Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3132332e3235322e36342e302f31382d3138203d3e2039343136.roa
File: 3132332e3235322e36342e302f31382d3138203d3e2039343136.roa (raw, json)
Hash identifier: pbThQhpNTSnJMBASZ2s2lhxD43G2mkYc9iaYlmcl8J4=
Subject key identifier: 51:B6:C7:19:1B:E7:B4:E7:54:99:76:C8:6E:10:A6:95:A8:16:63:BB
Certificate issuer: /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Certificate serial: 6764F56D171DCE12D80DC2B3B4410A7C5751C700
Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KE-ING/0/3132332e3235322e36342e302f31382d3138203d3e2039343136.roa
Signing time: Mon 11 May 2026 17:09:19 +0000
ROA not before: Mon 11 May 2026 17:04:19 +0000
ROA not after: Mon 10 May 2027 17:09:19 +0000
asID: 9416
IP address blocks: 123.252.64.0/18 maxlen: 18
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:64:f5:6d:17:1d:ce:12:d8:0d:c2:b3:b4:41:0a:7c:57:51:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Validity
Not Before: May 11 17:04:19 2026 GMT
Not After : May 10 17:09:19 2027 GMT
Subject: CN=51B6C7191BE7B4E7549976C86E10A695A81663BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:b2:3d:1c:da:26:74:4a:9a:de:c3:41:e4:
8d:b5:64:ac:ba:fd:c5:b6:d7:54:71:60:2b:99:b4:
65:cc:ec:3e:56:db:a1:af:08:05:33:72:9a:5f:84:
f3:c0:65:68:d8:65:be:25:bb:2f:3c:70:71:c5:a3:
b5:35:57:66:a4:2d:c3:55:ac:d3:dd:99:27:15:4a:
8e:1a:57:92:32:0c:70:e1:29:7c:e9:80:b1:e4:1b:
ee:fc:63:7a:3e:15:ea:5e:1e:0f:7f:71:0b:10:bf:
4a:6a:49:81:1e:ec:f5:77:4f:3b:95:02:7b:b7:94:
8c:c2:8c:cd:55:38:8a:af:b9:66:04:4b:b7:65:e0:
22:8a:99:02:a7:3f:a4:12:17:2d:7b:12:49:53:46:
2d:3e:f7:fe:b5:bb:32:64:d0:94:9c:cf:8d:1e:18:
0e:7f:b1:d2:19:ae:56:e1:e0:50:c4:61:b8:d6:bb:
f0:c1:17:67:1c:99:95:4d:4d:40:99:f2:71:52:1d:
14:99:dd:0e:4a:eb:c2:20:04:c2:48:cf:2b:be:0a:
a7:e2:ea:bf:21:6f:e8:72:08:0d:c8:fe:ce:6d:77:
48:05:e5:60:90:5c:de:de:d7:c0:c2:fa:92:c4:c7:
b8:e6:38:da:84:2f:cb:a5:88:30:96:c6:43:e2:d7:
73:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B6:C7:19:1B:E7:B4:E7:54:99:76:C8:6E:10:A6:95:A8:16:63:BB
X509v3 Authority Key Identifier:
keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3132332e3235322e36342e302f31382d3138203d3e2039343136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.252.64.0/18
Signature Algorithm: sha256WithRSAEncryption
45:f7:61:2c:46:3f:14:16:4b:17:44:a8:17:e1:6d:92:06:0c:
4d:3d:1e:5d:39:cf:4e:97:01:7c:f1:75:bb:de:a5:43:4e:05:
47:e7:85:c0:27:c4:1b:e4:37:d5:b0:08:18:2b:91:ad:36:b4:
42:d4:d8:71:27:f1:b3:ca:eb:16:59:89:c2:6a:b7:f8:bd:60:
d0:90:73:d5:0e:53:99:89:03:5b:43:b4:47:1e:1f:5b:0a:50:
9c:da:34:cc:1b:2c:54:85:7b:8c:c3:2d:bb:7d:b9:c4:ff:54:
c2:9c:cf:f1:f8:16:6a:39:27:67:34:ab:b4:03:5d:b6:bf:0a:
0c:fc:ef:7f:da:4e:fa:2a:77:fd:f8:38:df:25:ee:21:ca:eb:
19:dd:c0:1c:34:98:3c:ce:26:01:8e:bc:3b:f4:ec:5a:b1:ff:
7b:b4:20:26:e2:b7:b3:07:86:d6:b5:7f:b1:66:a3:b7:16:43:
8b:e5:ca:f8:a0:0c:b3:3d:73:c2:1f:fc:80:67:d5:4f:97:8f:
4c:44:f7:60:a6:a4:2e:4e:b5:ae:64:11:f5:fa:2f:78:3f:88:
60:73:55:67:27:66:61:42:77:94:90:7c:7d:38:53:f2:69:0d:
9d:3a:ed:43:02:85:49:6a:16:0b:d7:83:6e:d9:ff:06:8f:39:
b4:85:11:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:50 2026 by rpki-client