Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/ASNET/0/3230322e3134302e3136302e302f31392d3139203d3e2039323634.roa
File: 3230322e3134302e3136302e302f31392d3139203d3e2039323634.roa (raw, json)
Hash identifier: LA74+HRCy+YQeY35gYYWFZPH2WSKO8OariSVC3JqHzM=
Subject key identifier: 59:12:E5:37:DA:99:DF:26:A9:3D:4C:3C:6E:8D:8E:19:FA:16:BF:77
Certificate issuer: /CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Certificate serial: 48ADA59B5217CC42E00ACD59DEF696123483D73E
Authority key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ASNET/0/3230322e3134302e3136302e302f31392d3139203d3e2039323634.roa
Signing time: Mon 11 May 2026 17:37:21 +0000
ROA not before: Mon 11 May 2026 17:32:21 +0000
ROA not after: Mon 10 May 2027 17:37:21 +0000
asID: 9264
IP address blocks: 202.140.160.0/19 maxlen: 19
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ad:a5:9b:52:17:cc:42:e0:0a:cd:59:de:f6:96:12:34:83:d7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Validity
Not Before: May 11 17:32:21 2026 GMT
Not After : May 10 17:37:21 2027 GMT
Subject: CN=5912E537DA99DF26A93D4C3C6E8D8E19FA16BF77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:c6:18:58:69:f5:23:53:d1:e6:33:21:c5:
54:f2:0b:3b:b0:b5:44:18:30:15:8b:5e:24:13:fe:
24:12:48:3c:7e:c5:60:6e:3f:4c:fb:a1:dd:b0:35:
62:2a:e5:5e:c0:9c:68:68:80:54:ac:ef:07:d6:31:
0a:86:3c:83:cf:e5:72:11:9c:55:46:1e:d4:da:1c:
a5:f8:4f:92:ff:35:60:e7:66:f8:df:af:c2:cb:8b:
17:47:69:67:44:9c:d1:93:e1:0a:46:cf:50:84:a4:
2c:6b:3b:de:3e:e6:2e:83:e2:c2:ab:f5:43:6f:25:
9d:0a:c2:d5:9a:e3:95:cb:f7:ea:f6:4f:58:ae:0d:
b6:58:4b:86:91:1e:77:72:0a:11:fb:6b:3d:24:68:
b8:51:40:5d:30:04:0e:3e:7e:cc:24:26:4b:76:34:
7f:ce:c1:b8:84:1c:11:04:7f:53:54:3c:56:2c:8c:
a3:f9:ff:34:88:6d:ec:40:87:d2:ae:3c:d5:29:2e:
5b:66:30:62:18:89:c1:5c:9a:cd:d0:a4:eb:60:45:
ff:f2:40:78:6f:d6:f2:28:49:03:ba:94:d7:bf:56:
bb:aa:1b:f2:67:47:73:7b:95:8d:8e:93:cd:b8:9c:
d2:d4:28:b0:d2:9e:ed:56:b7:f9:68:13:6a:c1:b1:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:12:E5:37:DA:99:DF:26:A9:3D:4C:3C:6E:8D:8E:19:FA:16:BF:77
X509v3 Authority Key Identifier:
keyid:98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/3230322e3134302e3136302e302f31392d3139203d3e2039323634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.140.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:69:ec:06:11:e6:64:76:a9:bb:58:f4:ad:07:89:f0:c5:a5:
30:d2:c0:eb:86:73:23:d3:14:bb:b7:e4:a0:ca:14:ee:f9:20:
c4:97:ff:48:d2:9f:26:28:af:70:85:c2:c8:d6:91:85:85:7a:
f3:13:be:29:7f:6b:ce:12:51:30:ce:23:ae:05:29:61:09:dc:
12:eb:49:be:30:de:5d:7f:58:8c:bb:d1:ec:08:13:ad:f0:76:
69:3b:38:c0:42:9d:fd:e0:5b:9b:15:0b:7e:87:dc:3d:c0:57:
41:6b:5f:76:d4:7b:ed:bf:f9:38:7a:3d:d1:61:fa:2e:19:20:
41:12:5d:ef:ff:1f:52:6c:d7:f2:59:a0:3b:a5:d6:ca:7d:da:
2e:d2:eb:66:76:b4:94:df:5f:89:f7:72:3e:25:aa:b5:6b:c7:
9b:c1:06:21:de:87:d2:56:06:c2:64:89:5a:92:b8:cd:ae:ab:
a7:bf:2f:be:23:39:d9:54:2e:12:6e:51:00:45:93:40:45:79:
c6:4e:30:04:8c:a3:d7:d5:da:be:f1:8b:08:0f:39:ec:ce:f7:
e4:f5:94:dc:48:42:9a:4e:19:23:3c:8f:5a:9b:f7:8e:46:0b:
5e:35:af:fc:02:4c:b4:ea:b9:f4:13:a1:bb:91:f9:05:a4:54:
ae:0a:df:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:59:40 2026 by rpki-client