Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/DAFU/0/3231302e312e3233342e302f32342d3332203d3e20313334383233.roa
File: 3231302e312e3233342e302f32342d3332203d3e20313334383233.roa (raw, json)
Hash identifier: dFGbPuZUVl9n4NEFbEpxmNgTeCxq+xPVEQs+VbBbgw8=
Subject key identifier: B7:85:CC:BD:12:0C:85:BE:38:E9:99:2D:3A:D6:D2:11:93:B7:95:E4
Certificate issuer: /CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460
Certificate serial: 127FF06F6DD129BE70077C12C71C7846E4268AF7
Authority key identifier: 9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DAFU/0/3231302e312e3233342e302f32342d3332203d3e20313334383233.roa
Signing time: Mon 11 May 2026 17:55:36 +0000
ROA not before: Mon 11 May 2026 17:50:36 +0000
ROA not after: Mon 10 May 2027 17:55:36 +0000
asID: 134823
IP address blocks: 210.1.234.0/24 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:7f:f0:6f:6d:d1:29:be:70:07:7c:12:c7:1c:78:46:e4:26:8a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460
Validity
Not Before: May 11 17:50:36 2026 GMT
Not After : May 10 17:55:36 2027 GMT
Subject: CN=B785CCBD120C85BE38E9992D3AD6D21193B795E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:4a:ea:21:f3:bf:4f:a9:ce:e5:14:4d:06:
7a:ef:14:13:9c:97:c4:d3:6a:80:1e:8a:33:26:20:
44:e5:57:d7:02:54:2e:a5:30:71:4b:f7:2f:3d:6b:
31:d6:1e:f5:28:1a:66:06:1d:a8:05:84:78:e4:b4:
37:92:4b:71:8d:c2:fc:47:94:4c:f3:04:bb:b3:fa:
93:22:06:e5:3c:52:0f:fd:d7:7b:6f:91:62:74:b6:
f7:fc:a0:80:59:91:b5:52:49:10:db:11:f1:78:f7:
89:da:e7:22:ea:57:90:30:5c:bb:7d:a7:43:b7:35:
37:d1:7b:1f:32:65:3f:c7:f6:ab:58:68:f2:04:3d:
52:1a:a9:b5:68:35:02:b6:8a:8b:38:6f:0b:c3:38:
17:66:09:59:9d:89:91:10:5a:5a:97:c9:cd:90:ba:
6f:d8:72:a9:84:0d:13:54:13:f3:22:56:56:51:3a:
d4:96:7d:b8:66:57:26:7e:45:5a:28:93:21:33:76:
a0:e7:f6:2c:a8:0a:32:27:1e:e2:a2:db:ec:45:2e:
c2:35:bb:d1:19:66:31:48:22:3b:bc:84:93:c0:4d:
f0:c9:9c:6a:51:4e:cd:89:6e:86:a4:f6:ad:73:85:
15:2e:f6:b7:15:6d:be:0c:93:d5:4b:06:1e:ce:b5:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:85:CC:BD:12:0C:85:BE:38:E9:99:2D:3A:D6:D2:11:93:B7:95:E4
X509v3 Authority Key Identifier:
keyid:9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/3231302e312e3233342e302f32342d3332203d3e20313334383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.1.234.0/24
Signature Algorithm: sha256WithRSAEncryption
12:2a:1f:74:9f:5b:1a:0f:2b:7f:9a:af:f2:80:34:b9:dd:e3:
