Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e38302e302f32302d3234203d3e20313331353936.roa
File: 36312e35382e38302e302f32302d3234203d3e20313331353936.roa (raw, json)
Hash identifier: If+OoJmQX+1mJAGjPgQkzFDPGQ7RfaBr644I1v7rbyU=
Subject key identifier: 73:67:C2:08:17:ED:90:6E:73:39:2C:54:6C:60:7D:DE:26:32:F1:F7
Certificate issuer: /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial: 7099D995E9BBC41FC83C70A3E3C0405CB731CA20
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e38302e302f32302d3234203d3e20313331353936.roa
Signing time: Mon 11 May 2026 16:48:38 +0000
ROA not before: Mon 11 May 2026 16:43:38 +0000
ROA not after: Mon 10 May 2027 16:48:38 +0000
asID: 131596
IP address blocks: 61.58.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:99:d9:95:e9:bb:c4:1f:c8:3c:70:a3:e3:c0:40:5c:b7:31:ca:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
Validity
Not Before: May 11 16:43:38 2026 GMT
Not After : May 10 16:48:38 2027 GMT
Subject: CN=7367C20817ED906E73392C546C607DDE2632F1F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:92:c2:af:17:68:45:45:6b:b6:dd:d0:0a:
65:19:3c:3e:6e:35:fd:06:f4:47:64:a5:9d:2b:65:
96:88:7e:d1:f0:41:a8:2a:97:7e:aa:88:d2:f8:1a:
7b:ab:19:43:91:35:51:2b:94:be:53:f6:ad:dd:2f:
cd:3a:0d:76:f8:af:6c:40:c7:96:2d:c7:bc:42:95:
37:4c:2e:b0:4b:4c:9e:07:09:70:7d:56:e0:19:18:
1d:83:39:05:d8:6a:37:d1:6c:11:19:90:f4:71:71:
2f:d2:d8:7d:a1:5a:41:ca:54:62:c4:bc:95:99:5a:
fe:92:cf:c5:a0:64:77:09:6b:ac:72:40:e3:72:c3:
96:bd:11:d4:97:c3:1b:44:ce:ac:65:83:47:ce:aa:
19:79:00:17:cb:0d:83:5d:70:46:c0:3b:9d:a4:31:
83:84:e1:03:9a:45:5e:f0:b9:a9:5b:d1:b3:0a:dc:
41:64:e9:6c:2e:60:6b:f5:da:ae:0d:5c:7a:c9:db:
29:e1:60:ba:4f:a2:03:b5:ba:3f:27:4f:5c:56:3c:
cd:ce:4e:b1:f6:33:f7:0f:53:79:9c:d4:fa:18:8c:
66:ba:54:de:e2:4f:cf:8c:83:65:4a:f8:89:7f:bf:
dc:51:6b:7a:a1:65:65:57:c4:3b:12:de:82:8c:90:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:67:C2:08:17:ED:90:6E:73:39:2C:54:6C:60:7D:DE:26:32:F1:F7
X509v3 Authority Key Identifier:
keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e38302e302f32302d3234203d3e20313331353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.58.80.0/20
Signature Algorithm: sha256WithRSAEncryption
63:6e:f8:70:d6:7b:dd:fa:2c:e4:b7:30:f7:6c:13:cc:ff:c0:
28:d2:98:8c:87:d8:8d:db:bb:7f:c8:75:4c:1c:93:e5:6c:41:
3e:d3:de:bf:e7:df:b2:db:16:ea:20:c6:0c:57:72:57:71:a6:
4a:e1:64:bd:7c:e1:b2:1f:8a:4d:cf:b1:49:7a:1a:14:64:c5:
1a:f1:b0:df:ee:2a:95:92:56:1a:a1:57:08:9b:2c:43:db:7c:
10:77:17:53:e0:12:48:7a:2f:a6:e7:2c:0d:19:64:51:8f:64:
ec:82:81:e0:f8:81:3d:e7:8e:7f:bb:60:ea:3c:cc:fe:02:2a:
0e:aa:8a:ab:71:96:60:c4:19:8f:81:30:95:c5:0b:47:55:77:
dc:b5:97:f0:aa:d0:3a:e1:bd:48:8c:11:d0:de:99:23:3a:d6:
8e:4e:9c:e2:97:db:b2:e1:19:75:4c:98:0b:5b:17:11:46:45:
0e:23:93:6a:44:2c:03:a1:38:54:65:ca:ac:08:c4:2f:e7:d2:
94:b7:72:44:77:41:2d:44:a6:8d:79:b9:2a:36:37:2f:66:f8:
27:9e:65:5d:ce:ad:00:7f:e9:64:0d:40:69:bc:5b:32:8f:53:
f2:3b:03:6c:da:94:8d:7e:27:0d:a6:3f:3b:97:e8:6e:7f:f9:
1c:31:4c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:25 2026 by rpki-client