Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e36342e302f32312d3234203d3e203137373039.roa
File: 36312e35382e36342e302f32312d3234203d3e203137373039.roa (raw, json)
Hash identifier: OnZGh9LSHReUMa2f3nST4+hcFzQnd7DRD5WPfCYEeuU=
Subject key identifier: 17:2E:33:77:82:E6:E6:4B:4D:4F:2F:8F:29:1E:7F:F1:0C:02:FB:D6
Certificate issuer: /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial: 611138233B7C049E4716531C3749C8721021703B
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e36342e302f32312d3234203d3e203137373039.roa
Signing time: Mon 11 May 2026 17:37:09 +0000
ROA not before: Mon 11 May 2026 17:32:09 +0000
ROA not after: Mon 10 May 2027 17:37:09 +0000
asID: 17709
IP address blocks: 61.58.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:11:38:23:3b:7c:04:9e:47:16:53:1c:37:49:c8:72:10:21:70:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
Validity
Not Before: May 11 17:32:09 2026 GMT
Not After : May 10 17:37:09 2027 GMT
Subject: CN=172E337782E6E64B4D4F2F8F291E7FF10C02FBD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:f9:d7:86:40:85:7c:1c:28:6a:ff:be:ab:
c9:ad:f4:21:cd:1f:cf:9d:14:96:81:4e:0b:0c:dc:
9a:2d:fe:48:49:9a:c0:d8:7f:a3:bb:b7:4a:af:06:
0e:31:e9:aa:a7:4d:73:b3:14:ef:88:79:84:3d:58:
6d:ea:3f:27:c0:60:96:d0:8b:13:5f:c8:72:2e:8b:
49:4c:b9:0c:30:f0:c9:d8:41:8d:d0:fc:04:4c:ce:
59:16:83:11:fc:9c:8d:78:d8:50:a2:60:fe:77:35:
52:8d:68:75:a1:69:0d:c8:be:3a:e8:8c:3d:ec:87:
26:d1:d1:87:33:04:5d:5f:68:be:6e:92:55:39:b5:
4d:f5:9b:18:da:ee:08:96:55:90:76:bd:fb:b4:b6:
a8:3f:f1:39:2c:bb:23:08:a6:fd:69:df:b7:f2:dd:
c6:dc:e7:6d:9c:37:34:18:a2:44:2e:ce:67:46:c1:
a5:63:e6:25:46:c7:96:db:d4:b3:00:30:c4:8a:62:
95:e8:46:35:87:99:fb:19:05:c4:0e:c8:d6:05:00:
ce:b4:2a:44:04:ca:95:d3:2c:72:fe:7e:4e:b8:1d:
39:b3:a0:f6:92:81:63:a6:3d:14:60:9e:e0:63:3f:
cb:51:b7:04:81:b8:a0:37:35:70:aa:a5:29:32:ff:
00:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2E:33:77:82:E6:E6:4B:4D:4F:2F:8F:29:1E:7F:F1:0C:02:FB:D6
X509v3 Authority Key Identifier:
keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e36342e302f32312d3234203d3e203137373039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.58.64.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:47:fe:a6:23:c8:95:e6:be:e8:67:a5:d7:cb:6f:21:9b:84:
2b:c5:ba:3e:59:e3:4a:04:65:31:22:9c:32:40:ed:c9:28:25:
5c:6a:29:58:22:d7:30:b9:da:35:3d:83:08:55:9c:aa:54:67:
48:d8:ee:a8:f4:7a:45:10:e3:e6:14:95:53:46:f7:e7:cc:ce:
95:16:f4:7b:38:17:a8:69:be:e2:b6:3a:26:0b:23:94:22:7e:
12:cc:d6:fd:7e:c9:7f:52:a7:89:03:e2:d7:0c:6d:28:3d:7b:
16:0d:d9:bb:ce:81:b7:b2:2a:c7:94:c0:54:a5:05:a1:a7:72:
af:cc:03:58:f2:4d:80:b1:66:2f:49:0d:14:3c:27:71:75:6a:
de:44:f9:58:90:51:7e:d0:ca:48:01:df:ef:e6:23:a1:c3:69:
d0:e0:13:67:b4:c5:e8:d0:ae:13:7d:3d:b4:88:06:77:94:94:
4d:9c:01:91:e2:00:75:5f:12:1f:10:6b:3f:23:58:50:47:0b:
82:a6:d6:97:33:de:d7:1c:2c:d2:48:01:02:2e:d5:45:69:2f:
f8:ac:7a:01:a5:c3:2a:8f:fd:f0:f2:55:6f:da:d6:2a:a8:ee:
d4:7f:2d:b5:a2:0d:03:8b:9c:1b:0e:f1:02:86:d3:c1:cc:30:
12:bd:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:13 2026 by rpki-client