Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/ASNET/0/323030313a6330383a3a2f33322d3332203d3e2039323634.roa
File: 323030313a6330383a3a2f33322d3332203d3e2039323634.roa (raw, json)
Hash identifier: Za2eLedW7Dgj1YKn18rk+zYaiAYcT3aXmTUgI60NrbY=
Subject key identifier: 6C:08:03:AF:B1:DD:EC:AA:21:C2:40:70:BD:5F:0E:BA:B7:92:ED:F7
Certificate issuer: /CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Certificate serial: 511E0B6BF6C6BE7FF95E755614ACE37CDF83EAA0
Authority key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ASNET/0/323030313a6330383a3a2f33322d3332203d3e2039323634.roa
Signing time: Mon 11 May 2026 17:01:21 +0000
ROA not before: Mon 11 May 2026 16:56:21 +0000
ROA not after: Mon 10 May 2027 17:01:21 +0000
asID: 9264
IP address blocks: 2001:c08::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:1e:0b:6b:f6:c6:be:7f:f9:5e:75:56:14:ac:e3:7c:df:83:ea:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Validity
Not Before: May 11 16:56:21 2026 GMT
Not After : May 10 17:01:21 2027 GMT
Subject: CN=6C0803AFB1DDECAA21C24070BD5F0EBAB792EDF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:0c:3a:18:b9:5c:64:a1:b9:d5:0d:3a:8f:
62:16:43:9f:d1:b7:96:a6:cc:53:37:1e:74:bf:c6:
3e:0f:93:75:51:33:98:c4:df:62:1c:8e:e9:7d:9e:
45:43:a5:75:27:b4:eb:d3:41:79:fc:63:f8:bb:77:
ff:6c:70:e5:d5:15:79:df:5d:75:f4:3c:02:05:f0:
71:71:cd:6f:14:f8:d4:a8:66:81:6b:93:7b:a9:63:
a7:1d:16:86:0f:c4:dd:fb:f7:3c:50:e4:44:f2:fe:
83:58:db:f8:d3:27:70:51:01:5a:e2:5c:91:a7:d5:
15:52:6d:59:27:6d:b0:78:5b:98:c3:58:b0:bb:8b:
38:51:3f:7c:97:fe:b9:63:e1:b1:9b:98:9d:86:fc:
2f:76:ec:19:13:33:3c:72:ca:1a:0c:62:ed:58:1b:
73:27:4d:40:5d:bb:1f:4e:92:69:51:fe:d4:ca:e3:
2f:78:3e:f3:28:0c:0a:b6:2e:a3:7f:5e:62:ce:d3:
6f:ee:cf:21:27:24:ac:60:2e:6c:15:e9:f8:12:a9:
ce:01:28:fa:91:cc:9c:a2:a6:50:f6:4d:30:2b:45:
62:1a:ed:0b:07:7a:32:e3:5e:92:c3:d9:28:41:96:
7d:9b:75:29:d4:90:50:34:d9:13:f1:b0:e5:cd:6b:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:08:03:AF:B1:DD:EC:AA:21:C2:40:70:BD:5F:0E:BA:B7:92:ED:F7
X509v3 Authority Key Identifier:
keyid:98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/323030313a6330383a3a2f33322d3332203d3e2039323634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:c08::/32
Signature Algorithm: sha256WithRSAEncryption
69:55:c9:55:ff:49:ac:f9:96:58:4a:19:05:3e:a6:62:c6:8b:
cf:b8:90:3d:de:d6:13:5b:8c:df:c4:0a:2c:70:4e:22:23:be:
81:7a:a0:1a:f7:0e:96:0d:2d:9a:97:b8:c8:44:2d:c0:37:33:
d6:3e:67:af:47:97:ef:b7:6b:c8:f0:08:12:de:bf:32:02:76:
53:47:7a:62:92:36:05:1f:00:0b:f5:e3:93:15:ef:5c:78:3c:
6d:94:23:72:a7:73:5f:20:db:e4:e4:43:fb:1a:b8:56:a4:92:
4e:6f:2e:21:4a:ce:e6:8a:fd:38:9a:42:2e:27:29:04:6d:75:
06:b6:5b:05:d3:12:c8:fc:09:c1:26:ed:89:7c:16:e4:82:d5:
95:bb:30:c5:45:15:9c:4c:e4:f1:5c:8f:eb:5b:4b:1a:70:de:
c8:2b:98:c9:8e:ec:7a:34:f0:9e:1a:a1:13:24:20:51:0e:6a:
b3:c4:16:d9:7d:ce:ef:8b:ed:f9:7b:84:d2:28:99:1e:0c:b4:
97:74:fe:e5:0c:ca:19:0a:f8:e3:3a:e4:37:7a:b7:3c:36:2f:
8f:c9:af:fc:b1:c3:0a:2c:22:ac:b4:a3:ae:1a:04:ec:1b:d8:
5f:49:58:05:97:23:69:22:69:6e:fc:af:b9:28:1d:5b:a9:73:
1c:01:18:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:59:28 2026 by rpki-client