Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/ASNET/0/3131372e3130332e39362e302f32302d3230203d3e2039323634.roa
File: 3131372e3130332e39362e302f32302d3230203d3e2039323634.roa (raw, json)
Hash identifier: QzqhrVUHom/+44097wyR/SgbPwVIpPZtBP2vJQUQT34=
Subject key identifier: C2:FC:0A:2A:88:B1:8D:FA:5F:E7:76:09:80:49:DA:AB:44:A5:09:4A
Certificate issuer: /CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Certificate serial: 1A36E108FFF751D82A7D667D1D388F60BA7ACBE8
Authority key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ASNET/0/3131372e3130332e39362e302f32302d3230203d3e2039323634.roa
Signing time: Mon 11 May 2026 17:37:20 +0000
ROA not before: Mon 11 May 2026 17:32:20 +0000
ROA not after: Mon 10 May 2027 17:37:20 +0000
asID: 9264
IP address blocks: 117.103.96.0/20 maxlen: 20
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:36:e1:08:ff:f7:51:d8:2a:7d:66:7d:1d:38:8f:60:ba:7a:cb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Validity
Not Before: May 11 17:32:20 2026 GMT
Not After : May 10 17:37:20 2027 GMT
Subject: CN=C2FC0A2A88B18DFA5FE776098049DAAB44A5094A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:d1:1e:48:2a:7d:d3:02:a4:09:b6:a9:f0:
34:d5:7c:0c:f4:9d:32:68:37:e2:35:85:b2:c6:96:
42:23:fd:55:c3:54:1a:33:77:32:5d:21:5c:9b:dd:
28:8a:be:5a:0b:0a:e8:12:5f:b1:f0:54:19:d0:8f:
0a:3a:99:0e:64:9d:db:e8:3c:e8:a4:6b:c6:0b:37:
d8:aa:f7:33:84:8c:73:a3:42:ce:8e:50:87:3e:86:
5c:fd:e1:f4:97:df:6e:89:df:04:56:0c:5e:56:60:
60:ee:5a:7e:03:ff:8b:35:cf:cf:c2:1f:b8:f5:5d:
9f:60:00:0f:61:f3:7b:14:e4:7f:66:fd:ef:ec:14:
88:d3:69:6d:0b:30:c4:df:de:2d:51:37:39:a7:aa:
ff:2b:e1:f5:a1:bc:dc:c1:69:89:e5:38:75:27:2f:
21:01:36:2c:3d:98:5b:a8:a9:95:44:b0:ca:06:5d:
4d:58:ce:0a:e4:b7:86:c2:d6:03:76:ed:15:44:d2:
60:f8:53:cd:65:c1:a4:c7:01:dc:6e:37:47:6d:90:
53:16:5a:db:94:ea:5b:b5:8f:31:a7:46:a1:03:ba:
32:70:1a:c7:a2:19:62:b2:cb:d9:cd:97:bf:27:3c:
34:81:72:00:92:3a:8c:cc:d0:d9:64:af:3b:1a:c9:
00:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FC:0A:2A:88:B1:8D:FA:5F:E7:76:09:80:49:DA:AB:44:A5:09:4A
X509v3 Authority Key Identifier:
keyid:98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/3131372e3130332e39362e302f32302d3230203d3e2039323634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.103.96.0/20
Signature Algorithm: sha256WithRSAEncryption
17:a0:ce:a7:2f:50:64:78:75:36:8f:a4:06:db:fb:4b:92:aa:
3c:0b:fd:6d:d0:a3:83:3d:09:49:58:96:e5:5a:38:55:4e:dc:
