Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/APPIER/0/3130332e3132322e31362e302f32322d3234203d3e20333936393832.roa
File: 3130332e3132322e31362e302f32322d3234203d3e20333936393832.roa (raw, json)
Hash identifier: /OS0f2NWDbFEXqirGqMoLUR1IHwnbDtbJ8lk1eeYlp4=
Subject key identifier: D7:38:00:AC:B4:49:AB:85:D6:F7:93:23:A1:7B:D2:57:97:AC:BE:3E
Certificate issuer: /CN=881BEE1F93D58BAEDFAC994B677AAAD03CC59C78
Certificate serial: 4A58F3E3C2DDE1B48B5C52976CC477CC4B874976
Authority key identifier: 88:1B:EE:1F:93:D5:8B:AE:DF:AC:99:4B:67:7A:AA:D0:3C:C5:9C:78
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/APPIER/0/3130332e3132322e31362e302f32322d3234203d3e20333936393832.roa
Signing time: Mon 11 May 2026 17:39:12 +0000
ROA not before: Mon 11 May 2026 17:34:12 +0000
ROA not after: Mon 10 May 2027 17:39:12 +0000
asID: 396982
IP address blocks: 103.122.16.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:58:f3:e3:c2:dd:e1:b4:8b:5c:52:97:6c:c4:77:cc:4b:87:49:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881BEE1F93D58BAEDFAC994B677AAAD03CC59C78
Validity
Not Before: May 11 17:34:12 2026 GMT
Not After : May 10 17:39:12 2027 GMT
Subject: CN=D73800ACB449AB85D6F79323A17BD25797ACBE3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:4b:2c:f8:38:99:a8:a7:45:50:1a:51:d7:
f8:45:70:b1:aa:a3:64:c4:e5:1c:c3:ed:0c:3d:0c:
47:55:f5:f9:4e:35:4a:bb:1d:39:1f:c0:36:40:aa:
8a:fe:1d:a2:74:20:6d:de:37:84:eb:a8:4d:97:8c:
e1:51:c5:4d:c7:04:2c:02:d9:0e:4e:f6:68:75:74:
08:0b:a0:39:2a:88:07:ef:e9:c7:e0:4f:98:d3:dd:
2a:02:0d:4c:86:bb:f0:a7:08:bf:9b:46:30:30:15:
28:29:14:a9:cc:8b:16:74:f6:52:25:85:23:de:a5:
bd:36:b6:af:cb:5c:fb:91:59:dc:fb:09:c2:0b:7f:
5e:a7:15:0e:11:65:9a:02:1e:88:92:c6:4d:08:50:
2a:4e:38:31:77:34:04:1e:f7:a4:36:46:c6:f2:fc:
fb:17:4e:3a:d2:6b:dd:63:cf:c8:66:5e:71:a5:40:
a2:e0:7a:a5:87:fb:40:ce:6f:00:8b:38:6d:41:d2:
c0:17:07:83:74:7a:f5:77:01:aa:00:46:25:61:c6:
38:5e:8b:1b:ec:e7:db:48:12:98:89:f4:31:5f:74:
62:0d:05:48:55:69:fd:c9:8e:b7:93:b9:a6:64:61:
41:71:d2:ff:10:e7:2d:ff:c0:bc:91:95:e7:3c:79:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:38:00:AC:B4:49:AB:85:D6:F7:93:23:A1:7B:D2:57:97:AC:BE:3E
X509v3 Authority Key Identifier:
keyid:88:1B:EE:1F:93:D5:8B:AE:DF:AC:99:4B:67:7A:AA:D0:3C:C5:9C:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/APPIER/0/3130332e3132322e31362e302f32322d3234203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.16.0/22
Signature Algorithm: sha256WithRSAEncryption
36:ff:64:69:9b:4a:e1:17:1a:7f:7a:c4:ec:36:a5:79:14:d8:
