Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137372e302f32342d3234203d3e20333936393832.roa
File: 3130332e3135332e3137372e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier: 2kQ3gvBJIRjV8iRWu8qPTecEfMVSCMEPMA/CgEdDSxE=
Subject key identifier: BF:0E:40:09:22:22:C9:3F:CA:12:C3:5F:BC:9C:43:D6:CE:B8:5B:9C
Certificate issuer: /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial: 439EF81BB5F8E67FD519C0FF67245FBF19996E7F
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137372e302f32342d3234203d3e20333936393832.roa
Signing time: Mon 11 May 2026 17:10:13 +0000
ROA not before: Mon 11 May 2026 17:05:13 +0000
ROA not after: Mon 10 May 2027 17:10:13 +0000
asID: 396982
IP address blocks: 103.153.177.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:9e:f8:1b:b5:f8:e6:7f:d5:19:c0:ff:67:24:5f:bf:19:99:6e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Validity
Not Before: May 11 17:05:13 2026 GMT
Not After : May 10 17:10:13 2027 GMT
Subject: CN=BF0E40092222C93FCA12C35FBC9C43D6CEB85B9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:f8:00:86:7e:a0:14:74:a9:14:ca:20:49:
53:db:9a:6d:cc:32:35:5c:a1:57:cf:8e:7b:56:7f:
62:f3:4a:e8:7d:1d:5e:ee:f0:8a:47:04:1e:e6:db:
00:4e:7f:72:ec:c7:4b:2c:b7:6a:20:37:11:44:4e:
8d:99:4b:54:2d:66:eb:74:ac:22:f4:ed:1a:cb:09:
dd:88:75:38:68:0e:69:fc:a4:b1:78:b4:0d:c1:6a:
ea:8d:7e:aa:29:df:a1:d9:ee:1b:cc:5e:71:91:d8:
98:b1:00:e1:19:04:cf:ad:4c:3a:d7:a7:80:07:84:
d9:4d:c9:e2:cd:00:79:55:2e:93:c0:23:b7:f7:4b:
c7:ce:1f:9b:63:b1:91:81:69:dc:28:37:8b:6a:90:
8f:8a:9e:78:1f:41:62:51:e2:a8:79:40:df:23:07:
a7:be:dc:b6:24:d0:af:1d:13:6c:5d:a1:5b:62:45:
ca:9d:d3:71:a8:d6:67:93:b5:89:06:d9:36:df:a4:
b3:73:73:17:27:7f:68:87:5e:10:66:4b:18:1c:e1:
e0:88:c3:da:0f:27:4d:a7:e4:cb:00:89:77:cd:07:
b1:95:3a:ce:8b:a2:74:8b:98:56:b7:81:4a:0d:35:
50:55:f8:dd:8c:da:07:2d:1f:9c:2d:8d:2f:80:d7:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0E:40:09:22:22:C9:3F:CA:12:C3:5F:BC:9C:43:D6:CE:B8:5B:9C
X509v3 Authority Key Identifier:
keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137372e302f32342d3234203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.177.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:0c:4b:2c:40:21:e0:ee:2f:f2:7a:98:31:b9:88:57:88:c5:
8a:64:fc:85:f0:67:cb:b8:67:86:78:fe:1e:9b:55:91:55:d0:
0d:a8:eb:a7:08:a8:94:e8:2e:dd:aa:11:bb:74:4c:3a:37:e5:
19:93:46:9e:ed:0c:d9:b6:46:d8:ab:a9:43:8f:a7:71:40:00:
40:93:5b:d3:ce:95:a2:94:11:9b:01:f1:4b:4d:66:bc:62:74:
ef:e3:1f:0d:2f:cb:a9:ae:5e:55:68:88:50:7f:40:df:30:28:
bf:13:90:60:df:73:9a:26:0a:6d:ff:53:17:94:4a:de:89:36:
5a:6a:46:2e:e0:05:0f:65:5f:bd:97:1e:c9:00:52:41:55:aa:
35:20:a9:31:42:c2:b9:21:51:d0:d3:8f:9d:61:dc:c8:47:75:
df:c3:72:c1:8b:3d:de:e1:5d:c0:9f:ab:d4:cb:a3:61:48:d2:
b8:d0:1d:84:54:9a:d2:7b:5a:a3:b5:fb:0a:cb:c2:5a:a7:3d:
f8:ea:ba:4b:dc:2b:d6:e3:85:72:30:59:05:f9:d1:12:86:81:
70:fd:5a:3d:92:d3:c0:55:57:20:64:3d:26:ec:4e:5e:93:bc:
a6:58:65:1f:04:bc:e3:56:e8:3a:0f:7a:0d:12:2d:8f:e3:79:
06:39:76:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:18 2026 by rpki-client