Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/3130332e39382e37352e302f32342d3234203d3e2039363738.roa
File: 3130332e39382e37352e302f32342d3234203d3e2039363738.roa (raw, json)
Hash identifier: lYN8XARBJdI1m3pygxieIjhCsA/S1lX7e1q8e4qctns=
Subject key identifier: FE:7D:CB:33:54:8C:D1:13:23:C5:4E:A8:B5:69:43:AD:D1:93:87:36
Certificate issuer: /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial: 126ED22F732B554CB36B6CB85C0A5846B00B45B4
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3130332e39382e37352e302f32342d3234203d3e2039363738.roa
Signing time: Mon 11 May 2026 17:08:56 +0000
ROA not before: Mon 11 May 2026 17:03:56 +0000
ROA not after: Mon 10 May 2027 17:08:56 +0000
asID: 9678
IP address blocks: 103.98.75.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6e:d2:2f:73:2b:55:4c:b3:6b:6c:b8:5c:0a:58:46:b0:0b:45:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Validity
Not Before: May 11 17:03:56 2026 GMT
Not After : May 10 17:08:56 2027 GMT
Subject: CN=FE7DCB33548CD11323C54EA8B56943ADD1938736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:08:1b:de:46:62:08:86:81:ec:46:74:c9:
59:53:e7:61:28:64:fc:6d:3d:ea:c6:35:91:93:4a:
50:2e:32:9b:81:3f:4d:90:17:85:d1:71:7d:25:8a:
15:2e:54:1c:91:e9:36:cd:6e:4c:21:26:b8:6c:5e:
50:67:2b:34:8e:e0:3a:e2:ae:22:21:4e:eb:bd:19:
03:e1:4b:43:b6:a3:d7:0d:96:09:d7:ed:47:0f:bd:
c4:cc:7a:0b:da:03:ca:5c:40:db:40:25:ed:d7:fc:
ea:c5:c2:5b:6d:6c:87:d4:c8:bb:fa:3f:d7:9c:43:
65:74:10:75:ee:2a:0f:ac:b7:3a:ee:6e:f6:e8:ac:
7c:1f:56:bd:35:f6:26:e5:76:e1:ea:9c:0d:38:f4:
50:d3:52:2c:a5:ea:13:f2:91:79:ab:63:71:19:92:
75:f1:ee:9b:e6:8f:c6:9c:16:57:0c:2f:24:a8:1e:
7e:d2:3b:41:6e:75:dc:16:8e:bc:33:30:f9:47:d4:
a2:76:e0:22:93:e9:98:94:97:d4:58:19:3b:46:e5:
99:69:2a:ec:73:77:64:03:c0:98:bb:6e:37:d3:52:
ef:6f:6d:ac:82:8f:fa:85:2d:f9:32:33:eb:87:85:
3f:13:03:eb:11:79:9b:ad:b9:fb:46:2e:04:f4:3a:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7D:CB:33:54:8C:D1:13:23:C5:4E:A8:B5:69:43:AD:D1:93:87:36
X509v3 Authority Key Identifier:
keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3130332e39382e37352e302f32342d3234203d3e2039363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.98.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:82:1f:7a:14:9d:6b:e6:66:7e:bc:39:0b:d9:4d:a9:90:d5:
8a:76:c9:53:52:bb:4d:fb:96:67:95:e8:2d:ed:d3:e2:5d:23:
fa:71:69:41:37:44:38:28:8e:69:78:2f:f2:73:2c:9e:55:d8:
b3:b0:f2:ce:56:75:8a:0f:07:e5:15:86:6c:85:eb:4f:34:1a:
fb:49:24:7a:6b:a2:6e:86:0e:e0:b9:b6:14:6c:fa:de:1b:76:
f2:0e:20:a5:4b:0d:ac:d7:2d:24:b3:a3:51:b3:ca:29:0b:85:
6b:71:70:14:3d:b6:28:59:09:8d:09:1e:10:10:75:07:cc:f6:
3c:55:59:f2:35:f7:83:7d:45:81:da:89:c9:07:98:ae:5f:60:
ca:ef:a8:82:d7:b6:e1:b4:f5:b6:4a:da:9f:02:97:6d:60:4b:
48:d4:62:5a:d1:cb:fa:18:51:f5:68:c9:7f:8c:f3:91:f8:2a:
4c:c8:16:cd:08:e4:43:3d:fc:af:3d:04:60:55:da:c3:8a:95:
55:14:f6:f9:61:80:49:25:52:ba:48:a8:6b:2b:96:ee:84:7f:
17:dc:39:de:e8:d1:bc:23:79:3a:bc:83:7c:31:a0:a7:c5:ff:
c2:55:91:49:39:d1:85:0e:54:94:ca:84:5c:2d:32:2b:1b:fa:
e0:51:d0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:54:25 2026 by rpki-client