ab:82:96:1f:5d:91:4e:2d:a0:b4:73:a6:e6:9d:a4:1b:fa:b1:
bc:aa:4f:41:67:6b:2a:8c:e0:b2:e7:0c:24:98:5d:c8:21:5f:
99:91:91:d2:06:7f:31:b6:a7:94:e5:b5:e4:5e:cc:2b:3e:29:
ee:a7:56:90:a9:a4:a2:1d:e5:8e:79:4c:ac:f7:5f:46:c3:01:
20:b8:ed:3b:fa:c2:c3:ec:e5:e2:a4:8a:da:a1:e2:44:98:df:
1d:6f:da:40:25:c0:43:8b:dd:d1:ab:37:1e:02:b8:38:80:b4:
86:89:4c:c3:f4:54:e5:72:19:cb:8a:e9:68:66:01:4a:42:8f:
f4:7b:d1:65:73:31:dd:c9:33:96:52:9d:24:26:c9:ac:8d:4e:
79:9d:61:51:7f:ea:c0:6c:f8:40:e6:05:be:63:13:ca:b5:eb:
ee:6e:3d:98:10:16:76:7a:f5:cc:69:e8:50:d1:33:35:f0:51:
18:fb:7e:0d:71:56:98:48:89:77:3f:7a:c4:28:15:23:de:b3:
d8:9a:8d:24:df:f8:c5:9a:c8:b7:e5:5a:cb:4e:2b:53:6a:27:
b5:c6:31:3f:52:f1:6c:a2:6f:e4:5f:3b:b0:8f:fb:d7:dc:d5:
fd:e4:ee:b7
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUEn/wb23RKb5wB3wSxxx4RuQmivcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZGOEE2
RkFEQTQ2MDAeFw0yNjA1MTExNzUwMzZaFw0yNzA1MTAxNzU1MzZaMDMxMTAvBgNV
BAMTKEI3ODVDQ0JEMTIwQzg1QkUzOEU5OTkyRDNBRDZEMjExOTNCNzk1RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7D0rqIfO/T6nO5RRNBnrvFBOc
l8TTaoAeijMmIETlV9cCVC6lMHFL9y89azHWHvUoGmYGHagFhHjktDeSS3GNwvxH
lEzzBLuz+pMiBuU8Ug/913tvkWJ0tvf8oIBZkbVSSRDbEfF494na5yLqV5AwXLt9
p0O3NTfRex8yZT/H9qtYaPIEPVIaqbVoNQK2ios4bwvDOBdmCVmdiZEQWlqXyc2Q
um/YcqmEDRNUE/MiVlZROtSWfbhmVyZ+RVookyEzdqDn9iyoCjInHuKi2+xFLsI1
u9EZZjFIIju8hJPATfDJnGpRTs2Jboak9q1zhRUu9rcVbb4Mk9VLBh7Otf5lAgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUt4XMvRIMhb446ZktOtbSEZO3leQwHwYDVR0j
BBgwFoAUnQ9tU28FPDu1Iz5o4GNvim+tpGAwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREFGVS8w
LzlEMEY2RDUzNkYwNTNDM0JCNTIzM0U2OEUwNjM2RjhBNkZBREE0NjAuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZG
OEE2RkFEQTQ2MC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RBRlUvMC8zMjMxMzAyZTMxMmUzMjMz
MzQyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTMzMzQzODMyMzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADSAeowDQYJKoZIhvcNAQELBQADggEBABIqH3SfWxoPK3+ar/KANLnd46uClh9d
kU4toLRzpuadpBv6sbyqT0FnayqM4LLnDCSYXcghX5mRkdIGfzG2p5TlteRezCs+
Ke6nVpCppKId5Y55TKz3X0bDASC47Tv6wsPs5eKkitqh4kSY3x1v2kAlwEOL3dGr
Nx4CuDiAtIaJTMP0VOVyGcuK6WhmAUpCj/R70WVzMd3JM5ZSnSQmyayNTnmdYVF/
6sBs+EDmBb5jE8q16+5uPZgQFnZ69cxp6FDRMzXwURj7fg1xVphIiXc/esQoFSPe
s9iajSTf+MWayLflWstOK1NqJ7XGMT9S8Wyib+RfO7CP+9fc1f3k7rc=
-----END CERTIFICATE-----
Generated at Wed May 13 00:31:05 2026 by rpki-client