Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/323430363a343863303a3a2f34382d3438203d3e20313331363537.roa
File: 323430363a343863303a3a2f34382d3438203d3e20313331363537.roa (raw, json)
Hash identifier: 6QyxXIZgity4ZwPYG/0/d5ousm7HkAlfY9tCB9ceD4U=
Subject key identifier: A7:7C:97:3A:2B:3D:F7:E7:90:A8:1C:B8:99:87:9D:3E:0B:71:C3:BC
Certificate issuer: /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial: 120BA2CBF4E52CAB13FE583164EE1D7093BF32A4
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HONGDA/0/323430363a343863303a3a2f34382d3438203d3e20313331363537.roa
Signing time: Mon 11 May 2026 17:06:53 +0000
ROA not before: Mon 11 May 2026 17:01:53 +0000
ROA not after: Mon 10 May 2027 17:06:53 +0000
asID: 131657
IP address blocks: 2406:48c0::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:0b:a2:cb:f4:e5:2c:ab:13:fe:58:31:64:ee:1d:70:93:bf:32:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Validity
Not Before: May 11 17:01:53 2026 GMT
Not After : May 10 17:06:53 2027 GMT
Subject: CN=A77C973A2B3DF7E790A81CB899879D3E0B71C3BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:24:83:bd:c7:08:4f:72:de:ba:57:9d:fc:
69:ac:c7:53:19:d4:fd:1b:d7:e9:34:ee:d4:fc:de:
18:79:5f:3d:1c:b5:d0:4a:01:9c:82:87:60:e9:07:
b1:07:a3:9d:20:12:a4:a0:7f:49:f3:5b:b3:44:c6:
e0:27:a6:2e:3e:f2:e7:37:63:bd:5f:be:9f:6f:c8:
88:c7:07:28:bb:04:be:bc:52:09:14:54:67:ce:9f:
b6:d1:15:d1:18:e0:fe:45:08:cc:ce:9e:97:a9:4f:
a9:a6:ef:0e:d1:f0:48:fd:aa:74:5a:23:70:a2:9b:
45:06:b7:3b:60:d6:d3:25:68:db:13:e3:17:2c:30:
4e:28:14:bc:7d:63:72:f8:54:7b:bc:42:7b:60:10:
53:34:38:b4:0d:e8:64:6f:4f:12:a3:0a:15:4d:99:
7c:c1:98:19:96:f0:73:1b:9b:86:af:c4:04:02:b9:
6d:60:15:7c:ab:7d:19:c4:4a:c4:a9:c5:f4:38:d4:
d6:38:21:ea:f1:ca:7c:c7:ce:92:3c:00:56:d2:b4:
23:a5:94:c0:34:a6:b3:05:52:1e:6c:36:a7:54:8e:
75:1c:da:a5:8f:03:41:a9:50:af:87:a0:f1:52:76:
8d:77:e9:97:40:b9:97:ad:a1:e0:57:82:9b:c8:14:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7C:97:3A:2B:3D:F7:E7:90:A8:1C:B8:99:87:9D:3E:0B:71:C3:BC
X509v3 Authority Key Identifier:
keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/323430363a343863303a3a2f34382d3438203d3e20313331363537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:48c0::/48
Signature Algorithm: sha256WithRSAEncryption
42:66:a4:c6:39:9f:98:c8:38:23:fb:a9:a1:31:6f:1a:f7:5d:
ff:4f:ca:29:6d:4e:bd:86:26:e6:a6:38:f4:4d:8f:1f:c5:f4:
70:e5:d8:1d:d2:8a:15:bd:33:18:44:d8:1d:52:be:51:98:a1:
45:51:92:30:05:11:c3:77:0e:a0:74:d9:d2:e0:38:66:11:2e:
ae:20:78:33:58:21:d6:d8:19:4f:9d:2a:c9:26:4c:71:2b:60:
d2:ba:c0:24:36:af:bb:ad:db:7d:75:a2:8f:ca:1c:72:8d:15:
82:66:1b:60:ff:9f:bf:3b:cf:b5:4f:35:b7:43:ff:30:e7:aa:
97:20:09:9c:9b:9d:eb:f1:d1:54:da:70:2b:9c:9a:c0:13:78:
de:c7:60:5c:4c:e7:dd:d8:5c:83:1f:7b:74:9d:18:fe:0c:d6:
d8:51:09:f6:b1:a0:f4:b8:c8:6f:4c:3f:28:fe:69:c4:a0:0f:
e5:3e:7b:b8:c0:d5:09:b2:42:8c:4c:ca:be:2e:8c:25:51:12:
7d:71:a3:3b:8e:f6:80:16:2c:50:17:67:38:09:63:3f:5d:c7:
61:04:44:85:97:0b:64:f6:f7:13:b7:cb:44:83:05:d2:76:2d:
ba:d5:dc:f7:2a:6e:c2:c4:27:2f:ee:76:77:71:3f:5f:4e:65:
16:ce:99:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:59 2026 by rpki-client