Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/0/3131362e35302e34312e302f32342d3234203d3e203138303436.roa
File: 3131362e35302e34312e302f32342d3234203d3e203138303436.roa (raw, json)
Hash identifier: FWuMIJD8kL6duLcYGMHNJEXNuVAUCl3kGteH4/paG04=
Subject key identifier: 1D:BF:43:AD:99:3B:61:96:AE:D9:4E:A5:86:77:43:88:E6:6D:5D:AF
Certificate issuer: /CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Certificate serial: 321EDD7E241A3259D1AE70878FB6C116A29FE4DB
Authority key identifier: B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/0/3131362e35302e34312e302f32342d3234203d3e203138303436.roa
Signing time: Mon 11 May 2026 17:04:11 +0000
ROA not before: Mon 11 May 2026 16:59:11 +0000
ROA not after: Mon 10 May 2027 17:04:11 +0000
asID: 18046
IP address blocks: 116.50.41.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:1e:dd:7e:24:1a:32:59:d1:ae:70:87:8f:b6:c1:16:a2:9f:e4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Validity
Not Before: May 11 16:59:11 2026 GMT
Not After : May 10 17:04:11 2027 GMT
Subject: CN=1DBF43AD993B6196AED94EA586774388E66D5DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:39:7c:be:7b:de:5c:46:b0:8d:c9:9b:15:
15:92:83:cf:80:ff:4e:f0:32:0a:8c:ce:12:f2:64:
be:c0:73:74:b2:c6:40:fe:26:07:54:7b:1c:23:17:
9d:8e:51:2b:0e:a2:03:1a:10:7e:3e:29:1f:84:a0:
38:e1:7f:db:0c:08:23:7e:46:85:9e:2d:48:e8:a1:
2b:38:3c:0b:23:88:4d:af:92:d4:57:b6:6c:4d:af:
0b:80:32:89:e1:81:fe:35:e1:fe:38:60:cb:15:cf:
53:ab:6c:29:ea:73:87:8e:32:13:22:2e:68:ac:79:
21:ef:dc:19:83:ee:a8:57:d6:a1:4b:30:c6:c5:46:
f2:c5:ee:f6:c7:32:1e:74:c5:48:64:6a:0e:54:77:
85:be:ce:03:dd:69:a5:ed:d8:9e:02:d0:87:ce:71:
cb:46:93:fb:2e:df:54:56:4f:14:30:59:bd:96:93:
83:1d:bd:0b:8c:f5:48:e0:1f:62:f7:f5:34:e8:9a:
6f:ce:2d:d2:f2:36:06:52:14:8b:11:68:69:06:b6:
f0:04:14:5d:92:7e:67:ff:50:a1:89:bb:b2:1b:c0:
d3:af:7b:39:b5:c1:29:e0:35:27:d4:17:a9:11:f7:
e1:1a:f7:87:5d:6d:76:19:e9:8f:e6:1f:43:c4:4a:
46:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BF:43:AD:99:3B:61:96:AE:D9:4E:A5:86:77:43:88:E6:6D:5D:AF
X509v3 Authority Key Identifier:
keyid:B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/3131362e35302e34312e302f32342d3234203d3e203138303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.50.41.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c9:ce:da:1f:bb:ce:6e:8f:19:a3:16:44:e4:83:33:7c:22:
f2:51:bc:21:49:8d:fc:31:02:a5:f3:82:80:ec:c6:b5:d9:75:
ed:2d:11:de:9c:cb:7c:8d:0c:49:28:6c:12:7a:c0:76:8a:9b:
ed:e0:8a:a7:d5:9e:45:b3:b7:25:7b:5f:1b:8f:cb:9c:c6:01:
d0:5c:df:55:01:86:02:23:82:aa:b4:61:d2:56:e2:78:32:9d:
14:47:b8:c1:46:c6:2f:20:b2:59:b1:32:ba:a2:a1:db:77:e0:
36:60:9b:93:cb:da:ad:16:ff:7d:41:ac:af:0c:97:d1:cb:e8:
c7:42:fd:2b:b3:b7:bf:f7:d0:97:97:2b:76:90:99:4c:bf:73:
a7:3a:71:6f:4b:82:eb:fa:26:80:0c:5e:85:64:bd:4f:44:37:
8d:d5:c6:88:49:dd:eb:36:ec:93:ab:14:ec:f9:d8:83:02:f7:
2e:fc:fb:0e:10:3a:83:37:68:70:2a:8e:7f:48:ae:82:92:fa:
61:bf:c6:54:26:6e:5c:b2:60:b5:7c:dc:67:aa:88:7f:14:ee:
08:d2:61:b0:de:6a:03:54:1e:93:ec:9b:56:93:c9:a0:38:22:
42:b1:03:be:c2:5b:c6:85:f9:e1:36:96:15:29:86:eb:72:70:
7d:61:34:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:27:48 2026 by rpki-client