Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/0/36312e36352e3233322e302f32322d3234203d3e203138303436.roa
File: 36312e36352e3233322e302f32322d3234203d3e203138303436.roa (raw, json)
Hash identifier: 4oDLlStFpYWmcHhVH0rDWkfLPTd3MKc2HN4akzyILSg=
Subject key identifier: AB:EE:31:AD:6D:D5:BE:FA:98:FE:3F:62:8A:BE:1D:8F:81:3C:42:23
Certificate issuer: /CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Certificate serial: 0A2AB3C251BCAE9258BA1825F072155CF00353AC
Authority key identifier: B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/0/36312e36352e3233322e302f32322d3234203d3e203138303436.roa
Signing time: Mon 11 May 2026 17:40:00 +0000
ROA not before: Mon 11 May 2026 17:35:00 +0000
ROA not after: Mon 10 May 2027 17:40:00 +0000
asID: 18046
IP address blocks: 61.65.232.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:2a:b3:c2:51:bc:ae:92:58:ba:18:25:f0:72:15:5c:f0:03:53:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Validity
Not Before: May 11 17:35:00 2026 GMT
Not After : May 10 17:40:00 2027 GMT
Subject: CN=ABEE31AD6DD5BEFA98FE3F628ABE1D8F813C4223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:fb:e3:5c:da:11:b1:95:29:23:ce:50:5e:
26:f8:d6:2a:34:c8:f9:c0:5b:92:62:c7:a5:64:be:
c6:ff:f9:21:9b:23:76:b3:cb:86:2d:ca:00:a3:e8:
5f:d0:f3:29:b4:d1:50:6f:95:42:b5:fe:94:41:56:
51:9d:25:98:2d:c5:d1:c0:9b:cd:14:66:ba:4d:68:
ed:0e:69:8f:76:1a:34:cf:3b:40:19:99:db:98:08:
f7:b1:40:36:45:85:1d:aa:89:1a:6b:1a:b9:d4:8b:
d4:c4:b2:b7:19:aa:a3:a9:0d:96:f1:1d:2e:8a:e5:
de:94:5e:a4:7f:8c:b3:e5:12:48:78:b5:f7:fc:db:
23:61:90:40:95:8c:5c:6f:7e:56:27:d0:b6:a5:cc:
23:d5:e4:76:4d:e0:b3:33:0d:5d:36:f2:53:01:88:
25:78:fa:ef:dd:45:4f:08:fe:92:a0:1c:18:8d:35:
7d:85:f0:5a:a2:54:3a:5e:9e:7a:b2:8c:2d:f3:18:
86:9d:32:bd:94:92:05:40:9a:82:94:50:b3:41:b1:
e2:5a:e9:4d:44:93:64:ab:58:fe:5f:8f:cd:cc:0a:
a5:ea:e5:22:05:41:9f:c2:57:67:fd:ce:d2:8a:41:
1d:3b:1e:2c:d4:88:19:33:91:42:94:34:ad:05:59:
87:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EE:31:AD:6D:D5:BE:FA:98:FE:3F:62:8A:BE:1D:8F:81:3C:42:23
X509v3 Authority Key Identifier:
keyid:B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/36312e36352e3233322e302f32322d3234203d3e203138303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.65.232.0/22
Signature Algorithm: sha256WithRSAEncryption
60:b3:4e:25:a2:a5:1e:28:35:3e:14:3f:76:99:50:91:b4:7e:
65:7f:91:62:ee:7a:c1:07:ae:f6:b4:e9:05:7d:b3:20:2e:00:
1d:0b:1c:5f:f0:fd:1c:04:c8:7b:06:b7:1c:b8:50:59:d2:16:
8f:03:62:b6:fc:03:63:ff:45:c7:a6:b0:2b:02:a4:a1:b7:56:
94:ae:28:b2:b6:95:5b:7e:7c:47:80:32:8a:11:fb:6c:4f:7b:
5f:ed:2b:ad:32:55:fe:c7:af:a0:d6:c9:e3:67:0e:7b:c0:15:
cc:f2:b3:67:de:ca:1c:b2:6d:b0:c1:ac:80:b3:0d:0c:a1:fd:
f1:8c:37:b1:b3:8e:69:66:d8:80:94:61:3e:6a:dd:14:4a:93:
f7:80:87:e8:82:3e:ae:c2:f0:ba:6f:d2:aa:71:6b:c0:26:1f:
e5:f2:c4:1b:f5:b0:ba:2b:80:52:a6:5b:ff:b4:9d:ac:95:84:
56:b1:27:01:a5:3f:ab:96:08:bd:aa:f9:11:d0:aa:21:6e:bf:
fb:d0:83:e5:e8:2a:c7:4d:8f:75:40:d9:6b:c4:1f:78:0b:6d:
70:4b:8c:02:7d:0a:04:a1:79:1e:32:87:c8:5a:b0:ff:82:83:
e9:c9:c9:2e:62:ff:6d:b6:2d:15:98:a9:cb:22:9c:cb:72:41:
61:81:c5:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 22:31:53 2026 by rpki-client