Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/LEOLCY/0/3130332e31372e3234302e302f32322d3234203d3e2039333034.roa
File: 3130332e31372e3234302e302f32322d3234203d3e2039333034.roa (raw, json)
Hash identifier: JsQnApcWG0Br9XWgA/4bt9qFUtjbPIUqmVRTsBx6apc=
Subject key identifier: 90:B0:0D:BC:94:12:F0:40:1D:43:DB:CE:D7:90:6F:BE:86:0A:5A:4B
Certificate issuer: /CN=2332F45F8367B079CBBF58331B603792B98FE14C
Certificate serial: 55BDF779CA778F76D514D093E02DD99436686D28
Authority key identifier: 23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/3130332e31372e3234302e302f32322d3234203d3e2039333034.roa
Signing time: Mon 11 May 2026 17:31:16 +0000
ROA not before: Mon 11 May 2026 17:26:16 +0000
ROA not after: Mon 10 May 2027 17:31:16 +0000
asID: 9304
IP address blocks: 103.17.240.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:bd:f7:79:ca:77:8f:76:d5:14:d0:93:e0:2d:d9:94:36:68:6d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2332F45F8367B079CBBF58331B603792B98FE14C
Validity
Not Before: May 11 17:26:16 2026 GMT
Not After : May 10 17:31:16 2027 GMT
Subject: CN=90B00DBC9412F0401D43DBCED7906FBE860A5A4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:76:c7:c6:a8:5a:a2:35:d2:54:2d:63:5f:6f:
b7:d7:17:47:91:2b:24:44:00:77:81:36:3b:de:95:
de:4d:b0:46:fe:73:7a:60:84:7a:c9:39:8c:bb:08:
c0:e5:71:17:bb:16:32:ac:c2:64:67:62:d5:2b:d6:
a4:df:1e:35:1e:66:9d:64:12:58:d1:40:b6:ee:0a:
f9:a6:56:84:bf:da:1d:7a:00:8d:93:c9:a7:5f:32:
d1:25:2c:35:6e:4b:10:e5:b4:2b:15:90:91:5f:95:
cb:58:6e:02:4c:fe:20:ae:b3:ae:00:06:ee:2e:b7:
e7:10:77:9e:e7:e0:1c:16:b4:43:ae:60:b4:68:be:
a4:03:89:ba:2f:41:3e:84:80:5b:49:02:ba:fb:9c:
33:1d:5d:37:b1:c8:46:22:63:19:49:3d:31:e3:f2:
87:31:d2:2d:a6:2d:d2:72:9f:ae:d9:c4:58:e9:4f:
4d:07:fd:18:dc:5e:a4:b0:4b:9a:83:e0:7b:64:6f:
8f:f5:6c:bb:d9:d7:2c:b3:27:45:fd:6d:eb:35:29:
be:43:b3:01:ab:01:da:d9:e1:b1:f6:ce:e5:69:df:
89:5f:a7:11:df:c0:1f:9c:2a:8c:66:e2:34:6a:81:
2d:69:97:36:33:0c:48:ed:ec:a4:78:ba:d4:24:e2:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B0:0D:BC:94:12:F0:40:1D:43:DB:CE:D7:90:6F:BE:86:0A:5A:4B
X509v3 Authority Key Identifier:
keyid:23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/3130332e31372e3234302e302f32322d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.240.0/22
Signature Algorithm: sha256WithRSAEncryption
20:00:c1:5e:98:a0:fe:b7:85:4e:8f:37:0e:47:a0:a2:df:9d:
23:18:cb:8a:35:62:16:66:88:bd:76:9e:8a:e0:b5:0b:fc:18:
86:ec:4b:99:60:6c:e4:c4:25:4e:64:b4:5c:46:ad:57:66:00:
51:5b:5c:74:6d:75:e2:67:8a:82:c3:79:ac:42:a3:af:26:d8:
94:f9:56:dd:d2:59:85:e6:ea:0f:e3:45:da:b0:db:2d:bc:8e:
53:ed:1a:c7:4f:4b:79:c8:eb:85:15:91:d2:72:53:f8:0f:a3:
c2:d1:23:ef:59:96:c4:c8:c6:56:d9:e4:a7:43:7a:cb:9b:e6:
97:43:89:f8:14:d6:d3:cd:62:15:c7:e6:d6:ea:80:f6:7c:7f:
d3:2b:02:8f:be:07:2b:66:e3:aa:33:e4:bb:b0:e2:06:be:ce:
e8:75:8c:70:2d:53:92:68:39:2c:27:4e:ff:0f:9d:2f:c1:77:
c2:6b:43:5f:4b:49:d2:c2:95:cf:21:13:aa:0f:06:39:c4:8a:
4b:b4:24:27:54:1b:78:db:c2:b4:d9:4e:79:5f:0a:5e:6b:a4:
de:be:7f:e3:8f:b2:3d:96:6d:27:f0:c0:53:01:fb:0a:ab:88:
5f:26:cc:a7:d6:15:e6:1c:52:93:02:81:97:9f:f9:7c:2e:28:
65:86:ee:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:26 2026 by rpki-client