Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/ZAT/0/3231302e37392e3135302e302f32332d3234203d3e203138303431.roa
File: 3231302e37392e3135302e302f32332d3234203d3e203138303431.roa (raw, json)
Hash identifier: XF9vSkheKC1NRFUS3alvj8iCKGl0+/ZaB+X31yisdf0=
Subject key identifier: A0:64:49:E1:61:B7:F4:E4:65:74:50:BE:24:B6:43:A5:29:88:3A:3E
Certificate issuer: /CN=0291B733B1EED1AF7E817D958CE6F13A585F0695
Certificate serial: 450A3C25AA000468C1EA0AF716B4A05B3DC499C9
Authority key identifier: 02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ZAT/0/3231302e37392e3135302e302f32332d3234203d3e203138303431.roa
Signing time: Mon 11 May 2026 17:32:46 +0000
ROA not before: Mon 11 May 2026 17:27:46 +0000
ROA not after: Mon 10 May 2027 17:32:46 +0000
asID: 18041
IP address blocks: 210.79.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:0a:3c:25:aa:00:04:68:c1:ea:0a:f7:16:b4:a0:5b:3d:c4:99:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0291B733B1EED1AF7E817D958CE6F13A585F0695
Validity
Not Before: May 11 17:27:46 2026 GMT
Not After : May 10 17:32:46 2027 GMT
Subject: CN=A06449E161B7F4E4657450BE24B643A529883A3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f7:da:38:71:52:83:b1:c2:e2:d1:ae:2b:8a:
cd:9a:9e:1e:10:4f:c2:05:2e:fb:c5:ac:65:e8:83:
6b:34:0b:b5:45:6a:c2:ec:3b:ac:29:6a:69:16:0e:
73:9b:d4:a7:ec:75:39:12:47:6a:3d:64:7b:81:de:
58:e5:da:27:12:cf:00:77:6b:e6:22:8a:0f:74:99:
04:6a:74:5f:73:ad:65:31:7e:c4:5c:18:3e:be:2d:
9b:09:df:c6:7d:11:48:fa:c1:dd:af:88:40:fc:5f:
71:eb:75:d8:e0:8c:bc:0c:c6:c4:d7:bd:e5:1d:95:
f8:f5:90:5e:5e:e8:a5:a7:0f:94:46:60:65:3d:3c:
b2:96:3c:6c:80:3a:df:bb:d1:be:ba:e0:07:c0:87:
f5:70:31:c2:9e:18:07:59:27:f8:e7:bb:eb:4e:c5:
54:37:ee:f1:ff:72:71:30:b8:73:86:c0:d6:d9:9d:
0e:a2:29:81:ef:e4:25:58:ca:c9:49:f4:5e:3f:f4:
41:eb:fd:d9:fc:7a:c1:0a:f5:65:88:39:0a:df:eb:
b3:3d:06:db:27:1a:93:8a:f9:64:3e:c0:1f:71:93:
ba:4e:ee:7d:84:f7:9b:90:21:96:71:d5:41:4a:ff:
06:41:25:4c:33:57:0c:8e:c9:86:5b:5b:54:21:34:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:64:49:E1:61:B7:F4:E4:65:74:50:BE:24:B6:43:A5:29:88:3A:3E
X509v3 Authority Key Identifier:
keyid:02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/3231302e37392e3135302e302f32332d3234203d3e203138303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.79.150.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:86:c0:03:6a:c6:0c:61:26:dc:27:09:36:8b:85:22:60:90:
8f:79:da:7f:cf:48:b6:3b:26:9b:9a:43:51:d7:1f:71:f0:fb:
0b:85:78:53:97:02:4c:21:64:03:ee:99:cf:cc:d8:69:df:7b:
15:b1:d4:65:48:36:dd:40:d8:46:13:01:2d:04:51:11:df:b1:
12:95:63:e6:db:db:ae:42:34:97:0c:5e:bd:46:09:8c:33:d5:
f8:ec:c1:b3:a8:ac:a3:5c:63:46:b1:cf:6e:78:c8:f0:c2:3a:
a4:08:9f:75:cb:44:cb:38:82:6a:9a:f4:e1:47:97:42:85:73:
96:c8:f8:9c:d9:12:c9:fb:c7:43:2d:4f:ad:60:d8:b7:ea:f1:
90:e1:d6:de:01:3b:5b:cf:08:b8:cd:7c:7d:50:93:27:8b:96:
49:67:20:0c:af:31:2d:3e:f4:61:42:18:74:aa:c0:18:fc:c7:
ee:65:d5:68:7b:0a:45:bc:d6:8c:82:06:96:0a:a2:2f:78:10:
0d:b9:7e:b6:2d:f9:44:d1:f9:ed:4b:23:3d:17:95:2a:9a:7b:
26:af:36:23:44:5e:14:9c:77:cf:bf:d5:9f:c5:45:f7:30:33:
bf:fc:01:0e:9a:05:f0:b3:a7:9c:74:f9:35:1d:69:5d:18:9e:
b2:43:d0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:24 2026 by rpki-client