Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDNODE/0/3232332e32362e31302e302f32332d3234203d3e203231383539.roa
File: 3232332e32362e31302e302f32332d3234203d3e203231383539.roa (raw, json)
Hash identifier: KeYIdvmIdFmXoaD7PfpE0neyX1HamQXTrD45lQIfHyQ=
Subject key identifier: E3:59:9E:99:93:8B:39:EE:87:94:0B:E6:32:35:04:61:86:FD:FD:EF
Certificate issuer: /CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB
Certificate serial: 42F9E0CC6CEC010DBFB0575B234A54D66CF10CE3
Authority key identifier: E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/3232332e32362e31302e302f32332d3234203d3e203231383539.roa
Signing time: Mon 11 May 2026 17:56:41 +0000
ROA not before: Mon 11 May 2026 17:51:41 +0000
ROA not after: Mon 10 May 2027 17:56:41 +0000
asID: 21859
IP address blocks: 223.26.10.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f9:e0:cc:6c:ec:01:0d:bf:b0:57:5b:23:4a:54:d6:6c:f1:0c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB
Validity
Not Before: May 11 17:51:41 2026 GMT
Not After : May 10 17:56:41 2027 GMT
Subject: CN=E3599E99938B39EE87940BE63235046186FDFDEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:b0:e1:9f:3f:38:a6:54:c1:7f:44:b6:00:
3e:cc:3d:4d:11:6d:c5:1a:dc:d3:3b:2d:98:4f:cf:
81:e2:dd:51:d3:48:5b:6c:ce:57:ff:60:3c:6e:4e:
b1:2e:1f:04:61:e1:00:ac:5f:6e:ee:5b:e6:f4:6a:
ff:fe:5c:6d:35:6d:ba:60:c3:2b:a1:b8:c2:c7:b4:
a9:83:6d:c5:bb:a4:77:af:8c:04:68:6d:9f:ec:f0:
63:ed:4f:e2:fa:37:1e:ab:33:2c:33:b4:46:44:b7:
91:c3:71:80:61:50:dc:45:a3:00:85:61:e6:65:24:
68:ad:9b:2d:9b:5c:22:d5:e2:e6:6f:de:07:d2:56:
7a:2e:c8:bf:75:fa:36:64:b3:b4:cf:c3:c6:9f:14:
f6:dd:92:c2:6d:70:0a:05:b7:fd:3f:ff:26:16:ef:
13:d1:b4:b3:13:0e:aa:be:be:d2:f2:45:94:17:0e:
43:90:84:19:1f:c7:56:04:b8:49:2f:11:96:54:83:
cc:db:13:7e:8b:2a:f9:18:03:8d:53:55:22:0e:b7:
cc:fc:ad:7f:b8:d1:72:09:84:80:1e:93:3a:c6:1a:
ca:f7:e1:6e:8b:82:7f:20:8b:ba:b1:d6:39:61:64:
50:c4:ad:a1:2a:4c:17:46:1c:66:39:28:4b:ac:50:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:59:9E:99:93:8B:39:EE:87:94:0B:E6:32:35:04:61:86:FD:FD:EF
X509v3 Authority Key Identifier:
keyid:E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/3232332e32362e31302e302f32332d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.26.10.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:a7:5b:1e:67:e4:cd:df:6c:07:3a:c4:09:81:00:77:b4:59:
49:46:12:e5:05:5a:d7:d5:0b:08:85:6a:71:af:e7:71:78:8a:
36:54:0f:ee:7c:3d:66:b4:57:23:47:a1:25:b7:8d:b1:8e:b5:
5b:8d:2b:8f:1d:58:6d:b2:2a:1e:be:89:28:37:61:c4:f8:cd:
1a:1e:fb:8d:89:85:60:c2:e6:2f:4e:28:f9:00:7f:94:d6:ff:
cf:f8:b6:e3:ef:05:2a:f6:21:45:46:5e:db:da:15:02:d4:dc:
66:9d:57:6b:c0:25:93:87:a2:23:80:55:f3:2a:88:52:a3:54:
b6:84:53:29:f7:ab:c5:4f:42:ca:3a:75:f3:71:9a:9e:83:07:
ba:b5:5a:bf:fa:fc:9d:20:31:a0:9f:3b:3b:f1:7e:a0:e6:cb:
ce:59:63:16:15:18:af:fc:3a:51:7f:d4:34:4f:8b:7f:68:99:
09:ba:f8:79:b1:61:e1:64:96:f6:62:4e:c9:bc:2f:2f:df:35:
25:d9:73:f4:9a:a7:db:15:5c:79:f1:c0:eb:40:40:c3:ef:56:
57:ee:dc:2a:d1:41:89:d8:81:23:0a:d1:f6:db:85:5b:30:04:
3d:28:3f:ec:54:6f:ac:1c:f1:5c:b1:d8:63:e3:20:18:7b:5f:
a3:4f:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:27:29 2026 by rpki-client