Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/AS138915.roa
File: AS138915.roa (raw, json)
Hash identifier: uGsNun+BxX8ZT/vgZvX6thq65lHzhDxm5P5ef2BV7oU=
Subject key identifier: A9:BC:DE:CE:7D:BC:6A:E4:66:B1:5F:9D:66:6A:BF:D5:F6:A3:3A:9C
Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Certificate serial: 7AE99F914EA075EE5148AE20992DAF698915E6F1
Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS138915.roa
Signing time: Mon 11 May 2026 17:19:31 +0000
ROA not before: Mon 11 May 2026 17:14:31 +0000
ROA not after: Mon 10 May 2027 17:19:31 +0000
asID: 138915
IP address blocks: 150.116.117.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:e9:9f:91:4e:a0:75:ee:51:48:ae:20:99:2d:af:69:89:15:e6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Validity
Not Before: May 11 17:14:31 2026 GMT
Not After : May 10 17:19:31 2027 GMT
Subject: CN=A9BCDECE7DBC6AE466B15F9D666ABFD5F6A33A9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:35:7b:c9:dc:d9:0a:bb:40:3a:c2:17:f3:
23:3a:7d:17:ed:81:a1:c1:27:40:33:66:79:9f:05:
5d:8c:d8:2c:5a:68:67:85:e2:75:81:9d:b7:52:c5:
d4:1a:02:b9:29:e5:65:f3:43:a4:66:10:be:5a:5d:
ad:0d:55:1b:83:27:af:4d:66:24:55:2e:8d:b8:6b:
a1:77:91:51:da:3a:82:78:62:29:0a:74:31:14:a9:
65:c7:cd:ce:3f:f0:e7:9a:8c:fe:d6:93:60:32:ee:
4b:b1:ad:b7:d7:c6:ce:26:30:61:ad:ab:85:a7:12:
5d:15:09:5a:77:6b:c0:69:cb:62:04:d8:f7:78:d4:
52:fc:94:e4:78:dc:a9:77:26:f5:bc:ac:f4:75:06:
11:ac:e0:76:6a:e4:46:38:51:21:a0:1a:0f:5b:83:
77:e6:b1:d0:fc:da:cb:7f:6e:82:a3:1d:d1:ac:a3:
5a:de:4f:ac:ab:fb:26:c2:03:40:d2:ee:bd:c9:85:
31:c8:01:79:e9:48:cc:30:9e:36:b1:eb:d7:72:f7:
6e:86:57:1c:d6:87:51:69:54:3d:90:42:aa:1a:3b:
8c:3d:72:b7:3c:fb:8c:b6:53:18:13:d9:2b:c9:3d:
33:71:e6:47:4e:32:38:7b:30:7b:0e:b0:f0:c9:92:
3a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BC:DE:CE:7D:BC:6A:E4:66:B1:5F:9D:66:6A:BF:D5:F6:A3:3A:9C
X509v3 Authority Key Identifier:
keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS138915.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.116.117.0/24
Signature Algorithm: sha256WithRSAEncryption
42:0c:62:88:3b:2e:69:34:de:a8:ec:a4:eb:31:5f:b6:28:4c:
b0:2c:2f:61:17:da:dd:3e:c7:71:1c:a5:1d:59:b1:ba:bd:a3:
83:f8:09:d0:8b:f2:21:1b:b2:3f:0b:5b:eb:ea:cc:0c:c0:be:
23:49:81:65:b0:00:43:05:18:81:6a:bd:c3:41:4e:e5:3f:40:
aa:81:6a:83:e4:96:4f:d9:52:74:54:4c:50:c2:eb:59:37:12:
54:3d:12:54:6f:a0:0f:54:50:30:a0:ca:21:2d:96:39:f2:92:
36:88:ba:07:bf:ac:f0:29:1b:b1:ec:8e:a0:8f:52:f6:17:62:
34:c7:b8:1e:9c:03:14:f6:3a:c9:23:27:29:d0:70:97:36:b1:
da:c9:b4:73:5d:41:1c:99:dc:c5:c1:8f:c9:29:6e:00:6d:09:
13:3f:4b:49:c1:35:dd:f5:f5:80:ee:41:e7:3a:a8:1c:10:dc:
62:49:7c:25:89:95:57:b0:2d:fc:21:1c:2c:da:e3:b5:49:42:
fe:7d:1d:ef:99:f8:55:a9:9d:b6:28:91:bb:d6:b7:1c:fa:bb:
14:c7:ea:03:d5:f9:46:41:39:3d:4e:28:eb:1c:b8:a4:8c:28:
00:78:41:70:ab:0c:77:9f:08:7a:3f:01:c2:22:58:08:77:36:
41:93:5b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:25 2026 by rpki-client