Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CATVISP/0/34332e3234382e31362e302f32322d3234203d3e20313331363733.roa
File: 34332e3234382e31362e302f32322d3234203d3e20313331363733.roa (raw, json)
Hash identifier: yT6GkUFctFjsYfjkimVCCoYgqHwh9a8wPuU6HRbCaVY=
Subject key identifier: F3:C7:9C:0E:F0:70:08:1F:A8:FB:E7:A6:D9:95:05:C8:9E:48:40:51
Certificate issuer: /CN=F1F518BDB5085DA9DAA281C529D23491A72DA248
Certificate serial: 1277DA3A7E35E478F339B392DB2265225F0E6994
Authority key identifier: F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CATVISP/0/34332e3234382e31362e302f32322d3234203d3e20313331363733.roa
Signing time: Mon 11 May 2026 17:57:24 +0000
ROA not before: Mon 11 May 2026 17:52:24 +0000
ROA not after: Mon 10 May 2027 17:57:24 +0000
asID: 131673
IP address blocks: 43.248.16.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:77:da:3a:7e:35:e4:78:f3:39:b3:92:db:22:65:22:5f:0e:69:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1F518BDB5085DA9DAA281C529D23491A72DA248
Validity
Not Before: May 11 17:52:24 2026 GMT
Not After : May 10 17:57:24 2027 GMT
Subject: CN=F3C79C0EF070081FA8FBE7A6D99505C89E484051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4b:fc:d8:9c:43:e7:27:2e:ec:bb:8c:c7:f3:
3d:1a:5c:fb:15:85:ff:92:41:ee:10:30:59:f7:24:
91:d6:4a:e2:7c:fc:48:d6:0c:e6:59:08:92:50:57:
a1:2f:e8:21:9f:3c:26:47:34:45:b5:16:e0:2d:aa:
e6:0a:54:0e:83:39:3a:95:a0:94:f9:5e:ca:e4:3d:
d3:b1:eb:3e:11:d2:e2:f0:28:f0:99:ae:63:3a:fd:
ed:30:41:11:9f:26:11:e8:ff:dc:48:10:0c:fc:3c:
f7:5b:5e:b4:52:d7:46:87:23:04:d6:af:0d:39:29:
b0:4c:80:df:39:ea:3f:38:84:23:e5:35:a6:48:8b:
a0:0b:0d:ff:8f:ec:68:04:58:3a:22:a2:47:89:e9:
89:4c:4d:55:57:39:af:11:33:3b:88:8f:4a:a9:81:
64:30:28:bf:eb:09:0f:4e:b1:e0:27:9e:6c:83:40:
e9:78:9a:ed:8b:17:9f:f8:3a:a2:a1:3a:dd:26:f3:
41:6a:f3:65:d7:a2:7e:ca:bb:27:56:9d:a8:d9:9b:
49:f8:f6:3a:bb:dd:42:41:a0:69:45:93:68:39:a8:
1a:bd:bd:a0:cc:03:50:91:5b:22:f1:d3:58:fb:ca:
71:c8:f0:7c:44:5b:f4:0c:9b:4e:4e:12:3c:65:a2:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C7:9C:0E:F0:70:08:1F:A8:FB:E7:A6:D9:95:05:C8:9E:48:40:51
X509v3 Authority Key Identifier:
keyid:F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/34332e3234382e31362e302f32322d3234203d3e20313331363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.248.16.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:95:cb:20:9a:26:b9:6c:b7:ce:7b:2c:72:16:55:0b:e7:0c:
a8:ac:45:b5:0a:5d:72:59:be:3f:40:28:b3:68:a3:14:d0:43:
