Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/FUYU/1/3135372e32302e36382e302f32332d3234203d3e203633393036.roa
File: 3135372e32302e36382e302f32332d3234203d3e203633393036.roa (raw, json)
Hash identifier: Ih2wLcVwEMM+yu4Gee0ttpcbffUDmWsXMlqCHf8559Y=
Subject key identifier: 3F:E3:D6:3C:A2:2F:B6:73:B4:08:A9:F5:E4:EC:6C:D5:17:BB:F7:F4
Certificate issuer: /CN=81AD6603578C40F05DB6D5214459B8EF02816D23
Certificate serial: 2BAB52D260AA29076A360A84323AD5499F7FFE32
Authority key identifier: 81:AD:66:03:57:8C:40:F0:5D:B6:D5:21:44:59:B8:EF:02:81:6D:23
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/81AD6603578C40F05DB6D5214459B8EF02816D23.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/FUYU/1/3135372e32302e36382e302f32332d3234203d3e203633393036.roa
Signing time: Mon 11 May 2026 17:55:27 +0000
ROA not before: Mon 11 May 2026 17:50:27 +0000
ROA not after: Mon 10 May 2027 17:55:27 +0000
asID: 63906
IP address blocks: 157.20.68.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ab:52:d2:60:aa:29:07:6a:36:0a:84:32:3a:d5:49:9f:7f:fe:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81AD6603578C40F05DB6D5214459B8EF02816D23
Validity
Not Before: May 11 17:50:27 2026 GMT
Not After : May 10 17:55:27 2027 GMT
Subject: CN=3FE3D63CA22FB673B408A9F5E4EC6CD517BBF7F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:d0:fb:f6:e6:20:35:54:88:fd:39:c3:08:
8a:89:13:13:01:50:67:1f:fd:c4:d7:4a:07:5d:1d:
e8:cf:23:de:89:cc:48:99:bf:fe:cf:63:a5:97:e3:
fd:f8:d4:c1:f7:08:71:b2:17:8b:86:ef:e1:2f:2c:
b0:43:29:52:b0:7e:e8:c1:8b:4a:08:14:dc:73:f5:
b3:f8:15:e3:34:e8:91:a1:54:a4:32:78:74:f5:ce:
9d:f6:fe:d0:83:78:f6:1b:39:6c:81:4e:ef:00:58:
a8:b6:c2:5f:36:96:de:67:96:09:fb:10:13:85:33:
b4:38:99:34:81:56:72:96:56:07:f8:8f:e1:25:aa:
85:fe:c5:fd:9a:b2:07:79:f1:e2:93:d3:7e:3c:62:
5b:10:aa:3e:5c:76:d6:8f:16:d3:fd:21:fa:01:04:
33:1f:cb:6e:b7:9f:7f:0b:38:c9:c9:55:28:27:cc:
68:a1:ea:9f:0b:60:3d:6e:16:12:8a:69:54:67:16:
dd:09:00:70:c6:03:f4:b4:44:52:b6:c5:8c:93:44:
8f:68:c9:05:69:7b:ac:43:11:4e:67:c3:c6:7d:0c:
df:f7:6f:b5:2e:b0:ca:ff:52:3c:72:cd:a7:4d:d7:
9f:f9:d6:0c:9d:bb:91:8c:03:c3:61:81:90:98:e8:
e5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E3:D6:3C:A2:2F:B6:73:B4:08:A9:F5:E4:EC:6C:D5:17:BB:F7:F4
X509v3 Authority Key Identifier:
keyid:81:AD:66:03:57:8C:40:F0:5D:B6:D5:21:44:59:B8:EF:02:81:6D:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/FUYU/1/81AD6603578C40F05DB6D5214459B8EF02816D23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/81AD6603578C40F05DB6D5214459B8EF02816D23.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FUYU/1/3135372e32302e36382e302f32332d3234203d3e203633393036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.68.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:12:39:3f:9e:6d:c0:18:89:d2:1e:5b:64:2e:8f:1b:8b:7e:
b1:62:c9:a6:cd:4c:a8:cf:0e:c8:73:67:43:9e:5d:cd:87:f0:
bb:b8:82:a4:37:6b:3f:42:f9:33:3f:aa:22:16:5c:9c:88:94:
69:73:b5:d8:e3:86:d1:74:43:cd:62:6b:f7:a1:da:1f:52:cc:
71:0f:8a:40:0c:a1:29:d1:6c:53:2a:be:0f:fb:08:5d:c5:af:
46:a7:6a:e3:a4:9b:80:7e:0d:fa:91:17:01:66:5a:52:15:ef:
b1:56:c6:b6:af:2a:ce:4e:a6:51:d2:2c:63:4c:be:da:9c:b1:
1e:df:f7:3e:4c:65:78:71:98:e1:d5:3a:68:b9:57:c0:bd:4d:
3c:39:ea:bb:f0:72:18:59:9a:1f:90:44:90:db:10:40:af:1f:
a3:fa:f3:a0:7c:7c:4d:a7:80:70:64:d4:13:29:3b:b8:99:82:
f2:29:ca:c7:a8:58:ec:ea:be:16:f3:7a:65:8b:81:98:dd:96:
57:c0:58:28:0f:08:bf:bc:48:81:14:b1:c2:d4:2a:16:dc:90:
15:be:e2:0e:05:62:37:37:04:b1:1c:05:2d:39:95:37:d8:45:
ac:eb:15:19:da:e3:3d:a5:f2:5d:7c:f6:8f:9d:63:37:51:f3:
42:24:68:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:43 2026 by rpki-client