Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a3a2f33362d3336203d3e2039363738.roa
File: 323430313a393563303a3a2f33362d3336203d3e2039363738.roa (raw, json)
Hash identifier: FjgMbezCdZItwgd9u+UzAwlO2g/X8+irv7/pznEQ8ng=
Subject key identifier: 87:FE:2B:41:FE:C4:A3:D7:42:4C:66:F3:C8:2F:37:30:78:46:7B:A8
Certificate issuer: /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial: 51FA39D3C5A226ACDDC8521D517D13143BA32C4D
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a3a2f33362d3336203d3e2039363738.roa
Signing time: Mon 11 May 2026 17:11:35 +0000
ROA not before: Mon 11 May 2026 17:06:35 +0000
ROA not after: Mon 10 May 2027 17:11:35 +0000
asID: 9678
IP address blocks: 2401:95c0::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:fa:39:d3:c5:a2:26:ac:dd:c8:52:1d:51:7d:13:14:3b:a3:2c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Validity
Not Before: May 11 17:06:35 2026 GMT
Not After : May 10 17:11:35 2027 GMT
Subject: CN=87FE2B41FEC4A3D7424C66F3C82F373078467BA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:3a:d0:57:86:0b:26:bc:38:7b:fa:24:5c:
de:df:ac:07:69:63:25:0a:98:cd:93:b8:30:04:25:
a2:5d:7d:cf:67:ec:93:a4:95:fc:2a:d6:a1:5a:c6:
c9:71:5a:f4:53:39:0b:84:bc:a4:34:95:90:0a:d0:
6f:cb:14:1d:09:cc:bd:98:6d:48:2b:75:7c:17:1a:
b4:47:01:bb:0b:6e:b3:57:92:ba:0c:f2:88:72:9e:
50:1b:a0:34:34:0a:24:a1:09:53:f1:ef:fa:61:76:
29:60:27:2f:b7:a8:22:22:7d:aa:21:fb:cd:e5:5a:
b0:70:ae:9a:29:c7:06:2c:19:ad:2e:d8:94:3d:59:
0b:e7:1d:61:ad:11:47:8b:8b:5e:a0:b7:de:db:48:
82:fe:8d:4f:9e:7c:e2:23:8a:29:da:3d:4d:a3:a3:
f1:70:ed:b8:54:eb:6c:c6:e6:cf:a9:d4:db:54:34:
19:7d:03:85:d8:f8:0b:11:96:c6:fd:88:1e:61:a9:
45:35:22:ed:c6:86:ea:eb:a9:49:8d:7e:d0:5c:78:
95:d2:ef:1e:16:e3:54:25:49:37:a3:23:ad:89:9d:
f6:d1:4c:27:22:30:2f:8e:b5:3c:75:7d:ac:03:10:
c0:5b:5f:89:ab:98:28:6f:fc:3d:cc:6a:b7:18:d3:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:2B:41:FE:C4:A3:D7:42:4C:66:F3:C8:2F:37:30:78:46:7B:A8
X509v3 Authority Key Identifier:
keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a3a2f33362d3336203d3e2039363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:95c0::/36
Signature Algorithm: sha256WithRSAEncryption
02:d6:72:e6:ee:37:25:24:16:e9:ab:67:98:db:83:be:25:6b:
97:54:30:57:6f:d1:89:41:87:bc:33:dc:e6:22:c9:22:f2:33:
2b:11:d1:5d:34:c4:f7:04:ed:be:01:71:c0:ef:4b:47:6e:6b:
f9:ef:a0:6f:8f:0d:c4:de:69:1c:b7:94:f8:e2:87:0b:ce:e1:
86:c6:21:e7:10:9b:eb:0c:39:bf:a9:69:35:db:0b:98:7d:11:
a2:44:c9:77:e4:94:f9:c3:d8:d7:63:51:28:2c:0d:23:b1:0d:
80:0c:76:ba:e4:dd:b8:47:d2:da:03:1e:23:c2:c9:0c:ce:d1:
b9:fe:a2:e5:17:9c:6b:d5:45:86:08:da:da:1f:3f:b3:f0:68:
40:93:b6:44:81:db:b3:7e:8e:f6:77:08:53:fd:91:f8:85:51:
98:f2:f5:36:2f:58:4b:ab:74:83:b5:21:e9:1a:70:8a:53:02:
6b:45:5f:0c:42:91:7d:61:79:23:77:75:57:b3:69:49:5b:54:
23:ba:cb:00:9e:c7:72:d4:0b:d9:23:7f:42:f2:30:28:3f:79:
3d:58:d7:ee:c5:14:6b:e5:6a:db:d6:90:93:64:41:87:fe:99:
ae:a9:2f:a3:f3:c4:f3:ce:d2:2d:97:23:ca:35:23:4a:09:9a:
e2:66:94:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:30 2026 by rpki-client