Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDBASE/1/3136352e3130312e32382e302f32332d3234203d3e20313532363236.roa
File: 3136352e3130312e32382e302f32332d3234203d3e20313532363236.roa (raw, json)
Hash identifier: btNO8YG7Xa0kAdLaiC/xjh2pArbM9BSYgMB1cmgXBcM=
Subject key identifier: 55:E4:EE:A3:7B:64:B3:8E:EF:26:8E:DD:88:57:BB:F7:EF:1E:05:2D
Certificate issuer: /CN=385249635956536ABAE4461A37AC4824F9DC8FD6
Certificate serial: 6350A9FB12B40D40396932CDAF0FC1FB7DE63BFB
Authority key identifier: 38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/3136352e3130312e32382e302f32332d3234203d3e20313532363236.roa
Signing time: Mon 11 May 2026 17:57:58 +0000
ROA not before: Mon 11 May 2026 17:52:58 +0000
ROA not after: Mon 10 May 2027 17:57:58 +0000
asID: 152626
IP address blocks: 165.101.28.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:50:a9:fb:12:b4:0d:40:39:69:32:cd:af:0f:c1:fb:7d:e6:3b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385249635956536ABAE4461A37AC4824F9DC8FD6
Validity
Not Before: May 11 17:52:58 2026 GMT
Not After : May 10 17:57:58 2027 GMT
Subject: CN=55E4EEA37B64B38EEF268EDD8857BBF7EF1E052D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:cd:22:5a:93:3c:08:64:6f:ca:50:fe:4a:
27:12:2b:d9:1e:6e:fb:c9:6c:eb:f4:48:bb:67:d4:
57:41:f8:1d:d0:94:64:7a:c9:f5:61:2b:99:f3:85:
8e:e6:0a:9d:20:47:41:77:73:dd:9e:29:ea:0b:ff:
7a:0d:66:40:ec:4d:dd:76:8e:c5:f1:a9:86:12:e0:
50:1a:5e:ce:4a:9b:50:11:e3:d9:27:1e:48:3a:dc:
48:2f:7d:98:8c:e6:bd:0c:da:ad:9d:af:69:7c:86:
c1:32:2a:98:72:61:a1:9e:79:fb:9b:01:ce:d0:d0:
4f:14:dd:fd:32:46:3f:df:1f:34:8c:2f:ec:f7:f2:
5e:a4:16:f2:c8:58:4e:77:a2:a4:f7:c2:68:43:0e:
91:7a:e1:48:c8:ec:2d:dc:ad:6e:49:47:e9:41:2d:
6b:1a:06:61:0e:88:5c:77:10:ad:ef:4e:f9:25:6d:
ea:be:0b:16:c0:5f:b2:7f:80:7a:0c:d4:7c:a4:63:
7e:41:da:7f:10:90:b3:90:96:6a:4c:d0:e3:5b:4b:
d4:79:b1:59:d8:0e:f2:b8:62:f1:9a:e7:62:95:03:
8e:f5:c0:63:67:4e:47:bc:0a:63:d0:de:6e:97:66:
d6:c9:50:cc:54:00:16:c7:cf:1b:86:e0:5d:00:33:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E4:EE:A3:7B:64:B3:8E:EF:26:8E:DD:88:57:BB:F7:EF:1E:05:2D
X509v3 Authority Key Identifier:
keyid:38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/3136352e3130312e32382e302f32332d3234203d3e20313532363236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.101.28.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:1e:d1:09:77:fa:62:41:9f:c6:49:30:44:86:73:6d:39:38:
ed:67:93:76:6f:98:f5:21:99:82:27:f1:24:32:dc:d5:cd:8a:
d6:f8:a6:90:e6:4a:c6:b5:89:2b:30:df:55:29:db:8e:0d:9e:
4d:7d:b2:f8:d6:d4:1d:17:bf:f5:d1:f8:07:ca:b9:e6:9b:5d:
ce:58:fd:4b:5c:35:3e:e2:14:d6:d9:d1:f0:33:7e:4a:73:5f:
24:77:6a:80:29:bc:c9:ea:98:d6:ef:a6:88:b4:50:12:5f:21:
e7:2d:7b:aa:15:fa:49:a7:50:22:24:95:f3:e1:cb:70:f8:5b:
fa:5a:df:43:c5:7f:c0:d9:b5:72:e9:f2:e1:37:0b:05:fc:0f:
68:4f:1d:f5:37:6d:6d:ab:d8:32:1b:0f:aa:c3:c6:b9:8c:9c:
05:c7:2c:a2:f9:2b:4a:a6:3d:da:81:7b:a0:55:2d:5a:d8:5e:
65:ea:9b:f3:f0:21:d0:93:ed:f2:cf:5d:a5:a0:27:38:f2:24:
33:a9:2e:0c:82:36:41:81:5e:5a:1a:82:07:a4:2e:67:72:5c:
8c:9b:c2:da:ef:6a:47:dd:06:e0:44:eb:e7:b4:02:0f:a0:9a:
cc:98:52:c3:1e:51:86:40:18:71:23:70:5e:96:49:d2:0a:ba:
6c:d4:6a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:44 2026 by rpki-client