Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CLARK/0/3130332e3133302e3233362e302f32332d3234203d3e20323132383935.roa
File: 3130332e3133302e3233362e302f32332d3234203d3e20323132383935.roa (raw, json)
Hash identifier: Iq8yw7WaTvNSaJInsrOVapzUOfDs0bBjNshzbffc+00=
Subject key identifier: E8:F8:4A:8E:E8:C3:65:51:BE:89:BA:99:43:11:01:49:91:3A:E2:42
Certificate issuer: /CN=9B5DA40B0F23621450755917A456431F689EB049
Certificate serial: 0E0A873D8E39A53310747B156F8BD7CF8A1E00B5
Authority key identifier: 9B:5D:A4:0B:0F:23:62:14:50:75:59:17:A4:56:43:1F:68:9E:B0:49
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CLARK/0/3130332e3133302e3233362e302f32332d3234203d3e20323132383935.roa
Signing time: Mon 11 May 2026 17:57:29 +0000
ROA not before: Mon 11 May 2026 17:52:29 +0000
ROA not after: Mon 10 May 2027 17:57:29 +0000
asID: 212895
IP address blocks: 103.130.236.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:0a:87:3d:8e:39:a5:33:10:74:7b:15:6f:8b:d7:cf:8a:1e:00:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B5DA40B0F23621450755917A456431F689EB049
Validity
Not Before: May 11 17:52:29 2026 GMT
Not After : May 10 17:57:29 2027 GMT
Subject: CN=E8F84A8EE8C36551BE89BA9943110149913AE242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d3:f7:a1:5e:58:90:5e:ea:92:19:98:bf:3a:
5b:2e:a8:46:a1:bd:0a:a6:e5:af:f2:0a:3b:3b:23:
fb:bf:fc:f3:bc:95:64:78:5d:c2:f1:c5:7f:ab:80:
f5:73:60:81:6d:4d:85:30:50:d1:e3:5d:4b:94:05:
43:81:0c:20:a6:d1:eb:c8:51:ed:75:1c:80:ed:78:
40:5d:90:bc:c1:60:4d:c9:79:d5:19:03:5b:ce:b4:
ba:1d:54:47:ca:d9:89:4a:ce:19:ed:f8:85:13:3d:
2c:b4:76:4d:c8:f6:1f:d6:2f:b8:83:c3:f6:09:94:
fb:26:b8:16:56:87:85:3a:e7:a5:43:d7:cd:cd:6f:
69:92:86:b6:37:6f:c0:7a:32:d8:4c:f3:d9:e5:10:
1d:09:8f:ff:22:a5:92:95:e0:12:ea:e4:94:6d:5e:
62:c0:72:de:24:ae:d1:d6:4b:c1:a8:15:6e:5e:4f:
2e:db:c5:18:58:ad:2d:c3:24:3c:55:dd:78:24:78:
22:3e:83:14:2f:0b:22:55:80:23:77:46:24:71:57:
c8:c8:aa:83:c2:73:e8:e5:65:78:90:73:8f:9b:fd:
c4:48:a4:b6:28:31:20:a3:34:57:dd:8e:d5:62:14:
fa:0d:f4:5f:fa:05:cd:1a:ab:9e:6c:8b:4e:15:11:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F8:4A:8E:E8:C3:65:51:BE:89:BA:99:43:11:01:49:91:3A:E2:42
X509v3 Authority Key Identifier:
keyid:9B:5D:A4:0B:0F:23:62:14:50:75:59:17:A4:56:43:1F:68:9E:B0:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLARK/0/3130332e3133302e3233362e302f32332d3234203d3e20323132383935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.236.0/23
Signature Algorithm: sha256WithRSAEncryption
90:a1:ba:5b:5f:90:07:9b:d2:94:a6:1f:39:86:68:0b:73:e2:
70:90:03:6a:4c:90:32:ce:7f:67:04:eb:df:51:68:60:a2:60:
54:bc:e3:dc:3e:87:42:be:b9:f0:7f:6b:86:73:a5:2c:d2:54:
0b:fb:51:81:62:be:31:73:d5:fc:79:84:68:3b:6e:ec:88:07:
a8:15:c8:a1:5a:44:4c:a6:09:69:7b:3f:d5:db:61:d1:8a:51:
ee:10:ec:ed:28:9c:b4:52:a1:41:76:63:ff:e0:c8:9d:57:7c:
75:26:bc:84:c8:ff:70:95:ac:2a:b6:ff:ea:bf:c6:c2:08:c7:
ae:3d:ee:c4:ec:d6:cb:e6:de:82:1e:78:91:85:0d:1f:b8:5f:
b2:73:f9:c5:24:ce:e5:e3:12:ee:4d:86:02:cd:a0:25:68:80:
d4:9e:7c:34:55:61:76:05:5b:66:bb:42:a6:5c:70:11:f5:c4:
fa:00:82:1e:dd:48:bc:93:8c:00:93:4e:a9:33:1f:ff:5a:a8:
98:9a:6a:28:3d:a1:3f:2b:c8:21:ea:be:f0:79:a0:80:0a:db:
aa:09:21:29:1c:08:ec:fd:67:1c:d1:a6:6d:21:d3:59:3b:03:
f6:e4:41:ea:1e:ae:04:82:fb:d8:8b:05:e7:df:da:2f:56:ff:
94:e4:53:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:26:49 2026 by rpki-client