Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e36342e302f32312d3234203d3e20313331353936.roa
File: 36312e35382e36342e302f32312d3234203d3e20313331353936.roa (raw, json)
Hash identifier: X/gcMEo6XeECJpzTPyR9M1+wMFb4HV1UllVM0peyk+k=
Subject key identifier: FF:22:14:E1:C8:87:E6:91:4F:73:EA:CE:C9:68:F5:7C:DB:EE:12:6C
Certificate issuer: /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial: 0466561D41C68FE6C6315DBF52D36146BD8F42DD
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e36342e302f32312d3234203d3e20313331353936.roa
Signing time: Mon 11 May 2026 16:48:42 +0000
ROA not before: Mon 11 May 2026 16:43:42 +0000
ROA not after: Mon 10 May 2027 16:48:42 +0000
asID: 131596
IP address blocks: 61.58.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:66:56:1d:41:c6:8f:e6:c6:31:5d:bf:52:d3:61:46:bd:8f:42:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
Validity
Not Before: May 11 16:43:42 2026 GMT
Not After : May 10 16:48:42 2027 GMT
Subject: CN=FF2214E1C887E6914F73EACEC968F57CDBEE126C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fd:09:e6:ec:18:77:da:55:7d:42:30:65:05:
76:10:6d:30:79:63:1f:0b:7a:c3:6d:d5:b7:3b:9d:
cb:8f:0f:10:dc:3c:e9:60:0c:05:30:34:0a:d1:b0:
a3:71:6d:0d:0e:bd:49:6d:27:04:8d:a3:22:e3:e0:
87:69:98:ca:a8:1f:1f:e7:54:22:4e:b1:a5:67:8e:
90:13:2d:6a:32:19:8c:34:12:43:da:e5:1d:c4:78:
b9:dc:75:0f:39:d0:19:6a:33:d2:40:32:df:d2:8b:
7d:4d:77:03:68:45:de:27:d0:d8:a1:0d:29:04:33:
f3:78:df:68:dd:d5:1f:13:cc:cb:dc:17:55:bf:38:
ea:60:05:42:57:c8:b9:97:1e:98:62:71:26:78:92:
93:da:f8:5a:1b:90:c2:63:7e:01:f1:33:6c:e8:31:
2f:76:b5:6d:fe:18:ed:ae:6d:a6:cc:d5:04:81:64:
17:c8:e5:eb:7d:4c:a6:e7:06:74:5c:26:0d:29:51:
e9:b6:98:b9:62:95:78:e0:98:8f:da:a7:0d:b6:02:
29:50:72:29:23:f9:f0:2c:e9:a8:6f:dc:75:f6:61:
6c:08:23:0a:09:4d:ef:1b:f8:21:b7:38:15:0e:5d:
9c:28:c3:d4:07:f4:9e:00:13:a5:25:79:8c:06:5b:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:22:14:E1:C8:87:E6:91:4F:73:EA:CE:C9:68:F5:7C:DB:EE:12:6C
X509v3 Authority Key Identifier:
keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e36342e302f32312d3234203d3e20313331353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.58.64.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:a2:87:bd:53:31:a7:6d:e4:10:8a:29:33:19:30:07:cc:bf:
97:56:63:4f:cb:49:a0:28:fb:1d:1f:54:3b:1b:72:bc:e2:f7:
e2:96:7e:07:f5:0f:05:15:24:c1:29:87:ca:ad:39:84:04:62:
fd:8c:3d:ef:41:5c:77:9b:19:45:bd:40:aa:3e:da:3f:c8:b8:
9a:3b:34:e5:e6:17:91:d7:3e:2e:61:e2:68:06:d6:16:57:5b:
ac:16:59:26:49:1e:1e:31:e7:dd:f5:22:70:c9:0a:23:b5:20:
1e:b4:7e:ef:b5:c8:31:ec:a9:35:50:9d:07:5f:1d:74:73:4c:
86:16:d4:22:23:dd:f8:4d:db:00:50:4c:77:f1:85:a5:e3:08:
73:67:55:57:44:06:d0:16:03:f0:59:8f:c7:af:e5:e7:95:67:
7c:ab:92:71:57:b5:c8:4c:f6:11:26:86:2d:18:bf:e2:69:ae:
9e:73:d0:cc:8b:cc:91:85:4a:cb:b8:3b:ac:4e:0d:de:dd:7e:
66:1a:66:8b:e9:1b:9f:03:d6:ed:f2:40:ba:af:1e:89:05:69:
dd:07:7d:ad:55:60:d3:a6:7a:c8:11:3c:3e:1a:5d:73:f9:b8:
d3:b0:e3:6f:27:24:6a:0b:8b:76:30:5f:de:6d:24:88:d6:10:
d5:e8:8e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:19 2026 by rpki-client