Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDBASE/0/323430323a346432303a3a2f33322d3332203d3e20313331363533.roa
File: 323430323a346432303a3a2f33322d3332203d3e20313331363533.roa (raw, json)
Hash identifier: jLINZ0KQO6feKxwIuilqEIA94aHhGEJnk9VJLWCDTOs=
Subject key identifier: 18:6C:CA:A8:F0:5C:46:F6:84:D8:CF:3C:64:BE:AC:F3:12:42:F2:24
Certificate issuer: /CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA
Certificate serial: 788172970CAA103B1A78EFC5F717159C7A7CCDE3
Authority key identifier: BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/323430323a346432303a3a2f33322d3332203d3e20313331363533.roa
Signing time: Mon 11 May 2026 17:58:12 +0000
ROA not before: Mon 11 May 2026 17:53:12 +0000
ROA not after: Mon 10 May 2027 17:58:12 +0000
asID: 131653
IP address blocks: 2402:4d20::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:81:72:97:0c:aa:10:3b:1a:78:ef:c5:f7:17:15:9c:7a:7c:cd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA
Validity
Not Before: May 11 17:53:12 2026 GMT
Not After : May 10 17:58:12 2027 GMT
Subject: CN=186CCAA8F05C46F684D8CF3C64BEACF31242F224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:fd:a5:93:b7:9a:df:aa:55:90:0b:13:53:
a8:9d:c8:56:c9:d1:95:4c:f1:56:cf:ff:b3:74:25:
80:5c:0b:b1:c3:b8:e8:28:72:7e:52:e8:ce:89:c4:
65:47:1b:06:df:ca:84:1f:f7:fa:74:41:b6:f0:24:
49:b3:f8:c6:98:4a:8f:6b:68:33:6b:32:ee:7c:d5:
59:db:f4:aa:54:23:80:c4:fb:4e:b2:ed:4c:e9:33:
2f:2d:33:a3:f1:98:bb:aa:a1:ea:35:3b:78:67:ec:
ec:53:85:99:d6:20:27:14:0a:1f:20:a9:73:4f:70:
c2:a9:bd:70:c8:ce:e7:9b:aa:53:20:d0:a9:29:e1:
a2:fe:80:6e:8e:04:c8:4a:20:00:7f:e6:93:be:c4:
62:44:ab:73:fb:cb:08:e0:f4:9b:8d:c5:31:96:53:
92:1c:7f:6f:6c:2b:71:46:0b:88:f0:61:da:9e:64:
a1:d5:d3:46:ba:dd:d1:5e:07:e5:f8:7c:6d:cb:ec:
e0:ea:b2:c3:5f:8e:83:40:5a:15:3c:7f:fb:ce:cb:
c1:ff:21:80:ed:3c:22:a4:82:ba:0b:53:9c:0d:c4:
4c:27:8d:bc:d3:a7:ff:5a:af:9d:f5:67:f0:24:d6:
41:18:ae:38:8c:4c:24:a4:ed:2f:58:b9:81:9e:7a:
16:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6C:CA:A8:F0:5C:46:F6:84:D8:CF:3C:64:BE:AC:F3:12:42:F2:24
X509v3 Authority Key Identifier:
keyid:BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/323430323a346432303a3a2f33322d3332203d3e20313331363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:4d20::/32
Signature Algorithm: sha256WithRSAEncryption
70:a3:91:fe:80:cb:0a:50:32:c5:7a:c5:43:54:a9:8c:a5:9e:
1a:a7:87:a2:73:c3:af:06:84:2b:2c:80:cf:23:df:8a:15:84:
5b:4f:9b:f4:7e:3c:75:02:09:08:f5:e1:22:a5:d4:51:e5:81:
84:a0:c8:6c:b5:d2:0a:f9:6a:d3:fd:aa:42:2e:75:2c:f3:61:
76:06:e9:d3:47:f7:e1:d7:0a:ed:9c:d1:c5:4d:04:5f:55:e1:
68:50:1c:ab:98:7c:87:e4:72:6e:48:63:c6:25:6a:c2:60:a6:
1e:73:cb:d4:14:75:b3:4e:b7:d8:75:ff:ea:93:38:c2:31:50:
79:92:8b:f7:37:b4:ee:4c:65:ea:00:87:b2:7d:4f:6f:5e:29:
9e:66:f6:3a:84:55:c1:05:ef:f9:0b:6d:ff:bb:54:93:6a:3b:
e3:f5:32:fd:92:fd:08:5d:3a:28:12:b8:e6:b2:06:b3:f5:64:
cc:e4:68:38:c6:ab:bd:94:fc:76:12:1b:16:3d:11:92:ae:57:
a8:5d:67:a9:a1:74:ee:f2:07:9d:1b:6b:02:d5:c3:b1:8d:3a:
8c:b0:e2:7b:7d:08:b9:93:ec:c9:a1:ad:52:c3:75:0d:e9:1e:
cb:9d:2b:66:36:f3:ac:20:3d:e9:50:e7:9d:90:1f:07:ee:59:
2f:37:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:45 2026 by rpki-client