Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/ASNET/0/323430303a343530303a3a2f33322d3332203d3e2039323634.roa
File: 323430303a343530303a3a2f33322d3332203d3e2039323634.roa (raw, json)
Hash identifier: KHJasWZ7ZRecfk0BbyKR1BgVi3lPmEGN9yAwpdYHKvo=
Subject key identifier: FA:B9:05:6A:28:5E:35:3F:87:B6:08:83:5F:D7:80:D8:CE:E3:22:C3
Certificate issuer: /CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Certificate serial: 5217BC1C0E69ECC7A3741C694B7BC4A795E401B8
Authority key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ASNET/0/323430303a343530303a3a2f33322d3332203d3e2039323634.roa
Signing time: Mon 11 May 2026 17:37:21 +0000
ROA not before: Mon 11 May 2026 17:32:21 +0000
ROA not after: Mon 10 May 2027 17:37:21 +0000
asID: 9264
IP address blocks: 2400:4500::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:17:bc:1c:0e:69:ec:c7:a3:74:1c:69:4b:7b:c4:a7:95:e4:01:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Validity
Not Before: May 11 17:32:21 2026 GMT
Not After : May 10 17:37:21 2027 GMT
Subject: CN=FAB9056A285E353F87B608835FD780D8CEE322C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4f:4e:28:67:21:aa:b7:ac:19:a7:cb:97:a1:
0d:a0:e5:b5:2a:ed:7a:59:24:f1:c4:a6:5a:dd:c8:
4a:85:e4:c5:99:fb:ea:d1:39:6b:70:23:c2:b0:e1:
7c:8b:76:49:11:09:89:a0:da:9c:4e:84:02:8c:58:
8d:c5:10:f5:c8:cd:a7:d3:82:7c:d9:83:58:4b:17:
d3:1c:7e:92:a0:9f:10:ad:44:6f:6b:b4:27:bc:5d:
e5:2e:73:0f:6c:41:9b:d7:b7:ab:c0:42:22:82:d8:
20:db:42:69:a0:60:42:c5:25:4f:ea:25:79:f4:a2:
95:08:0a:37:5a:c1:ec:93:84:61:59:86:36:cd:e6:
ec:5a:f6:e1:14:1b:c4:13:ac:5e:a7:03:21:b6:b4:
97:5f:b2:f7:19:b6:07:23:3d:ac:cb:4f:78:e4:8e:
5b:42:50:f4:63:37:7f:22:be:e0:23:b2:55:c7:91:
a3:f6:87:48:e1:a9:f8:85:02:1f:3f:71:da:bc:17:
b3:2b:95:8c:38:b4:bd:fe:5c:0e:8a:0a:e1:cb:fd:
e2:4e:e1:7f:3f:45:05:3b:1a:e3:77:a2:cf:47:2a:
5b:cc:06:1c:bf:82:bd:b6:ba:01:45:e0:20:93:27:
03:1a:6f:4b:b1:fa:8c:17:61:ab:cd:9a:7a:6f:90:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B9:05:6A:28:5E:35:3F:87:B6:08:83:5F:D7:80:D8:CE:E3:22:C3
X509v3 Authority Key Identifier:
keyid:98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/323430303a343530303a3a2f33322d3332203d3e2039323634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:4500::/32
Signature Algorithm: sha256WithRSAEncryption
6a:08:9b:2d:eb:62:25:86:86:af:e4:22:a5:4e:4d:42:f2:49:
1f:b2:ad:ac:c4:9e:1a:1d:0d:13:2f:d8:cb:f4:29:e5:11:6f:
a1:bc:12:6d:df:a0:c5:2b:03:82:72:dd:44:07:fe:36:17:52:
6e:1c:19:95:b8:64:68:3c:0e:0a:1a:89:4a:12:90:10:2a:97:
5c:90:d8:c0:47:71:ba:5f:a5:79:8b:4c:21:32:b8:9d:11:04:
ba:03:fe:f8:84:15:c5:2b:3a:54:a8:77:fb:a1:dc:5d:49:21:
f8:b6:77:21:91:a7:56:c6:47:d3:6c:11:07:b5:95:a1:5e:02:
fe:9f:4a:02:4d:23:9c:4c:b4:ed:ee:6d:8a:fd:9e:14:2f:37:
f0:9d:c7:82:30:3e:d9:66:7c:2b:ad:9b:ef:58:14:ec:77:96:
0a:b8:fb:a4:73:c3:6b:ad:42:5b:c0:8c:3c:16:30:10:39:13:
4b:81:c6:d3:6d:ca:b1:6a:29:f9:a6:37:c0:21:6b:db:34:69:
9a:b9:ec:f1:02:b7:4d:c5:63:40:33:3c:7a:4a:9d:56:a4:bb:
5c:3b:f9:b3:38:4e:5a:67:95:72:00:7d:07:c1:44:fb:17:e4:
fc:da:bd:cc:d5:f1:ee:bc:37:12:3c:0a:ea:e5:c2:bc:93:b5:
bc:9c:db:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:55:33 2026 by rpki-client