Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/LEOLCY/0/34332e3234302e34342e302f32322d3234203d3e2039333034.roa
File: 34332e3234302e34342e302f32322d3234203d3e2039333034.roa (raw, json)
Hash identifier: Rcyf/AbK/YuoEXF9UB0d8eqwnzO1awB1kaL4uBZD5pg=
Subject key identifier: A2:16:79:EE:85:63:3B:22:60:C4:2C:E9:58:E8:B3:42:2E:11:72:E0
Certificate issuer: /CN=2332F45F8367B079CBBF58331B603792B98FE14C
Certificate serial: 07A02300F1B81C1ED740BC250E85297B90E92198
Authority key identifier: 23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/34332e3234302e34342e302f32322d3234203d3e2039333034.roa
Signing time: Mon 11 May 2026 17:57:14 +0000
ROA not before: Mon 11 May 2026 17:52:14 +0000
ROA not after: Mon 10 May 2027 17:57:14 +0000
asID: 9304
IP address blocks: 43.240.44.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:a0:23:00:f1:b8:1c:1e:d7:40:bc:25:0e:85:29:7b:90:e9:21:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2332F45F8367B079CBBF58331B603792B98FE14C
Validity
Not Before: May 11 17:52:14 2026 GMT
Not After : May 10 17:57:14 2027 GMT
Subject: CN=A21679EE85633B2260C42CE958E8B3422E1172E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:55:ad:93:67:03:d8:74:96:7f:5d:66:eb:
8f:88:fb:4b:98:d5:09:36:ef:cd:52:5d:e4:5d:2a:
24:b3:51:bf:3f:a8:e7:71:52:2e:41:39:7e:af:21:
53:93:65:73:b7:af:56:59:8b:ba:ad:08:56:77:c4:
21:06:a1:e6:78:38:7d:0f:1a:ec:97:8c:bd:3b:f3:
47:db:51:9c:0f:39:a9:a5:05:31:f9:c6:ae:4f:39:
af:34:28:c8:1f:63:51:c1:24:bf:77:9c:2b:bd:12:
b9:4b:73:de:be:dc:ef:0d:2e:f5:19:7b:9d:60:0b:
10:1a:42:d9:c9:6d:b7:91:fc:80:ff:50:73:f5:da:
bf:84:96:16:0d:e1:59:b7:e6:9b:c9:4c:71:0a:d6:
88:52:8e:b2:f5:d4:40:29:85:c7:63:76:b7:d3:38:
e7:19:6c:89:a6:9c:ef:54:98:3b:3c:7d:03:fb:3c:
53:53:b7:53:49:0a:4e:ab:32:a5:a9:8b:b5:9c:3c:
d1:54:ab:82:4e:ff:5c:08:8e:4e:fe:7b:dc:61:3e:
1a:8d:14:e4:f5:2b:16:bb:2a:b3:f1:51:55:cc:9d:
76:7a:08:47:24:b9:39:50:e9:76:b4:95:26:08:25:
0a:1a:d3:af:f3:55:4f:4a:af:af:c4:da:a6:26:4c:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:16:79:EE:85:63:3B:22:60:C4:2C:E9:58:E8:B3:42:2E:11:72:E0
X509v3 Authority Key Identifier:
keyid:23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/34332e3234302e34342e302f32322d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.44.0/22
Signature Algorithm: sha256WithRSAEncryption
62:53:68:52:1f:e7:57:3c:7e:bd:11:86:0a:bd:7a:6c:e6:8b:
c3:35:65:0a:11:53:f3:3d:28:de:80:1e:37:e1:f9:ef:6e:4b:
4b:2a:eb:60:9d:c4:0d:54:7e:8b:dc:af:c2:a5:59:41:21:b4:
31:21:6e:31:70:71:e0:75:89:af:66:22:6c:9d:24:23:33:98:
da:ea:02:bf:c2:af:21:0a:f9:45:b3:85:77:a7:ce:4d:6c:2d:
b1:38:50:71:56:cc:e3:6e:07:0f:b9:a1:66:9a:64:fa:0a:a8:
43:a6:e8:e2:84:b3:a8:b0:6a:34:72:4a:2e:c7:28:73:e4:2c:
4c:38:e8:bf:1f:7f:56:de:07:86:92:40:a3:47:75:a0:e3:a3:
83:cd:1b:fa:f2:7f:bc:e7:a1:33:8c:f1:9f:31:34:bf:6c:22:
b5:94:81:b7:2e:13:45:0b:4e:d7:74:d1:c3:62:e4:61:50:31:
b3:d6:5d:6d:69:0e:96:0a:71:e9:db:18:73:7f:9f:2e:5a:e5:
90:8c:bc:34:57:ae:92:9f:77:35:af:07:be:27:8b:a6:2a:83:
fe:c1:96:48:6c:84:65:50:c1:78:fd:08:a8:21:77:07:fa:ea:
d9:ba:b2:73:c1:b5:71:07:4b:cf:f4:61:f3:8b:a5:4d:4d:63:
67:a8:11:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:33 2026 by rpki-client