Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/ASNET/0/3130332e3133302e3235322e302f32322d3232203d3e2039323634.roa
File: 3130332e3133302e3235322e302f32322d3232203d3e2039323634.roa (raw, json)
Hash identifier: VvHRqWxVEtxPJcjsyJFxfRKVgF0vRJqpYge9SzO33qM=
Subject key identifier: D9:9B:DF:E6:A7:68:3F:89:48:1C:79:C5:CC:2E:5E:52:4E:A8:B1:8A
Certificate issuer: /CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Certificate serial: 1FD81F501644B21E1484A5CD9B937EAEF6BC6C64
Authority key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ASNET/0/3130332e3133302e3235322e302f32322d3232203d3e2039323634.roa
Signing time: Mon 11 May 2026 17:09:11 +0000
ROA not before: Mon 11 May 2026 17:04:11 +0000
ROA not after: Mon 10 May 2027 17:09:11 +0000
asID: 9264
IP address blocks: 103.130.252.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:d8:1f:50:16:44:b2:1e:14:84:a5:cd:9b:93:7e:ae:f6:bc:6c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Validity
Not Before: May 11 17:04:11 2026 GMT
Not After : May 10 17:09:11 2027 GMT
Subject: CN=D99BDFE6A7683F89481C79C5CC2E5E524EA8B18A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:99:0b:0d:ad:c2:69:88:2a:98:9a:29:a9:
aa:26:c0:ff:bc:d4:ba:0a:ec:c1:d9:ef:e4:6f:39:
0d:d5:f1:20:08:10:a1:38:8c:db:c4:4b:ba:1f:a1:
42:d5:b2:43:95:1e:83:69:ac:72:92:86:1f:27:24:
40:86:96:55:57:8d:e9:73:76:6b:f1:a4:df:83:7d:
87:81:d2:c6:6d:1c:71:3e:b9:5d:45:d4:06:19:7b:
ef:1e:7e:54:fd:3f:37:81:39:ae:13:1d:43:93:60:
4d:99:60:70:55:57:d6:fa:a3:7e:91:bd:55:c9:8f:
af:a1:85:ce:a7:1c:9b:f8:0f:60:cb:ef:35:88:98:
7f:df:6a:da:74:6f:57:03:61:99:8c:b5:94:37:19:
55:18:50:65:73:55:c9:7d:08:15:65:d0:e7:36:10:
ef:36:14:67:4f:39:af:dd:25:ab:81:ce:cd:b5:d0:
4a:da:82:9c:7e:d7:6c:70:7b:9a:a4:c1:39:34:84:
b1:5b:96:2b:49:ae:8f:5a:a0:bf:48:a2:00:30:5c:
5b:2a:5f:dd:83:f7:42:6e:b1:8c:94:4d:57:f6:be:
71:f8:03:53:e8:0d:6c:b2:d0:cc:f5:37:3f:d9:88:
1e:bc:63:2e:b9:64:c8:07:35:7e:19:7a:56:31:6f:
34:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9B:DF:E6:A7:68:3F:89:48:1C:79:C5:CC:2E:5E:52:4E:A8:B1:8A
X509v3 Authority Key Identifier:
keyid:98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/3130332e3133302e3235322e302f32322d3232203d3e2039323634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.252.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:81:d4:8e:56:18:b5:f5:99:af:19:a2:53:d5:bb:8d:de:9f:
9b:ba:06:7a:06:f0:49:0e:09:45:5a:92:82:6a:e3:54:ea:01:
42:a6:1f:75:84:fa:05:0c:97:86:6a:fd:9e:68:91:12:96:dd:
c0:c1:cb:c3:9a:71:61:1d:a4:10:96:81:7a:a4:83:f2:1a:9f:
91:79:c0:7f:b3:d9:66:f7:0c:67:db:17:d6:60:f4:a6:88:15:
c4:30:f3:33:e1:7d:f8:d9:9f:69:a9:7f:c6:6a:18:bd:99:d3:
66:65:9c:c1:e9:6b:0a:a9:d1:61:8e:5e:94:89:fb:8e:54:01:
16:ea:ff:af:00:d5:16:22:ba:4d:c3:52:4a:31:1e:e6:2b:91:
60:b5:1c:ba:32:bd:52:62:3e:8f:7d:f1:07:2b:3b:29:97:91:
49:bb:a3:00:cd:4b:ad:4e:1f:d9:9b:2f:f7:01:b3:aa:43:93:
2b:65:8e:f2:25:31:ce:d6:1d:64:0d:f3:2f:34:1b:2c:c8:c0:
5e:c0:ea:ca:75:f3:99:a1:ec:4f:77:1f:50:31:b6:77:28:e4:
57:2b:aa:63:62:97:37:37:5e:3d:e4:ca:dc:46:88:dd:80:70:
ef:75:58:a2:6c:e7:b4:fc:55:b4:46:b8:02:58:55:8d:70:4a:
38:71:83:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:00:01 2026 by rpki-client