Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/DWINS/0/34332e3232342e32312e302f32342d3234203d3e20323034363737.roa
File: 34332e3232342e32312e302f32342d3234203d3e20323034363737.roa (raw, json)
Hash identifier: epTQKovmrbQ/AqVEwMulgxX1xPN6owaD0kc3odFd0PM=
Subject key identifier: BC:6E:F3:65:F9:0D:19:F5:B8:E8:DA:5F:EF:BC:15:22:BC:08:85:86
Certificate issuer: /CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
Certificate serial: 39FAC740DF6A338CCB00E16CF01A3F1F0FDCD7C0
Authority key identifier: C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DWINS/0/34332e3232342e32312e302f32342d3234203d3e20323034363737.roa
Signing time: Mon 11 May 2026 17:40:41 +0000
ROA not before: Mon 11 May 2026 17:35:41 +0000
ROA not after: Mon 10 May 2027 17:40:41 +0000
asID: 204677
IP address blocks: 43.224.21.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:fa:c7:40:df:6a:33:8c:cb:00:e1:6c:f0:1a:3f:1f:0f:dc:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
Validity
Not Before: May 11 17:35:41 2026 GMT
Not After : May 10 17:40:41 2027 GMT
Subject: CN=BC6EF365F90D19F5B8E8DA5FEFBC1522BC088586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4d:34:8e:bb:2d:c5:2e:1c:33:d3:43:ea:2d:
b9:c8:e8:24:77:72:59:94:d5:e3:f3:12:71:9a:a5:
3d:23:92:4e:73:d0:ba:a9:81:7c:e5:b4:7c:43:44:
60:74:13:20:35:c6:bd:a1:f6:1f:0a:3a:5c:0c:51:
df:0e:0a:85:04:49:0f:ca:5b:39:8d:36:42:06:fa:
b1:e8:94:a8:a0:0b:7c:22:86:55:39:14:38:8c:c3:
53:a6:c1:42:5b:5b:ba:ee:44:fb:be:a0:e7:2d:a3:
40:ff:25:01:84:00:f5:24:60:a8:75:bd:e2:f6:d2:
d0:04:48:b7:9c:49:6b:0d:13:33:aa:1f:ce:b5:30:
d6:c9:44:8c:02:18:e8:94:5a:d9:ac:23:26:9a:e0:
55:3b:16:be:71:64:2e:d0:98:63:4f:b3:bd:58:07:
31:e6:28:cd:7e:69:c6:8c:f5:30:bb:d2:c5:15:54:
ad:cf:bd:b7:24:37:a5:6d:a8:30:d2:d5:31:a3:d9:
cf:cd:89:21:c0:06:bf:1e:69:06:4c:ef:b6:b5:d8:
5a:ce:8c:c3:3d:ad:63:91:34:ee:df:52:7a:27:a6:
ee:81:e3:05:ba:5c:f4:5c:4d:cc:3e:45:bd:0f:80:
6b:33:b4:d3:f9:45:8d:0c:24:6d:4c:41:b6:b4:56:
83:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6E:F3:65:F9:0D:19:F5:B8:E8:DA:5F:EF:BC:15:22:BC:08:85:86
X509v3 Authority Key Identifier:
keyid:C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/34332e3232342e32312e302f32342d3234203d3e20323034363737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.224.21.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:2c:af:fd:29:86:fc:73:1a:56:62:64:05:74:d1:d0:2b:f5:
eb:e6:19:9d:ec:dc:3e:2b:d8:c2:95:2a:2d:df:f9:de:c8:c8:
