Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/yzopwDWq0bADA0830s0O86XQ0uI.roa
File: yzopwDWq0bADA0830s0O86XQ0uI.roa (raw, json)
Hash identifier: kv+zSCxErNpfs/eCx7s/quhsmmByRWZ5ucL/ucmK35g=
Subject key identifier: CB:3A:29:C0:35:AA:D1:B0:03:03:4F:37:D2:CD:0E:F3:A5:D0:D2:E2
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1532
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/yzopwDWq0bADA0830s0O86XQ0uI.roa
Signing time: Wed 18 Mar 2026 07:51:00 +0000
ROA not before: Wed 18 Mar 2026 07:51:00 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9674
IP address blocks: 101.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5426 (0x1532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Mar 18 07:51:00 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=CB3A29C035AAD1B003034F37D2CD0EF3A5D0D2E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:08:95:3f:98:50:54:0c:d9:16:00:a5:c7:
17:89:b4:78:8a:78:d4:5d:f9:24:7b:8c:43:a6:45:
30:57:a2:73:52:4d:06:82:ac:a6:73:0b:b3:bc:59:
72:1c:b3:11:a3:2d:d2:6f:b9:23:eb:8d:12:b7:50:
c9:77:6e:4e:8c:70:df:08:19:8f:4f:b1:10:74:2b:
10:5a:07:3c:1e:1a:61:66:67:9d:7c:86:aa:7b:32:
e2:2d:fd:d5:8e:98:1c:51:7d:cc:21:d9:79:40:03:
80:91:81:e5:16:4f:97:76:32:70:93:5e:2b:5f:b9:
2d:df:ac:d1:85:ff:c0:15:bc:47:4c:74:03:f3:d0:
4e:2d:30:0a:9b:ae:fc:a7:a6:1d:49:2c:8c:f2:2a:
2a:5d:4d:09:9f:02:22:42:09:9a:96:7d:db:73:f5:
6c:31:2e:db:95:8c:d4:4b:e0:50:c0:ed:64:26:24:
f9:f9:61:f5:04:d9:fe:3f:57:92:24:af:39:6a:5b:
6c:6c:ed:12:2d:f7:db:c8:54:26:98:fb:b2:b6:2c:
0e:41:16:81:e6:2c:e8:7e:99:52:d8:50:b3:6b:ce:
1d:15:4e:66:6c:5e:e1:21:dd:0e:8f:d7:f9:ed:79:
a3:0b:bb:74:da:d6:d6:29:d9:95:35:2b:72:d1:8a:
e4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3A:29:C0:35:AA:D1:B0:03:03:4F:37:D2:CD:0E:F3:A5:D0:D2:E2
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/yzopwDWq0bADA0830s0O86XQ0uI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.136.0.0/14
Signature Algorithm: sha256WithRSAEncryption
92:ac:44:47:d7:59:e3:6c:ce:24:08:aa:94:f7:39:08:21:47:
64:13:5f:6f:3c:0f:a6:5a:9f:41:7d:f3:a4:40:c2:56:f3:42:
a7:9c:35:a5:18:4a:01:b1:11:3a:fd:a8:41:c7:84:56:d6:d7:
d4:33:4e:d2:4d:74:a4:06:ca:cb:d7:99:47:e7:9b:38:47:d8:
64:a3:ba:40:08:2f:a0:a5:a3:0e:74:0c:36:af:a0:01:31:da:
38:b3:2f:42:4c:39:1d:30:17:f5:ab:04:36:d2:5a:84:88:56:
f9:1e:c4:1a:12:9e:f8:11:64:80:6a:85:8f:7e:8a:ea:45:d6:
41:c2:c3:6e:7b:44:ad:35:f3:2d:b8:8e:91:24:59:2a:5a:ae:
a0:ac:cb:67:61:06:fb:6d:41:84:4d:82:2b:2d:52:43:ec:aa:
f2:84:55:ca:b7:d1:74:d6:db:ae:e8:4f:2c:df:28:52:f0:ee:
43:1a:9d:0c:be:f9:28:89:5c:b4:4d:df:9a:e5:00:73:7e:44:
94:1f:05:a3:50:55:a3:b3:6f:b4:61:f2:a0:92:83:d2:e4:e6:
e4:7e:9d:4c:fa:a6:6b:b6:ac:98:98:47:9d:0b:4c:62:b7:c4:
31:17:7a:94:05:69:62:f1:25:37:79:d7:0e:3e:4c:09:c6:8e:
69:55:ec:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:06:41 2026 by rpki-client