Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e36342e302f32302d3234203d3e203137373039.roa
File: 36312e35382e36342e302f32302d3234203d3e203137373039.roa (raw, json)
Hash identifier: rJCQPNnQOkZU4ibnkWVxCfAcYTUvASriJaHnmn7j/24=
Subject key identifier: 4B:2D:C1:85:B4:3D:C9:0B:0A:CE:56:FE:3F:99:0C:30:1C:1F:41:FC
Certificate issuer: /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial: 09293F348DCDB4C60E7AA3275C577A28952889F4
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e36342e302f32302d3234203d3e203137373039.roa
Signing time: Mon 11 May 2026 17:37:09 +0000
ROA not before: Mon 11 May 2026 17:32:09 +0000
ROA not after: Mon 10 May 2027 17:37:09 +0000
asID: 17709
IP address blocks: 61.58.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:29:3f:34:8d:cd:b4:c6:0e:7a:a3:27:5c:57:7a:28:95:28:89:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
Validity
Not Before: May 11 17:32:09 2026 GMT
Not After : May 10 17:37:09 2027 GMT
Subject: CN=4B2DC185B43DC90B0ACE56FE3F990C301C1F41FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:bc:24:43:27:46:b6:49:8e:f0:1b:db:d7:
a3:83:05:4e:79:88:c7:97:61:da:2b:9b:4c:59:31:
c2:18:f5:c6:db:a7:7e:64:85:13:91:b8:c4:75:47:
17:b5:51:39:f8:88:ee:25:54:bb:66:66:79:fc:29:
6c:ce:43:cd:f3:0d:12:4d:de:a7:77:43:1d:c3:3f:
81:30:05:71:2b:a8:ca:07:a0:12:54:a6:4b:49:14:
63:2b:37:b6:db:d2:33:a7:80:5e:6b:3a:71:68:e9:
e3:98:5a:d3:6b:33:d9:ef:91:2b:7b:ed:a8:0c:88:
c8:ee:77:39:57:7d:7a:ec:d8:0b:07:e7:1b:c5:4b:
15:11:75:1f:7a:30:57:0f:ae:82:85:e1:8a:af:e7:
6c:9e:fc:44:92:0c:c9:fa:4e:6b:e9:7d:23:d8:7e:
43:a2:79:4e:40:bc:b0:eb:96:19:2e:80:66:62:16:
4e:c6:9a:a7:60:00:1d:b4:29:85:02:41:c9:56:b4:
69:71:fc:51:ed:7c:a7:92:55:22:f0:7b:02:88:a7:
7e:9c:13:ca:66:2a:8c:12:07:74:bb:76:40:40:84:
16:e0:ef:6d:ca:33:51:0f:85:df:a2:40:45:38:b8:
1b:9f:bc:54:be:b7:b5:df:4e:e4:19:7b:62:c3:88:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2D:C1:85:B4:3D:C9:0B:0A:CE:56:FE:3F:99:0C:30:1C:1F:41:FC
X509v3 Authority Key Identifier:
keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e36342e302f32302d3234203d3e203137373039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.58.64.0/20
Signature Algorithm: sha256WithRSAEncryption
bd:b6:4e:f0:3e:61:d2:d3:30:06:da:29:bf:81:b0:72:ee:fb:
f4:d3:eb:48:dd:3a:3b:80:43:96:01:c5:a1:f3:1d:41:37:43:
16:18:06:48:bb:0c:e8:d6:a1:6f:78:80:ed:ef:fa:de:af:bc:
