Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TDC/0/3130332e3232302e3231382e302f32332d3234203d3e203138303431.roa
File: 3130332e3232302e3231382e302f32332d3234203d3e203138303431.roa (raw, json)
Hash identifier: BPfCiVG9HhUxKhDsiFl88DZrsgfiJtDmqkpGw4VSQe8=
Subject key identifier: 1B:47:6B:E0:DB:BE:B3:14:75:F2:17:59:A9:92:51:36:B2:BF:B3:5F
Certificate issuer: /CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
Certificate serial: 7A5B393F9BCCB18E0A3F707FEB4192CBBDFC6F0E
Authority key identifier: 68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TDC/0/3130332e3232302e3231382e302f32332d3234203d3e203138303431.roa
Signing time: Mon 11 May 2026 17:31:37 +0000
ROA not before: Mon 11 May 2026 17:26:37 +0000
ROA not after: Mon 10 May 2027 17:31:37 +0000
asID: 18041
IP address blocks: 103.220.218.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:5b:39:3f:9b:cc:b1:8e:0a:3f:70:7f:eb:41:92:cb:bd:fc:6f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
Validity
Not Before: May 11 17:26:37 2026 GMT
Not After : May 10 17:31:37 2027 GMT
Subject: CN=1B476BE0DBBEB31475F21759A9925136B2BFB35F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:d9:44:6e:df:bf:86:b6:97:97:2e:75:eb:
78:93:7d:88:86:24:69:0d:be:d3:d8:d2:af:3d:1b:
b8:e6:8f:00:31:ea:97:ef:19:cb:b0:01:b9:d2:ec:
c4:ab:7f:f3:49:bf:c8:8a:89:1f:9d:f9:2d:13:b1:
ca:62:9f:32:dd:9d:96:a6:ff:84:91:ec:b9:d7:81:
e8:c8:57:0c:de:64:66:b4:b3:38:9f:c5:35:00:f2:
16:f3:95:e4:ae:aa:84:34:a8:95:10:78:77:f9:9c:
bd:6f:b3:54:26:72:35:7a:09:c9:c5:05:14:3c:d9:
ca:21:6b:d2:fe:7d:48:47:9c:53:fe:28:d2:8d:f3:
cd:71:24:75:2f:d8:6b:73:b4:db:2b:cd:1f:46:3f:
bd:29:47:8d:ce:89:9a:ce:98:98:99:00:40:df:a5:
f1:19:31:38:f9:77:aa:cb:be:c2:be:43:b0:02:79:
fd:b2:59:c8:02:96:52:87:2f:12:f7:ac:9e:51:c3:
25:36:88:f9:dc:f9:7b:f6:14:5d:a7:cb:cc:2b:e8:
fc:82:8b:83:0c:76:93:83:1e:6b:6a:a8:83:1f:55:
ae:df:9f:2f:4a:41:51:a9:b8:9b:58:2d:13:95:e5:
0f:de:bc:34:22:85:ca:ce:b9:28:7b:22:36:37:11:
c4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:47:6B:E0:DB:BE:B3:14:75:F2:17:59:A9:92:51:36:B2:BF:B3:5F
X509v3 Authority Key Identifier:
keyid:68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TDC/0/3130332e3232302e3231382e302f32332d3234203d3e203138303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.220.218.0/23
Signature Algorithm: sha256WithRSAEncryption
77:3c:e2:2f:00:42:16:bf:45:6a:c1:82:a3:0c:fd:6b:ea:b5:
68:b3:9c:0d:6f:56:a0:e7:ac:d3:bd:de:3f:66:2b:95:50:81:
64:f1:0d:d2:04:8a:0c:96:ec:f3:3a:67:59:c3:39:cf:02:26:
8d:59:8e:bc:b3:39:64:13:1c:64:9b:cc:55:f1:d9:6f:43:65:
53:30:cc:6b:b0:42:65:6f:bc:fa:59:a4:e8:63:eb:6d:98:60:
e9:20:2d:bd:a8:06:d7:bd:e4:1d:ab:4e:1a:fe:b5:f2:2e:bb:
16:05:db:24:37:4a:b9:da:57:1e:46:b4:a8:9d:91:3b:ed:4b:
d3:b6:12:fd:ad:be:dc:7d:98:95:e9:6f:44:ef:a7:99:fb:9d:
b8:6d:63:fa:10:39:8e:65:c4:09:80:f1:55:69:fc:92:08:ea:
43:80:28:49:da:6e:30:14:61:00:25:6c:4c:39:25:65:7c:59:
99:a5:42:75:1c:84:97:52:f8:21:9d:99:f3:31:8a:53:12:53:
c0:54:1e:81:58:4b:98:70:97:46:96:be:9a:bc:d0:86:86:d8:
22:99:ad:ec:52:5f:f0:18:5e:8b:df:a5:b8:79:7c:98:c0:e4:
03:9e:7d:bc:94:35:13:28:1d:af:3b:73:af:67:a1:b0:87:68:
9f:2a:7b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:08 2026 by rpki-client