35:de:ba:b5:8a:cb:c8:8e:08:7d:ef:bb:8a:58:de:62:0f:fa:
11:bb:2b:af:7f:40:4c:84:61:15:f9:9d:cb:bd:cc:3f:db:fe:
74:b4:3f:e3:5e:04:42:a4:bd:f7:89:47:20:1c:81:92:0e:53:
60:df:02:19:1c:88:18:cb:38:e7:0b:97:cb:08:29:76:38:c2:
e9:78:f6:3c:c8:ba:e5:fc:00:58:ca:b9:c5:fb:c2:97:76:c3:
71:02:3a:76:01:ce:04:ea:96:64:68:92:01:17:9f:47:3f:8d:
51:64:26:03:90:da:bd:7a:9b:3f:a1:ff:bd:f2:21:7e:45:48:
a1:40:ab:f4:64:e8:1f:eb:a4:bd:fa:29:2c:fb:30:17:a0:fb:
e3:71:e6:8c:5b:a8:8c:e7:b8:76:e9:b2:ce:e8:5a:dc:67:72:
84:36:ac:76:57:a6:eb:19:b6:ea:e5:27:4a:18:8f:ad:70:10:
7e:ef:be:11:2d:97:85:7a:a2:7d:29:5c:1b:ff:c0:8c:6a:a4:
c7:62:7e:f6:77:2b:2e:75:9b:6c:a6:f6:14:7f:a2:02:25:ed:
be:73:1c:a6:52:56:5d:94:2c:53:5b:60:ad:11:a4:c1:14:0a:
dc:a3:1b:a2
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUSljz48Ld4bSLXFKXbMR3zEuHSXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgxQkVFMUY5M0Q1OEJBRURGQUM5OTRCNjc3QUFBRDAz
Q0M1OUM3ODAeFw0yNjA1MTExNzM0MTJaFw0yNzA1MTAxNzM5MTJaMDMxMTAvBgNV
BAMTKEQ3MzgwMEFDQjQ0OUFCODVENkY3OTMyM0ExN0JEMjU3OTdBQ0JFM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUCEss+DiZqKdFUBpR1/hFcLGq
o2TE5RzD7Qw9DEdV9flONUq7HTkfwDZAqor+HaJ0IG3eN4TrqE2XjOFRxU3HBCwC
2Q5O9mh1dAgLoDkqiAfv6cfgT5jT3SoCDUyGu/CnCL+bRjAwFSgpFKnMixZ09lIl
hSPepb02tq/LXPuRWdz7CcILf16nFQ4RZZoCHoiSxk0IUCpOODF3NAQe96Q2Rsby
/PsXTjrSa91jz8hmXnGlQKLgeqWH+0DObwCLOG1B0sAXB4N0evV3AaoARiVhxjhe
ixvs59tIEpiJ9DFfdGINBUhVaf3JjreTuaZkYUFx0v8Q5y3/wLyRlec8eY1HAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQU1zgArLRJq4XW95MjoXvSV5esvj4wHwYDVR0j
BBgwFoAUiBvuH5PVi67frJlLZ3qq0DzFnHgwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVBQSUVS
LzAvODgxQkVFMUY5M0Q1OEJBRURGQUM5OTRCNjc3QUFBRDAzQ0M1OUM3OC5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS84ODFCRUUxRjkzRDU4QkFFREZBQzk5NEI2NzdB
QUFEMDNDQzU5Qzc4LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVBQSUVSLzAvMzEzMDMzMmUzMTMy
MzIyZTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMzM5MzYzOTM4MzIucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnehAwDQYJKoZIhvcNAQELBQADggEBADb/ZGmbSuEXGn96xOw2pXkU
2DXeurWKy8iOCH3vu4pY3mIP+hG7K69/QEyEYRX5ncu9zD/b/nS0P+NeBEKkvfeJ
RyAcgZIOU2DfAhkciBjLOOcLl8sIKXY4wul49jzIuuX8AFjKucX7wpd2w3ECOnYB
zgTqlmRokgEXn0c/jVFkJgOQ2r16mz+h/73yIX5FSKFAq/Rk6B/rpL36KSz7MBeg
++Nx5oxbqIznuHbpss7oWtxncoQ2rHZXpusZturlJ0oYj61wEH7vvhEtl4V6on0p
XBv/wIxqpMdifvZ3Ky51m2ym9hR/ogIl7b5zHKZSVl2ULFNbYK0RpMEUCtyjG6I=
-----END CERTIFICATE-----
Generated at Tue May 12 21:38:20 2026 by rpki-client