Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e38382e302f32312d3234203d3e2039333034.roa
File: 3230322e3136302e38382e302f32312d3234203d3e2039333034.roa (raw, json)
Hash identifier: K3UMHyKGOvxjUcEcud7ufFnhYlHqTroKuIL/Cs9sjkQ=
Subject key identifier: 3B:9E:60:B3:8C:85:49:07:6D:A8:C3:C7:91:05:20:F3:27:42:09:93
Certificate issuer: /CN=2586043D180B153CEF366A422232C20D63D92FB2
Certificate serial: 6BCD3D4F9D96905A41367E1B0F676268B3F80E76
Authority key identifier: 25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e38382e302f32312d3234203d3e2039333034.roa
Signing time: Mon 11 May 2026 17:55:31 +0000
ROA not before: Mon 11 May 2026 17:50:31 +0000
ROA not after: Mon 10 May 2027 17:55:31 +0000
asID: 9304
IP address blocks: 202.160.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:cd:3d:4f:9d:96:90:5a:41:36:7e:1b:0f:67:62:68:b3:f8:0e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2586043D180B153CEF366A422232C20D63D92FB2
Validity
Not Before: May 11 17:50:31 2026 GMT
Not After : May 10 17:55:31 2027 GMT
Subject: CN=3B9E60B38C8549076DA8C3C7910520F327420993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:77:4b:dc:0e:5d:8f:f5:2c:73:fa:ea:b1:
e8:c9:b0:91:ab:ac:18:88:f4:a0:a7:af:09:f0:6d:
a0:06:d9:50:89:6f:5c:f7:5d:b5:44:41:1f:cb:39:
09:89:29:ae:61:aa:31:d1:ed:b7:84:54:ab:2d:54:
b2:58:80:68:6e:14:38:17:aa:6d:ee:d0:88:ba:b4:
e2:a2:f4:36:6a:48:eb:b5:08:c4:41:ed:29:cd:8b:
81:e3:2f:f6:7d:81:4c:e9:32:b5:6d:e2:a8:b0:16:
96:b5:09:8f:34:82:44:ec:47:1e:44:37:ff:5d:07:
1a:14:20:3c:ce:d6:20:c4:a7:84:97:3f:53:56:ae:
ab:dc:cc:04:07:4d:9b:8f:46:2f:29:05:67:26:89:
7c:f2:8c:3d:cd:f4:49:ec:f0:07:a6:ce:db:3d:1b:
db:57:26:fd:23:c4:2e:1a:66:01:02:77:bf:ae:cd:
23:34:a6:b6:4a:68:f5:ca:2c:c5:73:65:59:1f:48:
0a:7d:38:10:59:ad:4d:6f:ac:bb:ad:73:50:22:5d:
eb:9d:1d:1f:f6:3f:5a:cd:e6:2c:61:49:f9:57:fe:
8b:04:35:c4:f8:f7:eb:47:6b:98:7b:df:b2:a7:23:
86:1d:63:44:bb:bc:9d:c7:6a:81:23:34:f2:88:bf:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9E:60:B3:8C:85:49:07:6D:A8:C3:C7:91:05:20:F3:27:42:09:93
X509v3 Authority Key Identifier:
keyid:25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e38382e302f32312d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.160.88.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:99:e9:34:bd:2f:21:55:74:df:41:ed:2f:17:bf:65:77:2d:
ef:50:b9:4d:34:e6:3d:16:38:44:c8:dd:a5:32:b4:b4:42:9c:
17:6e:ff:dc:62:af:b9:34:45:8f:bd:51:1d:ac:01:49:f7:1b:
33:8a:10:a5:df:45:22:e4:9c:67:b5:da:4d:8b:91:21:7b:71:
83:da:59:dd:ea:db:70:bd:e8:f3:d5:bc:73:7b:7a:f6:19:c1:
67:f5:2e:3b:15:4a:7c:7e:f7:74:ba:cd:96:3c:37:be:3d:d2:
bf:fb:04:ee:05:19:c9:0e:b5:55:75:11:b9:62:14:8b:1b:10:
29:b4:59:85:83:81:90:e7:27:90:3b:bc:91:96:9b:e8:2a:33:
4d:36:b7:ec:cf:dd:cb:7d:b9:b5:06:b9:ce:bf:c2:cd:40:51:
39:65:02:99:53:2b:9e:36:5e:2a:76:69:cb:73:f1:7a:a2:15:
7d:0d:9a:f7:71:28:6e:43:1f:ef:5e:11:ae:07:ed:a0:7a:9e:
16:61:17:b6:79:a7:75:8c:9c:a6:e0:93:0a:a0:4a:3c:72:5d:
d9:06:96:ec:08:e6:aa:30:ed:77:f1:0f:c8:92:43:72:a9:7b:
e6:9c:6d:6c:f4:cc:b0:c5:df:1e:92:71:6e:28:93:cd:f4:1b:
af:ee:bb:9e
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUa809T52WkFpBNn4bD2diaLP4DnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU4NjA0M0QxODBCMTUzQ0VGMzY2QTQyMjIzMkMyMEQ2
M0Q5MkZCMjAeFw0yNjA1MTExNzUwMzFaFw0yNzA1MTAxNzU1MzFaMDMxMTAvBgNV
BAMTKDNCOUU2MEIzOEM4NTQ5MDc2REE4QzNDNzkxMDUyMEYzMjc0MjA5OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmS3dL3A5dj/Usc/rqsejJsJGr
rBiI9KCnrwnwbaAG2VCJb1z3XbVEQR/LOQmJKa5hqjHR7beEVKstVLJYgGhuFDgX
qm3u0Ii6tOKi9DZqSOu1CMRB7SnNi4HjL/Z9gUzpMrVt4qiwFpa1CY80gkTsRx5E
N/9dBxoUIDzO1iDEp4SXP1NWrqvczAQHTZuPRi8pBWcmiXzyjD3N9Ens8Aemzts9
G9tXJv0jxC4aZgECd7+uzSM0prZKaPXKLMVzZVkfSAp9OBBZrU1vrLutc1AiXeud
HR/2P1rN5ixhSflX/osENcT49+tHa5h737KnI4YdY0S7vJ3HaoEjNPKIv/GpAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUO55gs4yFSQdtqMPHkQUg8ydCCZMwHwYDVR0j
BBgwFoAUJYYEPRgLFTzvNmpCIjLCDWPZL7IwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFBTSUxL
RVJBLzAvMjU4NjA0M0QxODBCMTUzQ0VGMzY2QTQyMjIzMkMyMEQ2M0Q5MkZCMi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS8yNTg2MDQzRDE4MEIxNTNDRUYzNjZBNDIy
MjMyQzIwRDYzRDkyRkIyLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuG
YXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFBTSUxLRVJBLzAvMzIzMDMy
MmUzMTM2MzAyZTM4MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEA8qgWDANBgkqhkiG9w0BAQsFAAOCAQEAXpnpNL0vIVV030HtLxe/
ZXct71C5TTTmPRY4RMjdpTK0tEKcF27/3GKvuTRFj71RHawBSfcbM4oQpd9FIuSc
Z7XaTYuRIXtxg9pZ3erbcL3o89W8c3t69hnBZ/UuOxVKfH73dLrNljw3vj3Sv/sE
7gUZyQ61VXURuWIUixsQKbRZhYOBkOcnkDu8kZab6CozTTa37M/dy325tQa5zr/C
zUBROWUCmVMrnjZeKnZpy3PxeqIVfQ2a93EobkMf714RrgftoHqeFmEXtnmndYyc
puCTCqBKPHJd2QaW7AjmqjDtd/EPyJJDcql75pxtbPTMsMXfHpJxbiiTzfQbr+67
ng==
-----END CERTIFICATE-----
Generated at Wed May 13 02:58:47 2026 by rpki-client