Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CATHDD/1/3136302e3139312e392e302f32342d3234203d3e20313530373636.roa
File: 3136302e3139312e392e302f32342d3234203d3e20313530373636.roa (raw, json)
Hash identifier: Fdjjfm1fJnNWkVxu2u3fwQcxaiitdeQENtBg51jTLAs=
Subject key identifier: B4:88:EA:56:35:26:E4:1F:7C:18:4A:AC:29:7C:5A:28:80:F7:CF:66
Certificate issuer: /CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8
Certificate serial: 70AFC611B38EB9FADCF84DB3569B0D3B0068EF89
Authority key identifier: 82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CATHDD/1/3136302e3139312e392e302f32342d3234203d3e20313530373636.roa
Signing time: Mon 11 May 2026 17:38:35 +0000
ROA not before: Mon 11 May 2026 17:33:35 +0000
ROA not after: Mon 10 May 2027 17:38:35 +0000
asID: 150766
IP address blocks: 160.191.9.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:af:c6:11:b3:8e:b9:fa:dc:f8:4d:b3:56:9b:0d:3b:00:68:ef:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8
Validity
Not Before: May 11 17:33:35 2026 GMT
Not After : May 10 17:38:35 2027 GMT
Subject: CN=B488EA563526E41F7C184AAC297C5A2880F7CF66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:54:ef:d1:e3:c2:7a:21:50:e2:73:2a:34:
31:a6:c0:fa:45:86:55:93:39:93:ee:64:75:b3:32:
57:7c:64:b0:ef:9c:44:6e:9b:a9:07:7d:bc:4b:63:
a9:aa:aa:ae:ca:ec:4a:c4:ac:8e:2f:b0:40:98:70:
ea:4e:26:b3:83:76:55:29:99:1e:ee:59:5e:bc:a9:
5a:ce:7e:bc:07:22:46:16:77:8d:93:08:a7:28:63:
59:68:f5:e3:8a:08:96:00:92:f7:26:90:0b:1a:de:
3d:13:51:4b:3e:22:f7:24:96:1e:d4:74:1e:5a:a0:
7f:07:43:9d:62:76:0d:96:6b:9d:f4:12:aa:01:1d:
3d:b9:e0:e0:0d:f6:01:eb:63:42:7c:22:04:99:25:
cb:03:86:3d:aa:9a:8e:79:ec:53:36:07:7b:21:a7:
fb:d4:e9:da:74:98:fe:94:4e:a6:69:9d:04:82:83:
25:e0:7f:64:ec:6c:34:a0:e6:91:db:71:dc:5d:2e:
a0:64:95:9f:2b:50:9a:96:57:ee:3a:b0:29:b7:3d:
fb:81:9c:d6:59:cb:2c:b8:73:a6:23:56:b0:5f:b9:
a3:74:3c:0e:3a:19:95:e4:80:fd:4b:25:ed:a3:a4:
78:37:c6:3e:d7:6b:e8:8d:28:a3:c3:41:5f:9a:f8:
39:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:88:EA:56:35:26:E4:1F:7C:18:4A:AC:29:7C:5A:28:80:F7:CF:66
X509v3 Authority Key Identifier:
keyid:82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/3136302e3139312e392e302f32342d3234203d3e20313530373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.191.9.0/24
Signature Algorithm: sha256WithRSAEncryption
06:16:11:7a:b0:c3:65:57:03:25:c4:15:b2:de:9b:d1:ca:12:
22:c7:b5:ab:bf:6b:bd:c3:d8:6c:c2:76:91:eb:40:ad:38:ba:
c7:66:58:c4:8a:60:55:11:5b:b0:13:4d:02:43:06:7d:c9:22:
48:4b:a7:7b:ef:32:6f:ac:c9:b2:fd:40:9a:ce:9f:15:fc:18:
ca:33:59:af:24:33:4e:e6:d8:95:bc:2c:9a:b6:e2:d3:db:b1:
35:9c:f5:88:62:b2:cb:8a:6b:14:17:71:3e:81:37:9f:4f:68:
0c:92:98:bb:3e:e2:bb:0b:82:d8:7a:15:c9:47:74:ff:65:00:
70:cc:c2:a0:a2:52:61:44:8f:12:6b:33:78:b2:44:c6:0d:3a:
05:27:3b:e3:64:28:12:95:7f:04:c5:0b:d2:a0:de:f8:d2:eb:
16:91:b1:2c:21:60:4c:01:70:7e:66:74:1d:c6:e4:36:a2:9f:
e4:76:79:61:34:72:11:f0:e3:81:1a:95:a1:0d:db:21:ea:f3:
77:bb:6d:5c:39:f6:d0:09:c6:a7:fb:98:14:59:04:69:9e:b9:
83:f9:6d:05:75:0c:6b:4d:a0:73:75:ea:49:65:6c:5e:ce:27:
ea:73:36:61:2f:62:91:30:cc:3e:8b:95:45:24:ed:7a:73:44:
27:1a:92:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:20:34 2026 by rpki-client