Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/3132332e3234302e302e302f31352d3234203d3e20313331353936.roa
File: 3132332e3234302e302e302f31352d3234203d3e20313331353936.roa (raw, json)
Hash identifier: xgel49SjRv9YNXONBtNtnSB9XMG257fGU6C6htM7uCk=
Subject key identifier: E4:28:7B:6D:B4:77:D6:B5:83:EB:E6:34:75:A8:24:30:AD:8B:94:92
Certificate issuer: /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial: 3AE8089ADC90E2E43A997F071243A250525B9D8A
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TBCOM/0/3132332e3234302e302e302f31352d3234203d3e20313331353936.roa
Signing time: Mon 11 May 2026 16:48:40 +0000
ROA not before: Mon 11 May 2026 16:43:40 +0000
ROA not after: Mon 10 May 2027 16:48:40 +0000
asID: 131596
IP address blocks: 123.240.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e8:08:9a:dc:90:e2:e4:3a:99:7f:07:12:43:a2:50:52:5b:9d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
Validity
Not Before: May 11 16:43:40 2026 GMT
Not After : May 10 16:48:40 2027 GMT
Subject: CN=E4287B6DB477D6B583EBE63475A82430AD8B9492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:ed:d4:64:1c:12:a1:66:6a:3f:96:12:a4:
65:7b:28:23:7d:a2:fc:b0:81:d8:0c:75:ba:8b:b9:
20:fb:bb:71:34:a3:bb:d0:96:1f:86:e5:b2:ff:b0:
8a:e0:39:70:40:ab:a4:0b:35:8b:bd:1e:7c:04:c3:
f9:d2:04:12:d9:94:ad:25:b3:29:5f:0d:10:80:b2:
ad:68:14:94:bf:f7:e6:c5:82:11:1b:a5:6e:12:f6:
22:e3:b6:4a:93:da:e2:aa:b5:66:f2:15:ac:fa:45:
6b:52:8b:7c:21:85:4a:3a:9b:76:ac:f2:9c:7e:22:
3c:dc:f1:aa:7e:fe:bd:e5:0e:cc:c8:94:43:c3:04:
ad:3a:28:84:49:e0:51:9e:cd:43:36:4a:05:ee:2d:
c7:5a:67:f2:f2:ab:a1:77:0a:17:de:c9:1e:8b:f0:
32:5f:d4:5c:71:0c:cc:db:28:07:73:ba:fa:41:6a:
78:b0:b7:6a:14:5e:3d:0e:26:39:cc:54:70:1c:b7:
2a:de:54:c8:f9:0f:7d:c1:71:68:b8:74:b2:93:06:
a2:70:ed:49:e8:e5:ff:15:ee:b2:ad:eb:d9:6e:c9:
2b:95:17:97:ca:b6:6b:e4:80:2b:7b:ba:12:f6:43:
d5:b2:cd:0f:a9:7b:d7:81:e7:b9:31:a8:90:e1:a5:
c5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:28:7B:6D:B4:77:D6:B5:83:EB:E6:34:75:A8:24:30:AD:8B:94:92
X509v3 Authority Key Identifier:
keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/3132332e3234302e302e302f31352d3234203d3e20313331353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.240.0.0/15
Signature Algorithm: sha256WithRSAEncryption
5d:0b:6b:05:fe:ae:2e:39:45:70:f2:eb:bb:8a:f4:4c:f9:c3:
7a:d4:18:2a:80:36:e6:d1:cc:6a:55:2d:79:29:b4:eb:db:24:
4d:6d:62:00:ac:20:10:e7:d8:64:7b:42:e0:2c:24:65:77:2c:
d9:58:1f:08:28:2e:0b:ca:ac:f4:2b:c9:eb:89:ad:66:d3:00:
7d:1b:38:0d:d9:fe:de:d0:e2:58:f3:2e:d8:d9:76:d0:aa:3e:
13:95:2c:8e:9e:f0:5f:3e:c5:61:4a:cd:2f:56:1a:ef:9c:aa:
63:b1:b7:a6:bf:90:2b:f4:db:1a:84:8d:08:8d:57:e7:51:81:
21:a5:d4:64:55:58:5e:de:5f:2e:11:98:33:be:d6:4f:8b:99:
6e:59:05:6d:55:b0:9f:34:32:a1:b4:c7:6e:48:2e:f7:3b:48:
62:10:cf:90:da:25:ed:6d:36:a7:11:1d:13:1a:48:28:a8:4a:
04:cd:8d:dc:25:a7:25:19:67:81:da:fc:b5:7d:91:dc:16:e7:
70:22:cd:0e:03:f6:b1:27:78:47:e5:20:5b:69:af:07:28:a4:
57:c2:92:c5:2b:0d:95:d6:77:9f:18:ce:71:af:f8:32:74:45:
5a:f2:e1:5f:71:07:e4:ae:63:f9:65:e3:a7:a7:94:91:af:ac:
57:ff:cf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:47 2026 by rpki-client