43:a4:02:94:b0:4a:12:ed:33:ab:d5:81:78:f1:8b:5a:03:c2:
e8:39:c9:c3:f0:67:2b:d9:c6:31:41:85:53:7e:67:67:34:2b:
19:ce:23:92:73:bd:03:df:fa:29:00:7d:bd:34:ef:6f:55:52:
9c:bf:bc:fb:da:f8:bc:65:c4:94:2c:a6:13:45:2c:9a:bb:31:
40:cc:65:95:1c:70:0d:e8:77:9d:84:28:9b:8e:f7:3b:d0:a7:
51:32:b7:52:39:f7:43:fe:cb:19:75:c3:b8:3e:98:89:d4:66:
e0:d1:2c:d3:b3:3e:c5:e3:eb:12:e4:f8:b1:b7:6e:d3:9a:c5:
40:3f:d4:6e:f6:50:0d:48:2f:04:a1:36:74:63:44:a0:59:5b:
b3:df:65:6a:08:1e:25:77:34:3f:31:d3:27:06:17:f0:82:59:
39:2a:63:a9:1d:b2:ef:75:d2:e4:b2:33:9f:c2:4d:9d:2c:f5:
78:cf:da:f8:9c:1d:24:06:b8:51:60:00:54:43:04:d7:b9:2c:
f6:68:b4:ca:34:70:be:19:59:82:97:25:49:07:83:30:5a:98:
ab:c8:36:2a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUGjbhCP/3UdgqfWZ9HTiPYLp6y+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgzMkE3RTRDRjQ1NzI5RURDRDM2ODFEMDE0NkUxRUQz
QTRBNDBDMzAeFw0yNjA1MTExNzMyMjBaFw0yNzA1MTAxNzM3MjBaMDMxMTAvBgNV
BAMTKEMyRkMwQTJBODhCMThERkE1RkU3NzYwOTgwNDlEQUFCNDRBNTA5NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNEtEeSCp90wKkCbap8DTVfAz0
nTJoN+I1hbLGlkIj/VXDVBozdzJdIVyb3SiKvloLCugSX7HwVBnQjwo6mQ5kndvo
POika8YLN9iq9zOEjHOjQs6OUIc+hlz94fSX326J3wRWDF5WYGDuWn4D/4s1z8/C
H7j1XZ9gAA9h83sU5H9m/e/sFIjTaW0LMMTf3i1RNzmnqv8r4fWhvNzBaYnlOHUn
LyEBNiw9mFuoqZVEsMoGXU1Yzgrkt4bC1gN27RVE0mD4U81lwaTHAdxuN0dtkFMW
WtuU6lu1jzGnRqEDujJwGseiGWKyy9nNl78nPDSBcgCSOozM0NlkrzsayQDtAgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUwvwKKoixjfpf53YJgEnaq0SlCUowHwYDVR0j
BBgwFoAUmDKn5M9Fcp7c02gdAUbh7TpKQMMwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVNORVQv
MC85ODMyQTdFNENGNDU3MjlFRENEMzY4MUQwMTQ2RTFFRDNBNEE0MEMzLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzk4MzJBN0U0Q0Y0NTcyOUVEQ0QzNjgxRDAxNDZF
MUVEM0E0QTQwQzMuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BU05FVC8wLzMxMzEzNzJlMzEzMDMz
MmUzOTM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzkzMjM2MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAR1Z2AwDQYJKoZIhvcNAQELBQADggEBABegzqcvUGR4dTaPpAbb+0uSqjwL/W3Q
o4M9CUlYluVaOFVO3EOkApSwShLtM6vVgXjxi1oDwug5ycPwZyvZxjFBhVN+Z2c0
KxnOI5JzvQPf+ikAfb00729VUpy/vPva+LxlxJQsphNFLJq7MUDMZZUccA3od52E
KJuO9zvQp1Eyt1I590P+yxl1w7g+mInUZuDRLNOzPsXj6xLk+LG3btOaxUA/1G72
UA1ILwShNnRjRKBZW7PfZWoIHiV3ND8x0ycGF/CCWTkqY6kdsu910uSyM5/CTZ0s
9XjP2vicHSQGuFFgAFRDBNe5LPZotMo0cL4ZWYKXJUkHgzBamKvINio=
-----END CERTIFICATE-----
Generated at Tue May 12 23:00:40 2026 by rpki-client