e6:9c:69:05:d0:d9:e1:54:9b:5e:73:eb:55:ea:8c:e1:d2:b5:
29:eb:8b:77:4c:8e:a4:d6:bf:4b:41:99:12:c7:13:f8:87:28:
be:ab:8d:f3:1c:3d:b7:e3:16:15:c6:29:d2:d5:e6:16:f9:99:
ca:b9:c3:7f:fb:73:1d:a5:1e:c6:1c:2a:ac:20:2a:66:f8:76:
e0:b0:ed:d6:db:05:d3:2a:7a:5e:94:35:46:87:bf:ac:ce:a6:
95:54:79:4f:d6:84:60:4b:b2:f2:7a:73:73:3e:f1:db:45:55:
ed:5c:7b:75:97:25:77:53:da:7a:83:2d:ea:c9:1e:7a:5c:e5:
2d:ba:d2:49:ee:c4:de:30:77:be:28:e1:87:88:3a:87:ea:56:
f8:a9:02:04:18:81:b3:c9:56:5f:67:b6:2d:e6:21:b3:80:2d:
b4:57:11:3d:8c:8d:d9:7f:8a:68:8e:18:45:2d:be:98:bf:34:
69:b7:54:44:b8:29:a3:fb:96:ec:31:a6:13:66:a2:79:3d:0e:
89:2c:a4:67:b3:1d:11:58:fe:55:69:cd:6a:d1:e7:a9:4a:cd:
29:3f:f0:af
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIUOfrHQN9qM4zLAOFs8Bo/Hw/c18AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVERjMxRDlFRUI1REE3MjY2OEQ1OEZCOERCMEU3NUUz
QUQ3QkY5MzAeFw0yNjA1MTExNzM1NDFaFw0yNzA1MTAxNzQwNDFaMDMxMTAvBgNV
BAMTKEJDNkVGMzY1RjkwRDE5RjVCOEU4REE1RkVGQkMxNTIyQkMwODg1ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUTTSOuy3FLhwz00PqLbnI6CR3
clmU1ePzEnGapT0jkk5z0LqpgXzltHxDRGB0EyA1xr2h9h8KOlwMUd8OCoUESQ/K
WzmNNkIG+rHolKigC3wihlU5FDiMw1OmwUJbW7ruRPu+oOcto0D/JQGEAPUkYKh1
veL20tAESLecSWsNEzOqH861MNbJRIwCGOiUWtmsIyaa4FU7Fr5xZC7QmGNPs71Y
BzHmKM1+acaM9TC70sUVVK3PvbckN6VtqDDS1TGj2c/NiSHABr8eaQZM77a12FrO
jMM9rWORNO7fUnonpu6B4wW6XPRcTcw+Rb0PgGsztNP5RY0MJG1MQba0VoOvAgMB
AAGjggHhMIIB3TAdBgNVHQ4EFgQUvG7zZfkNGfW46Npf77wVIrwIhYYwHwYDVR0j
BBgwFoAUxd8x2e612nJmjVj7jbDnXjrXv5MwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFdJTlMv
MC9DNURGMzFEOUVFQjVEQTcyNjY4RDU4RkI4REIwRTc1RTNBRDdCRjkzLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0M1REYzMUQ5RUVCNURBNzI2NjhENThGQjhEQjBF
NzVFM0FEN0JGOTMuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9EV0lOUy8wLzM0MzMyZTMyMzIzNDJl
MzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM2MzczNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEACvgFTANBgkqhkiG9w0BAQsFAAOCAQEADCyv/SmG/HMaVmJkBXTR0Cv16+YZ
nezcPivYwpUqLd/53sjI5pxpBdDZ4VSbXnPrVeqM4dK1KeuLd0yOpNa/S0GZEscT
+IcovquN8xw9t+MWFcYp0tXmFvmZyrnDf/tzHaUexhwqrCAqZvh24LDt1tsF0yp6
XpQ1Roe/rM6mlVR5T9aEYEuy8npzcz7x20VV7Vx7dZcld1PaeoMt6skeelzlLbrS
Se7E3jB3vijhh4g6h+pW+KkCBBiBs8lWX2e2LeYhs4AttFcRPYyN2X+KaI4YRS2+
mL80abdURLgpo/uW7DGmE2aieT0OiSykZ7MdEVj+VWnNatHnqUrNKT/wrw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:38:18 2026 by rpki-client