Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/KKCO/0/3130332e3133342e3132302e302f32322d3234203d3e20313331363435.roa
File: 3130332e3133342e3132302e302f32322d3234203d3e20313331363435.roa (raw, json)
Hash identifier: 5YtP4S/SL4qMiPP6SO95f1XxJCbpmMediEjct/tVRs0=
Subject key identifier: 59:8B:07:89:9B:D8:A3:50:47:9D:6A:16:18:16:1A:A8:36:B2:89:AC
Certificate issuer: /CN=1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694
Certificate serial: 1F5FA3504A2F39CB6E765B9F381ABEADB58C560B
Authority key identifier: 1B:F4:19:77:3D:1E:15:EE:FD:6C:A2:BB:4E:50:DB:EF:74:AB:96:94
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KKCO/0/3130332e3133342e3132302e302f32322d3234203d3e20313331363435.roa
Signing time: Mon 11 May 2026 16:50:16 +0000
ROA not before: Mon 11 May 2026 16:45:16 +0000
ROA not after: Mon 10 May 2027 16:50:16 +0000
asID: 131645
IP address blocks: 103.134.120.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:5f:a3:50:4a:2f:39:cb:6e:76:5b:9f:38:1a:be:ad:b5:8c:56:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694
Validity
Not Before: May 11 16:45:16 2026 GMT
Not After : May 10 16:50:16 2027 GMT
Subject: CN=598B07899BD8A350479D6A1618161AA836B289AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:bb:b2:d1:2e:b5:c1:97:1b:b6:c1:89:05:0b:
cc:41:da:0f:40:f7:d8:68:ba:cd:ba:8b:c2:ab:44:
5a:34:67:e9:10:77:14:3d:8a:59:45:a7:10:0c:c5:
89:b9:56:80:ee:7f:81:16:b5:d6:73:26:2e:7b:1f:
9f:d4:e0:82:9a:e0:9b:4f:c3:ff:2b:9d:23:b2:b5:
97:bc:43:5f:d9:d3:1a:08:8c:81:a4:94:fb:b5:95:
d7:90:ab:29:c7:d5:72:ab:ce:73:72:d8:ec:af:00:
2b:d2:d1:9d:3c:f6:f8:af:0e:57:f3:2a:02:e1:03:
29:d8:78:be:94:a1:8a:44:4e:8d:5a:77:c9:d0:60:
d4:2b:e4:f8:e7:0c:67:99:4a:4c:be:11:e9:03:10:
7a:7f:07:7e:96:d2:3a:f3:10:4c:1d:e6:52:2b:a0:
86:ae:44:b8:1c:36:9b:fe:c4:28:b4:f6:4a:87:72:
e2:19:b7:76:a0:b9:21:6a:18:00:16:63:22:16:f5:
a9:b0:81:4e:1d:01:6a:fe:3e:a9:63:01:ec:f1:f7:
00:7a:b5:3c:9d:39:6e:f9:59:58:6c:c4:32:ed:40:
30:cc:49:e1:62:39:f2:55:a2:3c:4b:f7:c5:a3:9e:
57:14:e1:46:60:e3:58:a9:b9:08:e6:fa:20:49:1a:
d7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8B:07:89:9B:D8:A3:50:47:9D:6A:16:18:16:1A:A8:36:B2:89:AC
X509v3 Authority Key Identifier:
keyid:1B:F4:19:77:3D:1E:15:EE:FD:6C:A2:BB:4E:50:DB:EF:74:AB:96:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKCO/0/3130332e3133342e3132302e302f32322d3234203d3e20313331363435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.120.0/22
Signature Algorithm: sha256WithRSAEncryption
46:83:f2:19:e6:a6:c9:f6:60:3a:9b:0d:bd:33:0b:12:d0:28:
eb:17:97:f4:cc:26:c1:3b:86:10:4a:48:9f:96:23:5d:ee:e4:
f6:39:2d:7c:7e:2f:8b:31:fe:91:0a:90:a5:cf:9b:f4:cf:0e:
89:c6:82:63:01:73:e1:51:ca:3c:ba:79:69:91:74:e8:7c:ed:
e9:4a:a6:88:64:86:65:97:9b:db:34:25:fa:36:e1:a6:d7:a0:
f2:34:54:ab:c0:63:f4:88:99:aa:74:8f:fb:8e:50:bd:50:62:
05:73:b3:7f:77:70:bc:35:ba:80:1b:f3:5a:53:3b:f9:9b:f1:
d4:ba:c3:71:2a:f7:41:d8:25:6a:96:dd:6c:0d:b6:8b:4f:93:
36:0f:5a:77:22:6f:65:d9:07:f4:50:82:cf:76:b7:85:39:4b:
a8:89:b3:e4:09:4a:1f:af:c5:b3:1f:48:84:a8:9c:da:cc:2b:
34:61:30:99:f9:cb:48:e5:30:fb:ab:51:f5:5d:4d:58:29:6b:
3d:f2:78:98:a2:74:4b:a0:1d:a0:34:b4:99:7c:35:f4:1b:44:
6a:e9:56:29:66:a6:0f:13:0a:ee:2f:14:c7:8e:64:49:25:0d:
5f:16:8b:e3:4a:66:2b:4e:ad:0c:a0:6e:a4:cb:cd:3c:c9:7c:
df:9c:b3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:10 2026 by rpki-client