Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CATHDD/1/3136302e3139312e382e302f32342d3234203d3e20313530373636.roa
File: 3136302e3139312e382e302f32342d3234203d3e20313530373636.roa (raw, json)
Hash identifier: 23kEX/05VYapgUwuItpshBmqk2zUM39bNJvI89JH27Y=
Subject key identifier: 49:02:FB:1A:5F:07:5D:9C:6A:BF:88:A3:D1:29:E4:F9:96:36:A2:82
Certificate issuer: /CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8
Certificate serial: 4334E888ACB3B9FB6E8E05075B9C98EB86679C5A
Authority key identifier: 82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CATHDD/1/3136302e3139312e382e302f32342d3234203d3e20313530373636.roa
Signing time: Mon 11 May 2026 17:38:32 +0000
ROA not before: Mon 11 May 2026 17:33:32 +0000
ROA not after: Mon 10 May 2027 17:38:32 +0000
asID: 150766
IP address blocks: 160.191.8.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:34:e8:88:ac:b3:b9:fb:6e:8e:05:07:5b:9c:98:eb:86:67:9c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8
Validity
Not Before: May 11 17:33:32 2026 GMT
Not After : May 10 17:38:32 2027 GMT
Subject: CN=4902FB1A5F075D9C6ABF88A3D129E4F99636A282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:29:56:bb:f2:93:0a:b3:36:a7:f4:6e:42:
1a:ba:26:70:f8:9a:21:db:db:bd:24:3e:bf:c3:f9:
93:ab:cb:48:cc:41:a9:45:47:ed:52:36:2e:69:d9:
42:8f:c8:6f:03:be:6d:13:a1:30:a3:e2:55:f7:86:
4d:d5:be:28:dc:d8:46:2d:6d:97:e3:30:a9:ad:01:
a2:72:c0:93:49:a4:8f:85:cc:c0:85:e8:85:58:bf:
f8:11:09:55:58:29:07:f5:e3:76:52:85:94:27:1b:
15:85:43:93:ee:bb:3f:50:63:45:8e:88:51:61:8f:
97:98:00:e9:81:8e:4a:1f:9d:b8:5a:59:63:41:1c:
23:71:df:a0:1f:28:cf:4c:51:ef:9a:95:2e:77:3d:
37:03:09:30:74:d2:f0:62:9d:32:31:f5:77:cc:31:
62:f2:3c:87:3a:eb:c5:58:63:40:9c:d5:8d:aa:66:
a8:f6:47:0b:51:c8:18:9f:d4:bb:f9:a7:8c:27:b7:
32:2d:59:76:6d:d3:d7:c2:de:e2:cb:de:4e:4f:77:
94:d6:5e:4d:e6:45:f8:91:3c:cd:3b:45:89:1b:5d:
f8:84:f9:f0:ab:5e:84:08:58:85:ae:ec:46:a7:90:
62:cd:cb:5e:6b:0e:90:e1:b0:5d:b0:1b:59:03:57:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:02:FB:1A:5F:07:5D:9C:6A:BF:88:A3:D1:29:E4:F9:96:36:A2:82
X509v3 Authority Key Identifier:
keyid:82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/3136302e3139312e382e302f32342d3234203d3e20313530373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.191.8.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:04:3d:ca:e8:c7:1f:03:6f:06:52:f9:84:77:26:48:d8:ef:
c5:72:da:bb:bf:ba:b8:08:f6:cd:e9:d6:fb:8a:ee:0f:61:eb:
51:ce:3e:8e:b0:8b:be:98:65:08:21:2c:3e:07:53:34:ea:43:
34:4a:4e:4f:06:9a:ec:78:38:19:86:aa:39:0e:a1:68:5b:17:
9f:59:eb:a5:d9:54:ae:7f:8d:fc:8b:9a:c3:1c:f8:ce:d3:ee:
ad:28:cf:b8:36:b0:0d:77:15:fe:f1:b4:9a:d3:0e:f2:28:e1:
8b:fb:a8:62:dc:a1:ee:98:e3:6d:a4:7b:3d:f0:d6:1d:9b:ca:
79:02:0a:37:a6:07:56:49:b0:64:cb:be:bb:a6:79:a4:53:58:
90:b1:ba:af:69:ca:77:a6:07:76:dd:8e:63:9b:7d:d4:5b:fd:
6b:f7:44:b8:00:88:a6:ea:77:f4:15:6a:0f:2e:1d:6e:1c:7f:
3d:21:a5:bd:33:b6:50:71:0d:e6:15:58:14:e3:19:d2:4d:dc:
f3:fe:d8:f9:b5:2b:5d:89:a5:7d:50:0b:ce:73:67:18:5b:9e:
98:1b:49:24:53:5a:7f:07:ec:84:1c:50:c1:e2:56:1e:23:af:
98:79:70:33:2b:19:20:aa:b6:88:f5:6f:5b:a3:95:d0:f1:82:
06:61:a7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:14:01 2026 by rpki-client