Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/3132332e302e3139322e302f31382d3234203d3e203137373039.roa
File: 3132332e302e3139322e302f31382d3234203d3e203137373039.roa (raw, json)
Hash identifier: BmTeR84/bWZgqIlo1Zbi+c0CtabuOwYR7JNBhVsFSHg=
Subject key identifier: D7:5B:54:68:A5:DA:36:AD:B4:C6:93:53:95:BA:5C:E5:7D:A0:32:BF
Certificate issuer: /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial: 7409244A97398A8471860CBF4E86FE1894D7B67E
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TBCOM/0/3132332e302e3139322e302f31382d3234203d3e203137373039.roa
Signing time: Mon 11 May 2026 17:37:02 +0000
ROA not before: Mon 11 May 2026 17:32:02 +0000
ROA not after: Mon 10 May 2027 17:37:02 +0000
asID: 17709
IP address blocks: 123.0.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:09:24:4a:97:39:8a:84:71:86:0c:bf:4e:86:fe:18:94:d7:b6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
Validity
Not Before: May 11 17:32:02 2026 GMT
Not After : May 10 17:37:02 2027 GMT
Subject: CN=D75B5468A5DA36ADB4C6935395BA5CE57DA032BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c2:5d:00:2f:85:73:f7:2b:55:b5:a1:dc:89:
6e:48:e7:0d:48:a4:8e:2a:fc:fd:70:31:ff:79:03:
c3:09:5e:f5:22:c9:9d:78:00:aa:6b:31:df:44:a2:
f5:42:d3:ff:f8:b0:de:ad:5f:3b:20:fc:39:88:1b:
4d:67:5c:bd:70:21:8f:77:77:66:66:dd:d7:87:ef:
db:c2:fa:76:3c:48:30:74:dd:43:ca:d5:33:46:7f:
49:d0:93:f7:80:ad:35:89:01:50:8c:79:8d:4c:4d:
3e:6c:98:0f:42:9b:fa:69:35:42:eb:bb:8b:82:8e:
50:8a:11:12:4a:a9:d5:53:c1:29:fe:ae:d1:e4:fb:
11:9e:84:68:cd:7a:47:15:27:18:e1:33:ce:6b:90:
3d:65:b4:5e:71:31:56:f8:11:9f:a7:db:7c:ea:da:
40:79:9a:5a:2e:c1:a8:c2:aa:13:7c:97:dc:f6:75:
8b:8c:7b:0b:67:b7:bf:11:bc:8d:16:56:07:89:0a:
71:30:a1:af:7f:e3:e1:65:ff:a3:c6:c4:49:93:6e:
1c:9b:4a:d1:0c:47:e1:1f:b3:36:59:32:ef:8e:06:
4f:0a:4a:b7:39:1a:23:34:c1:f5:11:bd:52:40:ec:
aa:be:64:85:e3:14:a6:60:98:b1:71:97:08:94:15:
8e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5B:54:68:A5:DA:36:AD:B4:C6:93:53:95:BA:5C:E5:7D:A0:32:BF
X509v3 Authority Key Identifier:
keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/3132332e302e3139322e302f31382d3234203d3e203137373039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.0.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b5:b3:85:96:94:e0:bf:ce:9a:51:6d:08:8a:19:32:c1:18:25:
42:50:6a:c3:e1:4f:3c:ca:94:64:24:9f:65:b1:f9:d7:e5:9e:
cf:0c:e1:12:61:0e:cf:2a:ca:d6:97:c7:1c:5d:31:50:4f:c3:
a3:02:9b:3c:82:e1:12:b1:6d:13:dc:b0:88:74:31:3a:78:75:
bf:40:3e:35:bf:7e:07:d4:e0:92:22:28:3b:e8:86:0b:94:df:
23:86:18:94:7f:7e:83:62:bd:7e:99:cc:31:d5:d3:53:f1:38:
77:30:5e:89:5d:03:e2:41:e5:df:6a:31:57:d5:37:4e:94:7e:
7d:e4:dc:47:dd:6f:32:29:65:e6:34:6b:fd:12:88:7f:0d:fd:
85:2b:e9:f7:34:31:3a:85:9d:f2:5f:04:d5:7b:0d:60:ec:86:
c4:a2:0a:c9:bd:72:d9:35:d7:75:bd:bf:6e:ef:ce:4d:f5:fa:
d3:ef:29:20:de:b7:2e:2e:b6:c2:02:89:00:db:0a:ac:75:a9:
17:f5:eb:a9:b9:cd:bb:0d:15:94:1e:46:7b:05:9d:cf:de:86:
1b:ae:ca:18:53:8f:c9:a6:28:8f:e2:a0:04:9f:53:f9:f1:c3:
75:74:fe:3f:a2:bd:31:0a:82:92:c3:59:6b:58:4d:0c:bf:d0:
11:30:1d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:10 2026 by rpki-client