Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/ITRINET/0/36312e36312e3234302e302f32302d3234203d3e203138343232.roa
File: 36312e36312e3234302e302f32302d3234203d3e203138343232.roa (raw, json)
Hash identifier: OENg2dUxKfNMtI2u30bsu1HnbjPScDlxxKzl3KfntJg=
Subject key identifier: E0:FB:3C:3F:A5:0F:53:4E:6A:A3:83:1F:DC:2A:54:CD:AC:FB:83:D0
Certificate issuer: /CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67
Certificate serial: 19EA99E1C2EAD20C88021D78D4B9067AF3A18844
Authority key identifier: 0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ITRINET/0/36312e36312e3234302e302f32302d3234203d3e203138343232.roa
Signing time: Mon 11 May 2026 16:48:55 +0000
ROA not before: Mon 11 May 2026 16:43:55 +0000
ROA not after: Mon 10 May 2027 16:48:55 +0000
asID: 18422
IP address blocks: 61.61.240.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ea:99:e1:c2:ea:d2:0c:88:02:1d:78:d4:b9:06:7a:f3:a1:88:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67
Validity
Not Before: May 11 16:43:55 2026 GMT
Not After : May 10 16:48:55 2027 GMT
Subject: CN=E0FB3C3FA50F534E6AA3831FDC2A54CDACFB83D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:89:61:b5:3f:97:5b:f5:4f:bc:dc:05:11:86:
7f:3b:f1:f0:a4:0d:71:16:ed:d8:7d:96:c7:13:04:
46:0c:ab:2d:f6:14:4c:33:73:52:d3:37:2a:86:91:
b4:f6:14:a6:1f:fe:65:77:ee:ab:3b:a3:71:f7:94:
fb:47:9c:8e:06:72:25:f2:e6:87:6a:48:69:42:4f:
fb:bb:70:cb:31:b9:9a:91:cd:c7:61:90:7b:fb:62:
a7:24:ef:21:d6:1e:73:ee:61:2e:33:01:62:f2:55:
ee:92:00:7a:d9:ff:ca:16:de:d9:f6:89:49:1a:c4:
42:93:23:64:62:db:5c:16:26:ac:be:bb:12:4b:e8:
78:4b:c0:93:e1:77:eb:ca:3e:e1:ac:cb:8a:f0:af:
1e:bc:38:2c:94:85:cc:39:10:24:10:8a:5a:71:51:
41:6a:55:af:6e:c4:05:58:85:0a:f1:7b:a7:6b:5c:
7c:aa:c9:10:2f:ba:3b:60:2e:a6:34:4c:d6:00:10:
4e:c7:9f:1b:40:54:97:4f:f3:68:5a:d0:fa:a5:06:
8d:b2:80:6b:b8:b1:c0:92:28:62:90:3e:58:37:5b:
f7:08:f3:95:ca:2b:9f:c9:d6:a4:ae:d2:43:80:94:
61:0c:fc:da:1f:23:66:8f:e3:db:d0:47:5e:8a:01:
66:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FB:3C:3F:A5:0F:53:4E:6A:A3:83:1F:DC:2A:54:CD:AC:FB:83:D0
X509v3 Authority Key Identifier:
keyid:0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/36312e36312e3234302e302f32302d3234203d3e203138343232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.61.240.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:86:7e:42:4f:72:0c:1c:52:ac:0d:89:dd:0c:0c:8d:a6:f5:
dd:d4:60:5e:e1:34:62:4c:e2:1f:a8:3d:6a:dd:f2:45:aa:80:
7d:19:4e:dc:f2:57:2e:42:30:53:7f:41:51:1e:4c:c5:72:d2:
28:c8:0f:56:63:76:6a:2f:01:ae:27:72:96:a0:43:91:95:2b:
98:ac:28:99:1d:c5:19:98:e0:3b:a6:28:cd:3e:66:51:44:86:
68:5d:da:15:97:a8:d5:86:0e:c4:5b:ef:c5:75:8a:a0:3d:b5:
1a:6b:50:3a:c5:15:11:80:5e:8c:db:cf:94:61:66:dd:e1:8c:
d6:d5:be:9e:e3:b2:b2:37:9c:47:d3:e7:44:db:a8:ed:c7:61:
04:82:4b:a9:91:da:7c:ed:e7:9d:a4:3a:ec:35:97:55:0d:c5:
3b:a4:55:c9:82:05:b0:59:f6:20:f2:00:c8:61:98:b8:e4:96:
f9:b9:39:c3:cc:ad:5d:81:e8:4a:67:21:93:a2:c6:52:a0:3f:
4c:e9:4e:7e:eb:41:f9:9c:cd:07:c2:0b:67:c8:3c:1c:b4:7d:
6d:59:dd:8b:ba:fd:28:10:15:6c:5f:c5:f9:e8:51:3f:6f:26:
59:9f:d0:15:77:05:d7:43:4c:01:28:e5:20:84:b4:f1:df:c5:
17:35:3a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:12 2026 by rpki-client