Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWT/0/3130332e3232392e3130302e302f32322d3232203d3e203338383531.roa
File: 3130332e3232392e3130302e302f32322d3232203d3e203338383531.roa (raw, json)
Hash identifier: tICRKYTZOzxAH+xauRRyzgK+DbniFJH+4FNF7MVsLrY=
Subject key identifier: 0C:30:78:FC:09:29:40:DD:FD:8C:CF:A1:99:B3:02:FB:B0:75:A4:04
Certificate issuer: /CN=E8B38FAD1BC9D7E426603F6C204566C4AF30938F
Certificate serial: 6A27CE8739EA8DD96BBBA5B50E57604F8F86CC51
Authority key identifier: E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWT/0/3130332e3232392e3130302e302f32322d3232203d3e203338383531.roa
Signing time: Mon 11 May 2026 16:42:29 +0000
ROA not before: Mon 11 May 2026 16:37:29 +0000
ROA not after: Mon 10 May 2027 16:42:29 +0000
asID: 38851
IP address blocks: 103.229.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:27:ce:87:39:ea:8d:d9:6b:bb:a5:b5:0e:57:60:4f:8f:86:cc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8B38FAD1BC9D7E426603F6C204566C4AF30938F
Validity
Not Before: May 11 16:37:29 2026 GMT
Not After : May 10 16:42:29 2027 GMT
Subject: CN=0C3078FC092940DDFD8CCFA199B302FBB075A404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:b6:8d:ee:1a:92:c4:31:02:b6:1a:fc:bb:
93:fd:55:66:5b:bb:aa:a1:44:59:2b:8e:2c:06:45:
f9:43:2c:24:65:30:89:06:4c:82:1d:d9:c5:0b:07:
8e:03:93:5f:d9:e9:1c:77:42:11:59:dc:cb:f0:28:
9b:cd:d1:df:91:fa:5d:e4:9f:7f:6e:f4:66:62:bd:
74:9f:a4:fe:c2:b8:c8:cc:1f:dc:65:a2:77:d1:a4:
d1:75:54:ce:ed:ae:18:38:d1:87:61:07:77:a6:e0:
8e:f8:4d:07:49:b6:31:71:0e:05:c1:02:89:58:53:
d7:84:5c:13:31:96:43:30:b3:4f:fc:47:00:69:30:
1a:32:59:12:1f:ad:06:71:53:ca:de:55:fb:37:70:
02:84:31:a8:3e:7b:39:c2:f0:2a:96:b6:3d:d7:46:
b2:e9:08:5d:c2:de:32:ff:5d:54:0e:55:b8:3c:28:
85:a5:5d:b8:11:9c:11:e7:66:24:69:cb:73:88:de:
fa:e4:76:6f:1a:b2:d2:5f:a7:1e:87:bb:c2:06:79:
f7:aa:57:ea:1b:d8:7e:fc:e0:aa:8d:40:6e:df:e5:
82:97:6b:9b:26:29:45:3b:25:45:d7:48:d4:4b:42:
29:60:9d:c9:20:ad:67:4a:3c:37:40:94:76:9b:73:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:30:78:FC:09:29:40:DD:FD:8C:CF:A1:99:B3:02:FB:B0:75:A4:04
X509v3 Authority Key Identifier:
keyid:E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWT/0/3130332e3232392e3130302e302f32322d3232203d3e203338383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.229.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:55:5e:fa:5f:d2:ea:6a:0a:d7:2d:c0:3e:f4:5b:51:ed:ce:
60:a9:8d:bb:56:ad:fe:ad:14:38:2f:fa:6b:54:89:76:74:83:
41:99:1b:e9:36:ff:70:6b:d7:e9:3d:51:b4:08:6b:66:40:5c:
70:fb:4d:96:1f:c7:4e:2c:e9:69:00:8b:5a:81:df:60:3e:ae:
69:49:36:83:8d:23:4b:de:f3:c4:7f:0f:9d:08:16:0b:b5:d4:
76:b5:b1:60:57:e0:39:8c:1c:e7:3c:da:8e:36:ef:bf:3b:15:
a6:04:99:b0:be:36:f9:d0:ae:57:e4:ce:ee:fe:8d:1e:5c:15:
26:0a:10:4a:85:61:59:16:71:82:35:79:72:59:0a:f4:08:7b:
01:0b:c3:be:a2:98:69:f4:eb:b1:7c:c6:c8:ba:8e:72:a4:71:
06:cf:c6:a3:29:e2:07:09:72:46:48:37:4f:ea:cf:63:5b:03:
97:09:3a:52:20:4d:e0:d6:75:a1:e1:fe:b8:77:04:2b:af:cb:
fc:ad:d2:4e:3e:f1:00:63:7e:3c:b0:06:10:16:ba:bc:19:f9:
ec:45:00:51:6b:e6:09:8e:43:67:16:4a:b0:66:db:1e:bf:79:
6f:3f:7d:d4:73:04:bf:05:0c:a4:d1:6f:4d:e8:1c:d2:fd:f7:
5d:65:ce:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:47 2026 by rpki-client