Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3133382e302e302f31362d3136203d3e2031363539.roa
File: 3134302e3133382e302e302f31362d3136203d3e2031363539.roa (raw, json)
Hash identifier: wdiytFWFPw95z3O2BX00Kz4WC0VrDGf6DPPWxEEsmzw=
Subject key identifier: C0:0F:55:8B:F3:46:44:DA:03:5C:2E:14:FC:AE:15:12:DD:60:DA:66
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 1E700184B64BFE684112332579B55B543D1CEB86
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133382e302e302f31362d3136203d3e2031363539.roa
Signing time: Mon 11 May 2026 20:59:13 +0000
ROA not before: Mon 11 May 2026 20:54:13 +0000
ROA not after: Mon 10 May 2027 20:59:13 +0000
asID: 1659
IP address blocks: 140.138.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:70:01:84:b6:4b:fe:68:41:12:33:25:79:b5:5b:54:3d:1c:eb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: May 11 20:54:13 2026 GMT
Not After : May 10 20:59:13 2027 GMT
Subject: CN=C00F558BF34644DA035C2E14FCAE1512DD60DA66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:2e:e4:8c:47:43:7a:ce:7d:3d:12:ed:ba:
75:dd:99:e3:4f:9d:d3:c0:11:3c:09:e6:3b:28:dd:
98:ce:ef:ca:04:1e:d4:8d:2f:b2:48:ba:65:21:ae:
90:64:ef:fe:ec:83:d8:21:9f:60:1a:34:c2:c1:87:
49:51:14:03:e5:60:5a:5d:0f:77:1a:44:32:13:d5:
35:ce:10:8b:62:bf:c8:05:5f:66:b0:78:ca:c1:c0:
a1:4d:1a:1a:52:c4:91:e8:b4:83:23:e0:aa:15:2c:
86:f7:56:86:0f:5e:cf:4d:ca:7b:83:9f:18:bf:50:
53:38:2e:e2:c4:8e:f6:08:ba:5f:ec:5c:89:e0:be:
e2:72:24:2d:01:2c:4a:c9:1a:7e:14:f3:a5:2f:ba:
88:ee:19:6f:50:81:4e:16:91:09:6f:da:05:f9:7a:
4e:7a:4e:63:45:3f:e9:1b:48:c6:4f:11:12:d2:f4:
da:57:8d:60:ad:7b:61:5e:4c:3e:6b:34:f0:bf:8e:
7a:ce:ef:d5:f7:97:c0:74:44:fb:ea:46:02:77:e3:
e3:bd:eb:9d:35:b4:65:fb:ee:d3:66:f7:5a:d6:25:
7c:e4:91:c0:6c:f8:ec:c8:ba:31:a7:6a:f4:bc:db:
2a:41:d4:96:20:dc:0b:72:11:12:e9:2c:17:21:ce:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0F:55:8B:F3:46:44:DA:03:5C:2E:14:FC:AE:15:12:DD:60:DA:66
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133382e302e302f31362d3136203d3e2031363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.138.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4d:c9:95:47:f8:15:a7:f5:d9:3a:01:5c:d2:2e:12:74:6f:71:
1a:a7:dd:d8:6f:08:5c:0d:8a:10:a2:ab:a2:52:55:2f:28:36:
1d:a5:53:7e:8e:89:85:9c:3f:e6:61:ab:7c:fb:49:ac:ad:9d:
d4:5f:39:95:d8:24:f7:fc:a4:cc:f3:7f:e5:04:15:f3:c6:e4:
81:59:58:d4:61:fa:18:48:ab:cc:a8:d4:1d:51:08:76:65:19:
32:70:10:4f:13:81:b9:ee:11:35:45:83:b4:de:c1:ba:90:59:
fc:c5:53:c2:37:b9:96:52:f9:57:f2:1b:f4:bd:7a:14:0b:85:
b2:86:35:2b:d0:b0:bf:2e:a4:75:c4:d7:0c:bf:2e:9c:26:91:
fd:02:84:22:6d:37:93:ce:76:3f:79:72:22:ca:0a:d8:ce:c1:
dd:a3:20:1d:61:f7:e4:ea:07:c0:e8:9e:8d:a5:f9:5a:15:bb:
bb:31:7e:8b:af:12:be:3f:5d:19:35:b4:32:3a:20:5c:ed:c0:
f0:9a:61:63:53:2b:54:6e:56:bf:dc:33:f6:41:52:43:eb:cf:
67:31:15:9b:fa:b9:5b:11:4c:af:bb:55:75:8a:64:8f:68:73:
cd:48:43:17:46:0b:2e:1b:85:1e:58:ae:5e:5e:a7:eb:57:46:
c9:eb:25:0a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgIUHnABhLZL/mhBEjMlebVbVD0c64YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3
NkIzQ0Y2QTAeFw0yNjA1MTEyMDU0MTNaFw0yNzA1MTAyMDU5MTNaMDMxMTAvBgNV
BAMTKEMwMEY1NThCRjM0NjQ0REEwMzVDMkUxNEZDQUUxNTEyREQ2MERBNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfCC7kjEdDes59PRLtunXdmeNP
ndPAETwJ5jso3ZjO78oEHtSNL7JIumUhrpBk7/7sg9ghn2AaNMLBh0lRFAPlYFpd
D3caRDIT1TXOEItiv8gFX2aweMrBwKFNGhpSxJHotIMj4KoVLIb3VoYPXs9NynuD
nxi/UFM4LuLEjvYIul/sXIngvuJyJC0BLErJGn4U86UvuojuGW9QgU4WkQlv2gX5
ek56TmNFP+kbSMZPERLS9NpXjWCte2FeTD5rNPC/jnrO79X3l8B0RPvqRgJ34+O9
6501tGX77tNm91rWJXzkkcBs+OzIujGnavS82ypB1JYg3AtyERLpLBchziTzAgMB
AAGjggHcMIIB2DAdBgNVHQ4EFgQUwA9Vi/NGRNoDXC4U/K4VEt1g2mYwHwYDVR0j
BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND
RjUwNzZCM0NGNkEuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzQzMDJlMzEzMzM4
MmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNkM2UyMDMxMzYzNTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
jIowDQYJKoZIhvcNAQELBQADggEBAE3JlUf4Faf12ToBXNIuEnRvcRqn3dhvCFwN
ihCiq6JSVS8oNh2lU36OiYWcP+Zhq3z7SaytndRfOZXYJPf8pMzzf+UEFfPG5IFZ
WNRh+hhIq8yo1B1RCHZlGTJwEE8TgbnuETVFg7TewbqQWfzFU8I3uZZS+VfyG/S9
ehQLhbKGNSvQsL8upHXE1wy/Lpwmkf0ChCJtN5POdj95ciLKCtjOwd2jIB1h9+Tq
B8Dono2l+VoVu7sxfouvEr4/XRk1tDI6IFztwPCaYWNTK1RuVr/cM/ZBUkPrz2cx
FZv6uVsRTK+7VXWKZI9oc81IQxdGCy4bhR5Yrl5ep+tXRsnrJQo=
-----END CERTIFICATE-----
Generated at Wed May 13 02:51:23 2026 by rpki-client