46:38:62:07:76:90:72:ca:eb:8e:51:4b:2f:dd:b9:ab:8d:0c:
72:e5:21:96:68:8c:f7:ec:45:87:ea:e0:62:0f:79:e5:21:ce:
36:92:22:c9:91:15:b9:1c:a7:c8:9f:cd:98:d8:df:ed:71:d2:
ac:c8:40:cd:e6:64:bf:e5:d6:b6:f5:2b:03:f8:7a:06:2b:16:
a8:93:0b:10:9b:7a:4e:e3:ef:c4:09:20:80:48:79:46:d8:7a:
d8:b8:92:2b:8a:b4:a2:8f:d7:23:09:bf:f3:b7:83:95:bd:fb:
b1:85:1f:28:94:7c:2d:c1:71:b2:0e:81:e9:c6:42:7c:40:7e:
bb:23:37:7c:ec:eb:5a:6b:61:0c:1f:a7:28:f1:83:c0:9f:a4:
b1:7e:5d:fd:73:be:37:f9:c3:4c:53:ad:4d:6a:6c:fc:a3:a6:
f5:c6:d2:b2:71:5c:c0:bd:0d:14:98:2b:93:18:84:c4:74:05:
05:84:15:52:8b:e5:5b:5d:b6:a8:50:7b:23:44:15:52:64:90:
c4:27:5e:75:33:e4:b1:80:45:f1:fc:f3:9d:db:c9:79:18:a6:
ae:9e:5c:28
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUEnfaOn415HjzObOS2yJlIl8OaZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFGNTE4QkRCNTA4NURBOURBQTI4MUM1MjlEMjM0OTFB
NzJEQTI0ODAeFw0yNjA1MTExNzUyMjRaFw0yNzA1MTAxNzU3MjRaMDMxMTAvBgNV
BAMTKEYzQzc5QzBFRjA3MDA4MUZBOEZCRTdBNkQ5OTUwNUM4OUU0ODQwNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSS/zYnEPnJy7su4zH8z0aXPsV
hf+SQe4QMFn3JJHWSuJ8/EjWDOZZCJJQV6Ev6CGfPCZHNEW1FuAtquYKVA6DOTqV
oJT5XsrkPdOx6z4R0uLwKPCZrmM6/e0wQRGfJhHo/9xIEAz8PPdbXrRS10aHIwTW
rw05KbBMgN856j84hCPlNaZIi6ALDf+P7GgEWDoiokeJ6YlMTVVXOa8RMzuIj0qp
gWQwKL/rCQ9OseAnnmyDQOl4mu2LF5/4OqKhOt0m80Fq82XXon7KuydWnajZm0n4
9jq73UJBoGlFk2g5qBq9vaDMA1CRWyLx01j7ynHI8HxEW/QMm05OEjxlovpLAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQU88ecDvBwCB+o++em2ZUFyJ5IQFEwHwYDVR0j
BBgwFoAU8fUYvbUIXanaooHFKdI0kactokgwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUVklT
UC8wL0YxRjUxOEJEQjUwODVEQTlEQUEyODFDNTI5RDIzNDkxQTcyREEyNDguY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvRjFGNTE4QkRCNTA4NURBOURBQTI4MUM1MjlE
MjM0OTFBNzJEQTI0OC5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NBVFZJU1AvMC8zNDMzMmUzMjM0
MzgyZTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTMzMzEzNjM3MzMucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAIr+BAwDQYJKoZIhvcNAQELBQADggEBAMCVyyCaJrlst857LHIWVQvn
DKisRbUKXXJZvj9AKLNooxTQQ0Y4Ygd2kHLK645RSy/duauNDHLlIZZojPfsRYfq
4GIPeeUhzjaSIsmRFbkcp8ifzZjY3+1x0qzIQM3mZL/l1rb1KwP4egYrFqiTCxCb
ek7j78QJIIBIeUbYeti4kiuKtKKP1yMJv/O3g5W9+7GFHyiUfC3BcbIOgenGQnxA
frsjN3zs61prYQwfpyjxg8CfpLF+Xf1zvjf5w0xTrU1qbPyjpvXG0rJxXMC9DRSY
K5MYhMR0BQWEFVKL5VtdtqhQeyNEFVJkkMQnXnUz5LGARfH8853byXkYpq6eXCg=
-----END CERTIFICATE-----
Generated at Wed May 13 00:34:13 2026 by rpki-client