Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/ZUSO/1/3133382e3235322e31322e302f32342d3234203d3e203633393030.roa
File: 3133382e3235322e31322e302f32342d3234203d3e203633393030.roa (raw, json)
Hash identifier: M8obdGIsjRO1zF80aPiV/zHcUxXnNPdWJ9IvgOv18N0=
Subject key identifier: E0:E3:2B:FF:22:A7:0F:DF:57:9E:2B:F5:AA:5F:AB:9D:04:A2:7B:D8
Certificate issuer: /CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3
Certificate serial: 0A9B9A83EEC26B0D3AD962BF20407FE1FB042646
Authority key identifier: 9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ZUSO/1/3133382e3235322e31322e302f32342d3234203d3e203633393030.roa
Signing time: Mon 11 May 2026 17:57:57 +0000
ROA not before: Mon 11 May 2026 17:52:57 +0000
ROA not after: Mon 10 May 2027 17:57:57 +0000
asID: 63900
IP address blocks: 138.252.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9b:9a:83:ee:c2:6b:0d:3a:d9:62:bf:20:40:7f:e1:fb:04:26:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3
Validity
Not Before: May 11 17:52:57 2026 GMT
Not After : May 10 17:57:57 2027 GMT
Subject: CN=E0E32BFF22A70FDF579E2BF5AA5FAB9D04A27BD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:33:71:f6:a4:62:44:29:a5:f5:96:21:c8:
d6:05:a9:4f:09:95:9f:f1:0f:d5:d5:e0:b4:bf:61:
4b:15:24:ab:bf:65:8e:8b:7a:ee:4d:8e:c3:c3:55:
67:07:70:f0:bb:d9:6b:85:bd:b1:f3:c9:f5:bf:9d:
fe:6b:47:d2:7b:f6:6e:71:27:bd:5e:a1:a9:e0:f9:
a5:dd:0e:61:a3:3b:7f:25:c5:f3:a8:05:6d:d0:d5:
26:85:a3:07:13:47:9d:db:f6:96:db:28:96:ed:08:
17:55:1f:92:a8:52:d9:35:28:ca:17:08:45:6a:dc:
80:e8:7a:10:9e:61:d6:10:ad:d2:cd:de:2c:57:f5:
92:8e:7b:a8:af:88:fc:c3:77:38:8a:94:f7:16:13:
07:5a:5b:13:db:49:ea:03:7d:4e:6b:9f:f9:92:4a:
21:2c:c2:59:27:5d:cf:f2:2a:08:68:5a:17:36:da:
05:3b:16:0a:27:40:9e:43:41:17:38:e2:ca:c6:b1:
68:f0:6e:48:d1:10:15:d2:d9:05:07:f4:ec:15:b2:
97:48:5f:44:4e:e6:d3:8e:da:43:45:d6:3d:c7:4f:
6b:14:19:94:d3:e2:3f:5d:6a:5e:5a:1d:39:b1:48:
f4:e0:ca:49:9b:0a:1b:ff:73:53:f9:58:72:11:55:
f1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E3:2B:FF:22:A7:0F:DF:57:9E:2B:F5:AA:5F:AB:9D:04:A2:7B:D8
X509v3 Authority Key Identifier:
keyid:9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/3133382e3235322e31322e302f32342d3234203d3e203633393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.252.12.0/24
Signature Algorithm: sha256WithRSAEncryption
02:bd:13:c5:73:77:ff:f9:86:92:82:c7:16:53:ff:a7:f1:db:
c7:7c:1e:e5:ca:8c:cf:6f:28:b6:d7:5e:5e:f0:3a:45:c6:75:
2c:22:ac:e0:af:d4:19:97:e0:98:09:6f:eb:30:4c:9d:e2:c6:
a1:21:b9:4f:62:ac:57:0f:6c:2e:cb:90:9f:d2:10:e2:30:0f:
ec:1d:fc:08:fc:71:07:31:84:cb:93:08:84:bb:68:ed:ad:38:
b8:33:b3:71:04:21:f9:eb:96:b8:18:96:62:31:45:e8:a0:b8:
f3:8d:f3:49:b8:2e:39:27:eb:46:fb:0e:87:3f:6f:90:71:94:
71:fe:2b:80:6d:33:16:fe:89:d2:af:b6:a5:db:38:7f:bf:92:
df:07:e4:95:28:18:df:79:88:bc:35:95:e8:5c:94:05:0f:2b:
b4:70:a1:0f:58:7d:89:1f:5b:fa:36:aa:2c:b1:96:a3:1f:55:
2c:3b:ab:55:33:d9:2d:6d:da:6a:62:01:c5:72:b3:f8:20:5d:
5b:8d:97:c7:91:46:cb:a1:24:3a:38:55:d8:91:de:2d:67:25:
f5:41:72:a3:6b:c9:79:3b:eb:1c:2e:5e:df:21:8e:c1:dc:be:
4f:10:69:9f:00:eb:19:da:14:30:3a:dc:b0:ce:25:45:2f:f0:
bc:82:f5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:10 2026 by rpki-client