Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/0/36312e36352e3232342e302f32312d3234203d3e203138303436.roa
File: 36312e36352e3232342e302f32312d3234203d3e203138303436.roa (raw, json)
Hash identifier: w2jQpkleagjWlo8dAGXSxXIFgAbKDZGiikpvzVunK6o=
Subject key identifier: 47:DD:53:16:53:C1:4A:98:77:51:96:8F:E7:99:93:BE:6F:A6:51:8B
Certificate issuer: /CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Certificate serial: 15AF9E57352EA55BBB7D90939B5EEB410218C6C3
Authority key identifier: B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/0/36312e36352e3232342e302f32312d3234203d3e203138303436.roa
Signing time: Mon 11 May 2026 17:39:59 +0000
ROA not before: Mon 11 May 2026 17:34:59 +0000
ROA not after: Mon 10 May 2027 17:39:59 +0000
asID: 18046
IP address blocks: 61.65.224.0/21 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:af:9e:57:35:2e:a5:5b:bb:7d:90:93:9b:5e:eb:41:02:18:c6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Validity
Not Before: May 11 17:34:59 2026 GMT
Not After : May 10 17:39:59 2027 GMT
Subject: CN=47DD531653C14A987751968FE79993BE6FA6518B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:12:05:45:cf:24:5c:31:dd:12:03:a7:78:
4a:85:20:b2:df:0c:d0:ae:42:29:06:33:53:7e:87:
de:c4:26:e5:79:a2:4a:0c:ac:3a:18:22:9e:b0:44:
36:b8:7b:2d:1e:a5:c8:a3:a3:1a:c0:93:1e:58:1a:
a2:90:91:c7:47:c3:26:17:50:1c:6e:cb:81:0b:ed:
72:97:03:8a:20:32:14:1d:6c:d7:4f:4a:a2:10:ea:
62:a1:26:3b:ff:17:af:35:d2:64:3b:38:ee:22:c4:
75:b7:fc:0c:eb:1d:d2:56:8a:64:1f:76:ae:be:08:
2c:63:e6:3e:67:b9:54:25:27:e2:4a:78:cc:33:aa:
bc:bc:0b:5f:42:c8:14:b3:61:37:c9:f3:7b:fb:81:
a3:0f:f5:0d:17:9d:cc:d5:54:ac:20:3b:26:f6:e1:
05:c3:d8:34:ca:b7:48:2c:13:ad:83:de:04:4c:a0:
89:04:19:46:ef:ba:ea:15:24:b7:31:a3:6e:ab:65:
30:00:fd:06:e0:88:32:50:69:59:cb:a7:2e:9e:71:
fa:0a:6b:87:3a:99:2d:eb:3a:bb:50:ef:85:df:58:
1b:0a:8b:af:52:04:9f:6a:bb:46:9a:44:03:4d:0a:
1d:1b:e1:5b:dd:df:75:d4:a2:1f:d0:d9:1e:b2:c8:
f8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DD:53:16:53:C1:4A:98:77:51:96:8F:E7:99:93:BE:6F:A6:51:8B
X509v3 Authority Key Identifier:
keyid:B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/36312e36352e3232342e302f32312d3234203d3e203138303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.65.224.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:02:a1:6f:5c:33:c8:5d:9c:aa:71:25:00:72:b5:88:6f:fc:
c2:da:ea:60:cf:a9:02:21:43:09:41:75:34:4d:a2:67:e4:b5:
61:78:19:3a:1c:18:7a:e8:7c:12:d4:30:30:55:f4:06:ed:4b:
9a:20:15:79:8b:e8:92:f0:66:8d:f5:3e:33:90:23:ec:46:a3:
0b:01:34:4d:e4:dd:50:2d:02:b8:d7:c2:d3:7e:f4:23:32:d1:
0d:46:31:95:8f:24:bf:2a:88:a5:8f:d7:15:47:6c:59:ea:74:
2a:a1:22:67:60:87:ee:e8:e3:fc:28:6c:c0:c7:06:23:84:0c:
28:ee:ee:60:a3:39:2c:f5:d2:d7:4b:b1:1b:b3:8b:b0:ab:5a:
f6:48:58:45:5a:cc:89:0f:7e:0d:45:58:d4:19:81:71:15:69:
e2:f4:aa:5d:f1:80:98:0a:c4:a1:23:d4:0a:cc:62:5d:18:1f:
eb:f0:82:35:81:8c:6d:a6:25:92:5b:f2:3e:1c:8b:31:65:bf:
0d:53:5c:dc:b1:90:fc:7e:25:01:59:d3:f3:99:9e:ea:41:8d:
4d:90:ae:b2:3b:3b:9b:37:7e:5d:32:32:e1:81:f5:fc:88:2c:
67:e4:56:e7:b7:2a:6d:b2:76:7d:92:b6:b7:46:de:61:0d:87:
f4:4a:a7:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 22:56:35 2026 by rpki-client