Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/AS18419.roa
File: AS18419.roa (raw, json)
Hash identifier: /dBUveC7fqyuZzMk38kcJmt+xDfVQjUD//1ye3Vr2s4=
Subject key identifier: E3:62:AE:D5:E1:AC:04:EC:5E:8C:21:A5:8C:D0:39:3F:AF:A8:59:2A
Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Certificate serial: 59D352380CB4938EFE8C1FFD16D1DC925905A702
Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS18419.roa
Signing time: Mon 11 May 2026 17:17:36 +0000
ROA not before: Mon 11 May 2026 17:12:36 +0000
ROA not after: Mon 10 May 2027 17:17:36 +0000
asID: 18419
IP address blocks: 118.150.0.0/16 maxlen: 24
118.150.0.0/17 maxlen: 24
118.150.128.0/18 maxlen: 24
118.150.192.0/19 maxlen: 24
118.150.224.0/21 maxlen: 24
118.150.232.0/21 maxlen: 24
118.150.240.0/21 maxlen: 24
118.150.248.0/22 maxlen: 24
118.150.252.0/22 maxlen: 24
150.117.16.0/20 maxlen: 24
150.117.32.0/20 maxlen: 24
150.117.48.0/21 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d3:52:38:0c:b4:93:8e:fe:8c:1f:fd:16:d1:dc:92:59:05:a7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Validity
Not Before: May 11 17:12:36 2026 GMT
Not After : May 10 17:17:36 2027 GMT
Subject: CN=E362AED5E1AC04EC5E8C21A58CD0393FAFA8592A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:91:63:e3:83:30:86:07:0d:3f:34:3c:60:
f0:44:31:53:0e:f4:ce:99:30:5e:c5:e9:6b:27:d0:
b6:b3:b4:c6:36:31:df:dc:76:2f:fc:eb:0d:4a:f5:
da:7c:10:ae:61:c8:15:1f:b0:de:28:1d:b6:ec:7b:
ad:c0:cb:aa:3b:40:c5:4b:aa:ce:ee:cc:de:3f:e1:
2c:2d:e3:78:cc:07:2b:fc:8b:e3:a5:2a:ce:99:68:
d0:7e:c8:1f:5a:fb:20:fe:08:87:84:35:42:ba:82:
a6:8f:60:f2:85:e2:55:96:3e:c7:04:f4:fd:76:7a:
04:69:dc:55:d4:da:f6:39:0f:fc:96:ee:d5:a2:c3:
a0:a5:5e:a7:fc:00:3f:75:5f:b3:cb:3c:b0:fe:86:
5b:9d:c3:d6:38:9c:f1:4e:c4:de:89:8a:52:b7:1c:
ae:3a:81:f8:64:eb:6f:39:a8:37:23:2c:c7:c0:eb:
f5:80:64:d3:51:82:e1:03:e2:a0:c0:0e:d5:e4:0f:
db:69:65:99:6d:3d:ef:03:20:96:3a:1b:da:f5:25:
59:e2:87:00:6c:22:97:23:22:73:56:a5:87:fd:ac:
ac:ff:7e:c2:a7:cf:a6:8c:be:ef:80:4d:4c:9c:9a:
17:1b:83:8c:51:86:83:a9:8c:5c:d1:a3:85:f7:d7:
6c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:62:AE:D5:E1:AC:04:EC:5E:8C:21:A5:8C:D0:39:3F:AF:A8:59:2A
X509v3 Authority Key Identifier:
keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS18419.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.150.0.0/16
150.117.16.0-150.117.55.255
Signature Algorithm: sha256WithRSAEncryption
60:a5:07:c0:bf:20:4f:96:c8:a6:df:dd:62:5b:80:12:c6:76:
74:16:d1:98:5f:af:ea:bf:94:93:0c:a8:9f:58:6c:3d:0f:f1:
83:e1:79:fa:f3:cb:96:16:f1:9d:23:48:12:73:65:27:8b:66:
4c:15:58:6d:79:18:67:32:8c:27:d3:73:6e:22:2d:70:ea:fc:
5c:1d:6c:2b:7c:3c:73:ea:93:86:1e:d5:db:9c:19:7c:73:6e:
c7:ee:0c:66:c8:ce:39:36:35:ab:fb:ef:14:fe:5d:7b:6c:5d:
30:33:04:45:e2:8a:5e:ea:c4:89:86:74:55:bc:40:2c:ea:51:
6f:fd:fb:72:c4:67:96:48:a0:93:63:9b:78:e7:35:a6:fd:4e:
dc:6a:8b:c4:c0:fc:fc:92:d7:96:27:b4:a4:50:99:1c:78:b0:
26:0c:40:ad:2c:5d:2a:93:27:f1:52:54:e5:a7:7f:33:3a:a3:
f6:53:36:75:b1:6a:d2:d2:ab:97:d5:3b:97:f2:7d:b6:ee:b5:
ce:8c:e4:ac:9e:92:a3:c7:4c:73:2b:44:26:0f:8b:42:35:44:
1e:74:60:92:6c:2f:37:17:6b:33:2a:03:dd:fb:06:fd:5c:db:
ca:a6:4c:cc:91:98:84:77:78:83:ac:f0:59:73:7b:aa:01:90:
1a:17:bf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:35:26 2026 by rpki-client