6a:0b:f4:d3:2f:e0:2b:33:90:0c:0d:d8:be:be:94:f8:96:93:
0f:a3:f7:9f:8f:5c:13:7f:a5:e9:1f:0b:96:bc:09:6a:3d:91:
68:d3:c0:b3:2e:9a:7c:bf:a2:20:a4:37:22:9d:b8:43:1d:18:
14:1a:f4:4e:ee:7f:1e:76:bc:c5:60:61:f9:52:2a:58:60:fe:
ad:df:7f:16:fc:c7:7b:77:69:53:13:4a:36:0d:8c:f7:29:d9:
94:29:ee:32:2c:7d:55:a6:9d:18:c5:c7:f4:75:f5:3d:10:88:
46:2d:49:e2:bf:6f:0c:2a:15:69:1f:6e:29:a2:e9:a6:c6:0b:
b8:4e:33:32:00:9e:4b:32:69:44:62:9a:c3:87:fa:66:65:69:
eb:ba:7a:5a:c6:8e:02:af:e7:55:78:db:52:bc:fc:64:ca:ca:
cd:e7:5f:1d:a1:37:fd:a1:dc:da:18:c2:55:85:dd:3a:2f:80:
87:c6:af:84:69:d1:c7:97:10:05:59:da:a4:ac:74:75:ea:50:
d1:dd:a7:aa
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUCSk/NI3NtMYOeqMnXFd6KJUoifQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBBQ0Y3NkMzNDUxNTlEMzI0MTMxNUYyOTk3NTI2ODA2
OTY4Q0I0MDAeFw0yNjA1MTExNzMyMDlaFw0yNzA1MTAxNzM3MDlaMDMxMTAvBgNV
BAMTKDRCMkRDMTg1QjQzREM5MEIwQUNFNTZGRTNGOTkwQzMwMUMxRjQxRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCatrwkQydGtkmO8Bvb16ODBU55
iMeXYdorm0xZMcIY9cbbp35khRORuMR1Rxe1UTn4iO4lVLtmZnn8KWzOQ83zDRJN
3qd3Qx3DP4EwBXErqMoHoBJUpktJFGMrN7bb0jOngF5rOnFo6eOYWtNrM9nvkSt7
7agMiMjudzlXfXrs2AsH5xvFSxURdR96MFcProKF4Yqv52ye/ESSDMn6TmvpfSPY
fkOieU5AvLDrlhkugGZiFk7GmqdgAB20KYUCQclWtGlx/FHtfKeSVSLwewKIp36c
E8pmKowSB3S7dkBAhBbg723KM1EPhd+iQEU4uBufvFS+t7XfTuQZe2LDiKF7AgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUSy3BhbQ9yQsKzlb+P5kMMBwfQfwwHwYDVR0j
BBgwFoAUwKz3bDRRWdMkExXymXUmgGloy0AwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEJDT00v
MC9DMEFDRjc2QzM0NTE1OUQzMjQxMzE1RjI5OTc1MjY4MDY5NjhDQjQwLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0MwQUNGNzZDMzQ1MTU5RDMyNDEzMTVGMjk5NzUy
NjgwNjk2OENCNDAuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQkNPTS8wLzM2MzEyZTM1MzgyZTM2
MzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMTM3MzczMDM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
PTpAMA0GCSqGSIb3DQEBCwUAA4IBAQC9tk7wPmHS0zAG2im/gbBy7vv00+tI3To7
gEOWAcWh8x1BN0MWGAZIuwzo1qFveIDt7/rer7xqC/TTL+ArM5AMDdi+vpT4lpMP
o/efj1wTf6XpHwuWvAlqPZFo08CzLpp8v6IgpDcinbhDHRgUGvRO7n8edrzFYGH5
UipYYP6t338W/Md7d2lTE0o2DYz3KdmUKe4yLH1Vpp0Yxcf0dfU9EIhGLUniv28M
KhVpH24poummxgu4TjMyAJ5LMmlEYprDh/pmZWnrunpaxo4Cr+dVeNtSvPxkysrN
518doTf9odzaGMJVhd06L4CHxq+EadHHlxAFWdqkrHR16lDR3aeq
-----END CERTIFICATE-----
Generated at Wed May 13 02:48:16 2026 by rpki-client