Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e37322e302f32312d3234203d3e20313331353936.roa
File: 36312e35382e37322e302f32312d3234203d3e20313331353936.roa (raw, json)
Hash identifier: E6ag80vso5dgU5QIkLx20U7SO5X9UQSmbqxBmfal4AE=
Subject key identifier: 11:5E:FE:88:F7:1D:4B:19:30:D2:0F:A6:93:06:E8:F6:ED:2C:96:EE
Certificate issuer: /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial: 77D4E1A898D4220781531416D145E538FAED56C8
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e37322e302f32312d3234203d3e20313331353936.roa
Signing time: Mon 11 May 2026 16:48:43 +0000
ROA not before: Mon 11 May 2026 16:43:43 +0000
ROA not after: Mon 10 May 2027 16:48:43 +0000
asID: 131596
IP address blocks: 61.58.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:d4:e1:a8:98:d4:22:07:81:53:14:16:d1:45:e5:38:fa:ed:56:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
Validity
Not Before: May 11 16:43:43 2026 GMT
Not After : May 10 16:48:43 2027 GMT
Subject: CN=115EFE88F71D4B1930D20FA69306E8F6ED2C96EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:f4:85:01:60:39:05:51:58:7a:43:32:08:
97:24:b0:d4:50:cd:94:bf:f3:d0:ac:95:8d:49:48:
eb:48:a7:26:78:64:a2:44:c6:98:9b:8b:3e:c9:1f:
ed:7c:6b:45:42:c0:82:67:c8:a8:ca:6c:f2:bf:9f:
c8:60:d1:72:8c:84:75:6f:97:49:b0:06:90:a7:f2:
c0:c7:61:8a:0c:13:1e:2b:90:c6:b4:8c:d0:31:62:
52:12:af:0c:e1:8e:e6:59:97:cf:0e:ec:ac:9a:03:
f2:9d:29:b4:47:6f:e3:4b:a8:c8:52:33:9d:ba:b6:
0c:ad:0b:92:cd:a0:e1:3a:96:a4:bf:36:22:3a:82:
b0:7a:f4:05:9e:b5:27:15:70:97:19:f9:87:e3:f2:
75:7a:48:1c:8e:d6:90:32:d6:93:ce:24:f6:05:5b:
e8:5a:20:56:3f:d1:0a:bb:88:fa:01:c9:24:92:24:
92:0d:f9:ae:81:bd:83:95:30:ac:7f:06:0b:a1:f9:
65:89:8c:01:e3:80:38:6b:38:0a:0e:3f:d2:ae:5a:
e7:96:99:0a:91:8e:53:56:40:ab:50:44:e9:58:e4:
0e:93:53:4d:a9:6a:78:9c:f5:6e:46:37:4b:c5:da:
04:f5:09:7e:f6:c0:1f:bd:c4:f8:31:79:02:d0:3b:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5E:FE:88:F7:1D:4B:19:30:D2:0F:A6:93:06:E8:F6:ED:2C:96:EE
X509v3 Authority Key Identifier:
keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e37322e302f32312d3234203d3e20313331353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.58.72.0/21
Signature Algorithm: sha256WithRSAEncryption
84:e7:ea:51:cf:62:53:cd:58:2d:ca:2b:35:72:29:b5:71:c2:
d2:10:34:d8:65:00:41:5d:d1:05:9a:1b:53:75:6f:1d:2c:d1:
63:06:b8:25:ec:63:23:c5:9f:77:2c:7a:30:91:57:4f:4e:50:
c3:8d:70:74:a8:87:00:a0:cf:46:49:b4:c6:d1:f9:24:71:7d:
49:e8:f9:9f:fc:52:30:62:13:29:37:51:50:4c:c4:50:5d:8c:
20:30:9b:00:f2:01:28:f4:80:8b:fc:f1:c2:a3:82:05:41:41:
e5:7a:1c:d7:c9:43:c8:23:24:8d:60:33:ad:b2:dd:27:ca:a6:
8b:32:7d:ae:9b:0b:f6:62:a4:fb:b5:98:51:c1:00:5d:77:dd:
c7:af:cc:1a:9e:aa:76:8e:a7:9b:58:c2:e2:0d:66:15:1f:21:
e7:9a:89:53:3c:93:b4:96:cf:e3:ae:42:f0:d9:d1:37:09:91:
ea:e3:1c:e5:5d:f6:e0:b3:b4:9f:01:17:92:5e:bd:32:f5:b6:
26:6b:46:05:33:83:7a:b4:7c:38:26:1d:6c:ce:75:25:49:c0:
4b:7f:50:07:b3:8e:03:96:82:c7:d8:74:22:e3:bf:7f:5b:b7:
1a:35:81:ac:58:5b:55:68:d9:a6:a0:65:75:be:3a:bd:d7:d0:
66:68:ef:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:15 2026 by rpki-client