Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/ASNET/0/3130332e3133302e3235322e302f32322d3234203d3e2039323634.roa
File: 3130332e3133302e3235322e302f32322d3234203d3e2039323634.roa (raw, json)
Hash identifier: ebYSyc6wu3utGCh3CfyxTzxW7KNMw2xjNw8vV6+J0FQ=
Subject key identifier: 8A:89:DB:A7:E3:F2:39:0A:44:4F:37:3E:15:93:7D:3A:C7:06:FE:7D
Certificate issuer: /CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Certificate serial: 01EFD4E47EF96E01D9274DF09AF40527A1792F13
Authority key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ASNET/0/3130332e3133302e3235322e302f32322d3234203d3e2039323634.roa
Signing time: Mon 11 May 2026 17:59:02 +0000
ROA not before: Mon 11 May 2026 17:54:02 +0000
ROA not after: Mon 10 May 2027 17:59:02 +0000
asID: 9264
IP address blocks: 103.130.252.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ef:d4:e4:7e:f9:6e:01:d9:27:4d:f0:9a:f4:05:27:a1:79:2f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Validity
Not Before: May 11 17:54:02 2026 GMT
Not After : May 10 17:59:02 2027 GMT
Subject: CN=8A89DBA7E3F2390A444F373E15937D3AC706FE7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:0e:40:e5:0b:51:75:65:36:26:30:bb:49:
d2:94:5d:a8:2d:ed:ae:37:b0:6a:68:c3:df:6d:8c:
fa:64:41:cd:1e:5c:2d:ba:09:2e:27:9c:9a:56:b4:
d4:83:ec:28:87:be:41:d1:4c:f9:37:a4:eb:1b:c9:
04:8b:e1:84:2d:b6:ea:18:a9:85:92:e1:a5:97:d1:
06:38:f4:0c:e1:9c:d4:4d:70:d4:f2:ac:11:3c:c3:
ca:54:8c:8e:f7:95:0a:c3:7f:4e:c3:c8:d9:33:77:
8e:14:18:34:4e:54:2e:fe:2e:93:22:dd:32:b0:be:
db:c3:c3:3f:13:cd:f9:28:ad:ef:e8:9f:5f:09:04:
b6:d4:8d:f0:f7:62:8c:b1:ac:11:cf:58:a5:c6:0b:
09:08:e2:55:8e:0d:44:74:bc:e7:80:b4:f9:92:40:
3b:0e:76:44:22:84:86:5f:9c:0f:f8:02:c2:91:22:
65:b7:6b:34:d8:53:69:7e:7c:20:80:b2:63:3d:b6:
6c:d0:7f:e7:43:42:be:b8:9c:ff:1e:44:f4:31:e6:
8e:ee:b5:3a:63:21:2b:08:6c:c8:77:7b:ae:eb:25:
17:1f:3c:5c:58:b1:37:69:b2:3b:a0:aa:81:e2:b1:
84:32:d0:24:c5:32:a2:28:a4:4a:36:85:79:2d:b4:
2a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:89:DB:A7:E3:F2:39:0A:44:4F:37:3E:15:93:7D:3A:C7:06:FE:7D
X509v3 Authority Key Identifier:
keyid:98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/3130332e3133302e3235322e302f32322d3234203d3e2039323634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.252.0/22
Signature Algorithm: sha256WithRSAEncryption
31:0f:2b:89:35:67:a5:4c:1b:78:19:38:1b:93:2c:10:c4:2e:
09:78:0c:13:2d:b7:0e:aa:71:16:c0:d6:a7:f0:ec:e9:27:80:
52:43:8c:11:3d:0a:1d:9d:b5:2a:09:55:2b:5a:b9:c4:ba:f3:
01:21:82:fa:ee:eb:9a:bb:b5:6b:28:a0:e3:98:f9:8c:f9:d2:
91:a1:45:05:01:ef:21:a7:79:57:32:06:69:78:9f:7c:4a:c1:
30:bb:48:3a:fc:8a:e7:94:2d:0a:29:5b:31:0a:a7:99:98:58:
42:ac:e2:82:f0:36:2a:72:13:17:58:75:a9:63:ee:cd:2b:e9:
a2:02:84:9d:8a:28:9a:b4:40:d2:e8:c9:97:11:c1:8a:d3:b6:
70:f0:0c:40:0e:c6:bd:54:80:e9:8b:2b:65:4f:e6:e0:bb:90:
36:13:d6:23:49:c9:ba:c9:03:98:e9:d5:64:46:9c:5f:c7:5f:
73:57:4a:e8:36:66:36:90:7c:0e:a8:10:d3:ec:10:e8:94:69:
71:e3:c3:46:2d:94:16:c0:76:f7:d4:27:c5:9f:45:d0:b3:9e:
d4:0f:9a:09:c1:bb:a9:88:40:45:b6:b5:89:0d:82:05:03:66:
74:1c:7f:0f:26:fb:fd:5e:45:f3:be:80:bb:9a:7a:43:ad:19:
fc:f7:bc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:59:32 2026 by rpki-client