Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3131352e34332e302e302f31372d3137203d3e2039343136.roa
File: 3131352e34332e302e302f31372d3137203d3e2039343136.roa (raw, json)
Hash identifier: 8sPfy+KBH9Iy3oz6z3pK10IfnFdOzftlkUor0sZFlgE=
Subject key identifier: 0C:2A:AF:42:50:B3:00:6C:5D:FC:A8:3B:8D:75:0A:2C:14:C7:C1:43
Certificate issuer: /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Certificate serial: 184B9AC502F3E031F72CCEC35731508A56772665
Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KE-ING/0/3131352e34332e302e302f31372d3137203d3e2039343136.roa
Signing time: Mon 11 May 2026 16:48:50 +0000
ROA not before: Mon 11 May 2026 16:43:50 +0000
ROA not after: Mon 10 May 2027 16:48:50 +0000
asID: 9416
IP address blocks: 115.43.0.0/17 maxlen: 17
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:4b:9a:c5:02:f3:e0:31:f7:2c:ce:c3:57:31:50:8a:56:77:26:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Validity
Not Before: May 11 16:43:50 2026 GMT
Not After : May 10 16:48:50 2027 GMT
Subject: CN=0C2AAF4250B3006C5DFCA83B8D750A2C14C7C143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:3e:33:59:75:57:40:72:99:0d:5a:25:33:
63:ec:b3:7c:58:f0:51:23:e0:c6:cf:cc:d3:05:1c:
d5:ea:61:d5:72:73:1a:99:92:fe:82:d7:69:69:84:
43:53:43:b9:46:2c:82:aa:93:88:4a:1d:5f:f4:1e:
a9:b2:9f:7c:e6:09:bf:86:d9:44:5b:8e:78:e7:cc:
bf:d7:3e:1c:0d:8b:27:f3:68:93:1a:38:4b:75:16:
4e:36:99:fe:10:42:10:76:b9:50:62:78:71:07:ba:
47:b9:e6:2f:9e:46:c9:f7:18:ec:75:ca:b1:17:3d:
4f:68:4f:ef:b9:76:d9:d2:2e:62:7d:b9:89:09:5f:
a2:57:23:78:fa:1e:d2:41:f7:d2:d9:c3:04:63:3f:
d5:a7:0d:60:17:66:de:e9:37:1a:d4:e3:c6:62:12:
fc:34:3c:e0:a0:d7:34:66:c7:fa:c8:b2:ae:e8:d6:
6e:1d:31:c7:1a:1f:fa:42:e3:f1:33:d0:a1:20:0e:
48:ab:36:a8:a2:26:fc:7b:43:97:b2:8a:ea:22:fe:
72:c9:3e:12:38:32:c8:2f:61:a8:00:f4:21:b2:8b:
0c:8f:5d:82:95:6b:6f:45:e7:db:57:14:a0:e1:49:
86:ea:6e:3c:d5:ec:91:c2:6a:9a:f8:88:83:1c:28:
9c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2A:AF:42:50:B3:00:6C:5D:FC:A8:3B:8D:75:0A:2C:14:C7:C1:43
X509v3 Authority Key Identifier:
keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3131352e34332e302e302f31372d3137203d3e2039343136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/17
Signature Algorithm: sha256WithRSAEncryption
7f:b9:ae:d5:3c:ca:f3:a1:4f:36:f1:da:5e:50:8e:f3:eb:68:
7e:91:5e:2b:17:8a:18:31:91:7f:e4:fa:ad:eb:56:11:87:3f:
22:36:8c:cb:61:11:e2:e0:2c:8e:0a:4c:f3:c8:fb:1e:bd:01:
ec:a2:3a:c6:cd:92:9a:7e:78:52:04:6c:91:0a:c3:0a:54:a8:
55:8c:70:d9:ca:7b:ed:35:f5:90:ea:a2:ee:35:6c:67:ff:ed:
4a:b7:b7:6b:69:c2:d8:12:53:00:07:62:23:da:c2:60:cb:bb:
ce:1d:c8:75:cd:23:81:fc:d4:43:af:3f:dc:e5:3d:4a:42:75:
0c:85:16:67:fc:03:fa:22:ff:55:b3:46:66:3c:20:1b:4c:bc:
03:b9:b8:03:d0:7c:0b:0c:34:86:f7:53:2f:7d:16:22:20:b2:
17:a3:67:dc:09:b9:50:b3:76:2b:c2:b6:a8:f8:b9:f5:63:72:
86:55:11:e0:f8:9c:94:4e:96:97:79:b7:43:dd:2c:94:c2:9b:
13:11:77:b9:fc:5d:16:68:2c:4f:d9:3e:54:22:86:a1:11:28:
eb:c8:7e:f0:19:2c:f3:5b:f8:79:4c:6e:36:21:87:bd:d4:81:
8e:63:91:94:98:16:f7:4c:33:a3:16:c5:d3:d2:b9:bc:a0:70:
fe:eb:aa:46
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUGEuaxQLz4DH3LM7DVzFQilZ3JmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0Qy
MzMyNEU0QjAeFw0yNjA1MTExNjQzNTBaFw0yNzA1MTAxNjQ4NTBaMDMxMTAvBgNV
BAMTKDBDMkFBRjQyNTBCMzAwNkM1REZDQTgzQjhENzUwQTJDMTRDN0MxNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIiz4zWXVXQHKZDVolM2Pss3xY
8FEj4MbPzNMFHNXqYdVycxqZkv6C12lphENTQ7lGLIKqk4hKHV/0Hqmyn3zmCb+G
2URbjnjnzL/XPhwNiyfzaJMaOEt1Fk42mf4QQhB2uVBieHEHuke55i+eRsn3GOx1
yrEXPU9oT++5dtnSLmJ9uYkJX6JXI3j6HtJB99LZwwRjP9WnDWAXZt7pNxrU48Zi
Evw0POCg1zRmx/rIsq7o1m4dMccaH/pC4/Ez0KEgDkirNqiiJvx7Q5eyiuoi/nLJ
PhI4MsgvYagA9CGyiwyPXYKVa29F59tXFKDhSYbqbjzV7JHCapr4iIMcKJyLAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUDCqvQlCzAGxd/Kg7jXUKLBTHwUMwHwYDVR0j
BBgwFoAUBJ1NvPql7iinm/SeYj6HzSMyTkswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5H
LzAvMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0QyMzMyNEU0Qi5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8wNDlENERCQ0ZBQTVFRTI4QTc5QkY0OUU2MjNF
ODdDRDIzMzI0RTRCLmNlcjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5HLzAvMzEzMTM1MmUzNDMz
MmUzMDJlMzAyZjMxMzcyZDMxMzcyMDNkM2UyMDM5MzQzMTM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH
cysAMA0GCSqGSIb3DQEBCwUAA4IBAQB/ua7VPMrzoU828dpeUI7z62h+kV4rF4oY
MZF/5Pqt61YRhz8iNozLYRHi4CyOCkzzyPsevQHsojrGzZKafnhSBGyRCsMKVKhV
jHDZynvtNfWQ6qLuNWxn/+1Kt7dracLYElMAB2Ij2sJgy7vOHch1zSOB/NRDrz/c
5T1KQnUMhRZn/AP6Iv9Vs0ZmPCAbTLwDubgD0HwLDDSG91MvfRYiILIXo2fcCblQ
s3Yrwrao+Ln1Y3KGVRHg+JyUTpaXebdD3SyUwpsTEXe5/F0WaCxP2T5UIoahESjr
yH7wGSzzW/h5TG42IYe91IGOY5GUmBb3TDOjFsXT0rm8oHD+66pG
-----END CERTIFICATE-----
Generated at Wed May 13 02:19:49 2026 by rpki-client