Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/DWINS/0/34332e3232342e32322e302f32342d3234203d3e20323034363737.roa
File: 34332e3232342e32322e302f32342d3234203d3e20323034363737.roa (raw, json)
Hash identifier: I8CxTXqOghxbHmSPog8SdWmG46+kyQ6z3kNCUfC4F6g=
Subject key identifier: B7:88:6A:E9:0F:62:D6:05:72:9C:E0:E4:92:A7:23:E5:2B:97:BA:8C
Certificate issuer: /CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
Certificate serial: 2E9A7C7CA96A4CB3A4944D1EC741F1A79D8643E1
Authority key identifier: C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DWINS/0/34332e3232342e32322e302f32342d3234203d3e20323034363737.roa
Signing time: Mon 11 May 2026 17:40:39 +0000
ROA not before: Mon 11 May 2026 17:35:39 +0000
ROA not after: Mon 10 May 2027 17:40:39 +0000
asID: 204677
IP address blocks: 43.224.22.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:9a:7c:7c:a9:6a:4c:b3:a4:94:4d:1e:c7:41:f1:a7:9d:86:43:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
Validity
Not Before: May 11 17:35:39 2026 GMT
Not After : May 10 17:40:39 2027 GMT
Subject: CN=B7886AE90F62D605729CE0E492A723E52B97BA8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:58:5e:25:b2:19:e6:5c:28:fe:0e:97:59:72:
38:ca:f8:36:b3:25:a3:bc:74:46:ea:05:45:8b:6b:
d3:2a:41:75:24:01:ff:3f:50:b5:28:1f:57:d0:5c:
95:4b:f7:da:ce:4c:d9:30:d3:f6:3f:63:47:da:e9:
7e:f6:e2:05:5e:69:48:0a:0e:84:02:fa:b2:95:3c:
8e:81:c6:9d:f4:ae:d1:2e:7e:31:d5:97:01:22:9e:
00:64:09:1b:dc:c4:03:be:5a:74:2b:79:55:33:52:
0b:2b:19:0c:7b:c9:35:45:2b:bb:ef:d1:01:11:3a:
8b:8c:5a:af:43:7f:a1:2c:a8:fc:68:a1:7f:90:8d:
63:37:9b:d3:f1:ca:fd:90:16:32:46:5c:d7:7c:84:
26:a8:83:e5:18:78:5a:04:f1:d6:38:29:27:c1:af:
ea:c9:cb:7e:a4:81:62:39:90:10:16:f3:01:7e:da:
7b:39:1e:62:6f:6b:8e:8b:2e:e4:0e:f0:e0:43:d8:
57:36:18:90:63:c7:01:0d:96:1f:ef:20:b2:39:e7:
b1:91:fa:d1:86:45:3c:85:51:a4:71:80:66:41:d5:
7c:ec:01:b7:e8:67:60:7a:fc:9d:55:96:f6:79:c9:
39:9b:1f:77:07:f6:65:24:44:af:3f:e5:2e:ea:3a:
14:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:88:6A:E9:0F:62:D6:05:72:9C:E0:E4:92:A7:23:E5:2B:97:BA:8C
X509v3 Authority Key Identifier:
keyid:C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/34332e3232342e32322e302f32342d3234203d3e20323034363737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.224.22.0/24
Signature Algorithm: sha256WithRSAEncryption
38:1e:d7:0d:a5:9c:8e:15:5c:f8:fd:20:de:ff:03:95:2d:44:
be:82:2d:9b:22:da:9a:88:76:bd:a3:19:5b:4d:77:b8:ee:65:
83:e4:ef:93:44:48:b0:53:92:f1:a3:23:74:20:77:e3:be:89:
9b:e0:d2:41:e4:0c:4f:06:c7:f0:b7:9b:9c:a2:28:1f:e7:56:
ab:4b:f3:e9:a0:ee:b3:56:5a:a4:38:71:b0:27:da:0d:0c:70:
79:a4:13:8b:3c:eb:73:15:b4:6d:26:61:c9:c1:3b:14:a8:64:
a5:40:45:3e:65:ff:b2:91:97:80:38:d5:5f:7e:3c:14:c9:e1:
42:23:9d:0e:7e:d7:89:ca:49:52:79:90:8b:b9:92:f2:28:59:
ac:1b:14:6e:b9:5d:df:d0:81:e6:db:f9:05:44:2c:0f:c6:97:
aa:a0:74:53:22:66:84:23:f6:67:f6:fe:e7:85:95:c1:b2:5a:
86:ef:2b:ab:b3:5e:99:2f:46:f2:03:2d:f7:77:5f:f8:37:ad:
77:c9:4d:06:94:7d:a7:d8:df:2c:4e:fa:cb:41:af:1c:7d:75:
78:18:7d:9f:8d:d1:b4:e2:ee:01:64:17:bf:46:5e:0d:44:75:
f5:83:69:95:63:8b:c5:a3:e3:f6:c8:ac:bd:8c:de:07:9d:a5:
de:c9:3a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:10:34 2026 by rpki-client