Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/3232332e32362e312e302f32342d3234203d3e2039363738.roa
File: 3232332e32362e312e302f32342d3234203d3e2039363738.roa (raw, json)
Hash identifier: Lo7donP/9UA808jwU4s7KUQfGkcGM3kV2CfMe8JCTd8=
Subject key identifier: 55:CB:E6:3F:35:5C:A7:16:A0:26:E9:74:29:63:B0:83:17:C5:E5:1D
Certificate issuer: /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial: 6E243FEFBA0D4660A9D47F50708124951BE81A59
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3232332e32362e312e302f32342d3234203d3e2039363738.roa
Signing time: Mon 11 May 2026 17:56:02 +0000
ROA not before: Mon 11 May 2026 17:51:02 +0000
ROA not after: Mon 10 May 2027 17:56:02 +0000
asID: 9678
IP address blocks: 223.26.1.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:24:3f:ef:ba:0d:46:60:a9:d4:7f:50:70:81:24:95:1b:e8:1a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Validity
Not Before: May 11 17:51:02 2026 GMT
Not After : May 10 17:56:02 2027 GMT
Subject: CN=55CBE63F355CA716A026E9742963B08317C5E51D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:9a:60:d4:f9:3e:53:83:47:41:78:b1:8a:
97:7f:1f:38:06:09:70:b3:ed:82:50:6e:fb:a6:5b:
74:7c:07:47:40:46:8d:b9:ad:2a:b5:c3:00:c5:31:
64:f7:3d:03:f2:0a:04:1e:93:11:7d:05:83:98:e1:
e5:3f:e0:46:ef:e0:90:6f:62:33:66:6b:d4:49:1a:
1d:83:8b:34:ab:91:39:33:20:94:a6:ad:e8:50:3b:
c4:1a:c0:0b:64:d6:5f:b4:e3:4a:a2:64:77:4c:3d:
61:14:7a:70:3c:fc:f5:07:81:a8:0e:22:57:f9:d6:
2c:e4:46:a9:cf:a5:cf:3f:43:89:96:2b:e2:8f:c7:
93:d2:c7:fc:30:74:18:ba:1a:b5:7c:08:f0:58:1f:
28:05:b7:00:b0:8e:5f:14:d1:ce:28:98:9b:5d:3e:
8c:f1:d2:ae:8f:fa:96:ed:ff:74:56:7a:ee:fa:1c:
44:45:d1:d9:2b:97:0b:a0:ae:15:91:e9:77:2e:dd:
f4:6c:9c:e0:97:85:64:57:42:88:d6:82:e6:84:42:
ab:2a:e1:46:d0:bd:b6:03:f9:99:ed:d5:d1:ba:b7:
ff:3e:ec:27:7a:4a:81:2e:a0:00:bb:94:57:64:14:
dd:2b:9a:4a:b9:9a:73:cd:79:3e:6b:a9:84:7a:0f:
43:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CB:E6:3F:35:5C:A7:16:A0:26:E9:74:29:63:B0:83:17:C5:E5:1D
X509v3 Authority Key Identifier:
keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3232332e32362e312e302f32342d3234203d3e2039363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.26.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:52:d0:f4:b4:c9:00:e4:96:6c:aa:20:3c:36:48:61:6e:7e:
30:5d:4e:13:d3:58:99:8e:68:e1:8e:a2:12:73:1e:1b:a9:a3:
bd:59:d2:db:7e:20:87:44:15:78:7e:b8:4c:3b:06:cd:d1:d9:
3f:28:f3:81:6b:4b:67:69:6e:e2:81:f0:73:0d:dc:99:d2:9e:
a4:00:d4:c5:4c:ae:64:1d:e3:7c:4f:6e:5a:f8:2d:53:55:55:
36:95:6f:fd:d6:3a:79:77:29:71:ed:86:e5:c8:1c:01:25:1e:
7f:dd:c7:3b:c0:03:37:6a:81:10:e6:d3:05:65:3e:e1:98:2c:
f7:fa:2a:3e:36:e2:8b:b3:d3:6d:7d:3c:2f:53:14:e1:23:11:
8f:e7:33:0b:43:ca:19:16:26:c9:e8:75:b5:53:f3:89:c1:32:
5e:29:d3:fc:d3:ed:94:65:8b:c3:f1:c3:f7:fd:90:bf:88:87:
aa:d0:1d:7a:2e:09:2e:06:38:f4:e6:2f:8a:da:a2:bb:9a:ee:
bf:b0:1e:20:82:28:3c:6d:4a:bb:3a:4b:65:fd:c0:01:0d:65:
d4:2d:4c:f0:09:91:57:83:69:8b:6b:d4:b3:44:9a:f7:ea:aa:
27:ed:1c:43:a8:d3:74:86:2f:04:70:b2:5c:f2:f9:04:88:4c:
7b:44:aa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:41:07 2026 by rpki-client