Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/ZUSO/1/3133382e3235322e31322e302f32332d3234203d3e203633393030.roa
File: 3133382e3235322e31322e302f32332d3234203d3e203633393030.roa (raw, json)
Hash identifier: T1G4LI5dLLgbVaIvhEyF4d3yTLg74BSvJymMPoiXRRs=
Subject key identifier: E3:EF:E9:D2:73:19:5B:0A:A5:DB:B9:52:97:AC:9F:7A:B4:6E:A6:AE
Certificate issuer: /CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3
Certificate serial: 3DB23AF8854150B51D78840D9531CB2E2517AC28
Authority key identifier: 9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ZUSO/1/3133382e3235322e31322e302f32332d3234203d3e203633393030.roa
Signing time: Mon 11 May 2026 17:57:59 +0000
ROA not before: Mon 11 May 2026 17:52:59 +0000
ROA not after: Mon 10 May 2027 17:57:59 +0000
asID: 63900
IP address blocks: 138.252.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:b2:3a:f8:85:41:50:b5:1d:78:84:0d:95:31:cb:2e:25:17:ac:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3
Validity
Not Before: May 11 17:52:59 2026 GMT
Not After : May 10 17:57:59 2027 GMT
Subject: CN=E3EFE9D273195B0AA5DBB95297AC9F7AB46EA6AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:58:5d:ff:6a:d6:d0:02:bb:43:6f:6c:a5:
c8:4a:f9:3a:a9:41:b0:59:2a:43:60:63:19:3c:b6:
fa:be:4a:a5:d3:2c:26:8c:73:b0:bd:9b:06:17:84:
0c:e9:42:74:5f:33:0d:dc:de:2e:63:c4:10:17:ce:
67:a9:07:b5:1c:d4:98:70:01:90:c0:6f:1d:68:a4:
79:cc:81:45:75:25:0f:e4:7e:c1:22:26:32:bc:02:
13:ef:81:19:6b:40:de:c3:ec:7a:e9:67:a8:9b:c4:
cf:f3:1a:85:85:a4:5c:d7:f1:d7:dd:90:08:76:4c:
22:a9:cf:8b:99:d8:79:e1:49:4f:f2:94:94:77:b1:
5d:43:f7:54:0d:3a:44:78:8e:ae:8d:17:b1:54:c4:
fc:50:eb:c7:86:6c:e9:cb:f3:58:ae:b1:70:06:6f:
d3:b3:75:31:ed:14:56:88:9f:d0:2e:b0:13:4f:8b:
0e:d4:c0:9a:d2:ea:bf:aa:9c:ce:93:40:8d:09:b9:
59:3a:22:ee:42:10:dd:fb:4a:63:d7:61:ee:ee:8e:
57:ec:15:c2:59:fe:3f:f3:a0:fd:22:b5:b7:12:32:
34:54:71:d1:e4:ba:25:f6:2d:4a:3d:d4:03:c2:8a:
a1:30:d6:bd:16:97:38:6f:78:02:fd:3a:99:61:be:
e3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EF:E9:D2:73:19:5B:0A:A5:DB:B9:52:97:AC:9F:7A:B4:6E:A6:AE
X509v3 Authority Key Identifier:
keyid:9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/3133382e3235322e31322e302f32332d3234203d3e203633393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.252.12.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:0d:1c:38:06:9c:01:40:a0:6a:26:97:40:16:d3:fa:ec:58:
97:99:2d:ac:d7:17:77:24:00:c9:a0:cd:2a:6d:77:f6:1d:4f:
9b:fa:d9:64:65:7d:3e:9d:64:06:cb:64:1b:81:26:31:56:d5:
31:58:02:d9:f5:a0:dd:98:30:5c:9b:40:da:9a:69:34:ba:75:
98:c9:1f:73:52:c1:03:dd:f0:de:cd:03:b2:28:d1:8e:8b:72:
04:ac:80:71:6f:6e:ed:51:68:31:1a:c6:2a:34:ff:67:b3:43:
85:15:ca:9f:71:fc:2c:7a:2e:32:37:fd:73:71:6c:c8:00:9e:
80:e9:4c:d4:35:93:17:7a:99:ff:11:83:2f:ab:99:31:e6:96:
f7:18:9f:f3:d2:b5:85:87:d7:0a:f7:b9:3f:44:97:14:66:07:
0f:fc:41:d3:93:d9:7a:1c:e7:55:c4:f9:a9:a8:65:ac:4f:43:
14:1c:2e:32:2c:57:0b:0c:bc:d5:b5:99:74:4e:d7:a4:95:ef:
37:94:5d:dc:b3:75:db:8d:bd:2b:b0:6c:39:52:7e:fb:6b:53:
97:0e:cd:84:77:06:b7:03:52:0b:77:e0:fc:fc:a4:a2:42:20:
a3:ef:ce:63:11:03:83:c5:cf:1c:fb:76:85:5f:28:6e:b0:79:
56:e7:3c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:11 2026 by rpki-client