Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3131352e34332e302e302f31362d3234203d3e2039343136.roa
File: 3131352e34332e302e302f31362d3234203d3e2039343136.roa (raw, json)
Hash identifier: ccHKYIH1onediXgVYiKh7EHNnwTYWQJoE9EhH+EUTBk=
Subject key identifier: 78:1C:B9:7F:2F:E0:48:E2:4E:DC:77:3A:30:F5:50:BC:C9:54:AD:25
Certificate issuer: /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Certificate serial: 4DD6487675B6EC11C986E8C8BC1B54A161C6B2F6
Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KE-ING/0/3131352e34332e302e302f31362d3234203d3e2039343136.roa
Signing time: Mon 11 May 2026 16:45:46 +0000
ROA not before: Mon 11 May 2026 16:40:46 +0000
ROA not after: Mon 10 May 2027 16:45:46 +0000
asID: 9416
IP address blocks: 115.43.0.0/16 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d6:48:76:75:b6:ec:11:c9:86:e8:c8:bc:1b:54:a1:61:c6:b2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Validity
Not Before: May 11 16:40:46 2026 GMT
Not After : May 10 16:45:46 2027 GMT
Subject: CN=781CB97F2FE048E24EDC773A30F550BCC954AD25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:54:f1:e5:72:5d:c7:ca:57:09:59:a6:0d:
b0:0e:ca:fa:bf:18:fb:de:2f:ce:c7:b0:97:b7:da:
22:ef:40:f1:73:c0:c4:86:87:dc:51:cf:75:ea:f1:
f3:ba:e7:7c:f8:6b:0c:25:a2:ec:98:8e:8e:cd:3e:
0b:0b:cc:9c:9b:6c:13:a4:61:41:f2:4f:8d:e3:fc:
34:ba:9d:ae:58:c8:50:48:87:40:d3:57:df:d6:11:
3c:c5:d5:1e:a0:01:8a:60:28:24:c7:20:b9:9f:c8:
01:ce:9b:f5:8b:5c:be:bc:7b:ec:08:54:f8:67:fb:
07:83:10:f4:2b:6a:bd:16:27:f2:b3:0e:a8:f7:62:
0a:af:e3:7e:67:7b:03:1d:17:97:69:8f:65:aa:6b:
5d:0f:13:7f:42:e8:17:6b:e6:54:b4:2a:8f:f2:e0:
b2:ee:57:f3:7c:a9:ec:3a:d6:a6:d2:15:fd:17:31:
36:2e:08:2d:d0:ac:d7:57:22:9c:47:84:1c:4e:9a:
f5:e8:b2:c8:a2:63:1a:91:4e:ee:c8:dd:91:e0:00:
06:f1:9b:c8:4d:8d:27:d6:60:f5:b9:ee:c2:c6:8d:
b2:24:a1:16:b6:7a:68:2a:e3:e3:02:c3:0b:2c:55:
61:c5:c3:f0:1f:f6:2b:4d:ee:f9:78:09:1b:eb:f6:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1C:B9:7F:2F:E0:48:E2:4E:DC:77:3A:30:F5:50:BC:C9:54:AD:25
X509v3 Authority Key Identifier:
keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3131352e34332e302e302f31362d3234203d3e2039343136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:75:b9:95:e7:02:62:c6:02:3e:28:36:e0:4f:47:c5:d8:d4:
db:aa:6b:d1:88:6b:4c:2c:22:a4:a0:2d:21:2b:c8:0f:4f:76:
e5:14:79:e5:01:81:5c:6c:3e:d7:05:5f:dd:38:ae:71:29:90:
8f:50:52:8f:8e:71:b5:51:6b:9b:4a:ef:cb:7a:dd:23:47:5f:
2f:fc:d1:19:2c:55:4c:a6:09:92:fa:c8:9f:78:a7:81:a7:23:
02:02:9e:8a:58:6a:b0:a4:67:59:a4:ec:b7:7a:8a:08:06:5f:
74:3e:fa:7e:15:a1:49:f9:f4:31:52:66:21:9c:d3:ec:ea:cd:
4b:89:b9:1a:46:dc:18:ac:61:92:b2:cc:51:6f:ab:92:d5:16:
50:a1:65:c4:0c:33:e4:b9:85:11:fa:64:ce:8a:a6:a5:e5:0e:
0c:84:8d:12:16:17:c3:83:d2:1f:2c:1f:77:c0:83:a4:82:dc:
a1:1d:71:4a:6f:dc:9f:09:49:ca:e6:de:52:aa:20:b2:9f:50:
3f:f9:66:60:55:9e:4e:8b:4a:09:f0:66:3c:48:e0:eb:e7:ef:
5f:86:6c:68:b5:50:44:03:6a:b2:9b:f5:5c:e6:0c:04:44:1c:
bb:4e:81:fe:d9:42:9d:94:ef:a2:87:26:00:2e:23:1d:61:99:
fb:01:01:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:07 2026 by rpki-client