c:54:04:39:8b:
6a:20:d4:5f:77:1e:58:dd:1d:41:0a:85:9e:78:d1:
d9:ad:1b:3d:d4:af:08:4d:8e:18:4e:cd:a8:28:1d:
be:4b:a1:17:42:f8:45:a7:7d:8c:e5:6f:3c:52:ed:
1b:7a:08:08:62:d0:37:cc:28:ee:17:81:1b:ff:b2:
ac:fe:93:6a:0a:a6:b9:ab:33:1a:61:91:f0:f7:ae:
18:df:06:6b:fc:a0:ae:79:12:4e:fe:c9:f2:c6:7a:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4C:81:28:F8:1E:BB:72:CE:93:2C:3B:E1:C8:DA:64:38:4B:C0:6C
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133322e302e302f31362d3136203d3e2031363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.132.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:48:64:5b:6b:ca:92:a8:41:3f:40:54:9e:f0:46:a6:02:af:
73:82:23:5a:aa:40:b0:95:24:35:5f:1d:82:0a:eb:bb:4e:49:
9c:36:b5:ac:23:0e:99:b3:49:3e:cd:a2:71:1f:df:24:4c:af:
b4:7c:d3:cf:49:e9:8a:5c:2b:05:93:ac:f8:10:ab:ed:0f:98:
fe:1e:b6:69:75:cc:d3:47:4d:c9:8c:96:ad:d0:c0:92:b6:f6:
40:77:e8:6f:fc:eb:7f:d8:16:45:fe:89:c1:43:df:99:f2:b6:
fb:51:39:81:02:3c:e4:ca:f7:31:0c:23:56:07:a8:cb:d3:d0:
dc:89:73:be:48:e7:d4:12:9e:0a:89:11:2b:14:01:2d:07:fa:
87:33:ea:e8:3a:fc:91:e2:15:43:d6:f3:88:00:75:c1:1a:a3:
f5:8a:61:1f:8e:e3:99:5f:20:0c:7a:35:67:8d:b3:1b:6e:63:
b1:f5:0a:a5:25:8e:0d:21:03:18:d1:31:f8:ae:bf:11:15:31:
0d:4f:ee:1c:66:4a:aa:92:1b:34:4b:5c:8c:16:d4:7e:37:a1:
d4:c6:d1:b0:ac:2d:c6:7d:d1:ac:ee:17:7b:29:e0:d8:b7:db:
2c:75:af:5a:20:cd:3f:68:e3:40:fe:01:37:74:ea:be:ca:33:
6a:4b:cf:59
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgIUYGpS0joqL22G+oW4l49qD3nnPf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3
NkIzQ0Y2QTAeFw0yNjA1MTEyMDU1MjVaFw0yNzA1MTAyMTAwMjVaMDMxMTAvBgNV
BAMTKDRDNEM4MTI4RjgxRUJCNzJDRTkzMkMzQkUxQzhEQTY0Mzg0QkMwNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCe0aJx7TMQNtMSYAl/0h3Oh/
K/X6oSTr+9/EMOTcv+9QVWmUZoqNF9ZEHSYIeuSD8DnNiMVWq+GDxwH3HX/eTZzs
HT/vRJP5HDtIPn2noiteagU3DZTGLo+Jl19BFv57a058s5LLZL+tijbVD7U6MSCh
+lUQ6qp9dZkeSePNkI4RpZGdL6MT5RtzARvS3jcEJb/lrEIgLMg0XTv7GLksVAQ5
i2og1F93HljdHUEKhZ540dmtGz3UrwhNjhhOzagoHb5LoRdC+EWnfYzlbzxS7Rt6
CAhi0DfMKO4XgRv/sqz+k2oKprmrMxphkfD3rhjfBmv8oK55Ek7+yfLGeth7AgMB
AAGjggHcMIIB2DAdBgNVHQ4EFgQUTEyBKPgeu3LOkyw74cjaZDhLwGwwHwYDVR0j
BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND
RjUwNzZCM0NGNkEuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzQzMDJlMzEzMzMy
MmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNkM2UyMDMxMzYzNTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
jIQwDQYJKoZIhvcNAQELBQADggEBACxIZFtrypKoQT9AVJ7wRqYCr3OCI1qqQLCV
JDVfHYIK67tOSZw2tawjDpmzST7NonEf3yRMr7R8089J6YpcKwWTrPgQq+0PmP4e
tml1zNNHTcmMlq3QwJK29kB36G/863/YFkX+icFD35nytvtROYECPOTK9zEMI1YH
qMvT0NyJc75I59QSngqJESsUAS0H+ocz6ug6/JHiFUPW84gAdcEao/WKYR+O45lf
IAx6NWeNsxtuY7H1CqUljg0hAxjRMfiuvxEVMQ1P7hxmSqqSGzRLXIwW1H43odTG
0bCsLcZ90azuF3sp4Ni32yx1r1ogzT9o40D+ATd06r7KM2pLz1k=
-----END CERTIFICATE-----
Generated at Wed May 13 02:47:57 2026 by rpki-client