Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/MFE/0/3130332e3131372e3133322e302f32332d3234203d3e2037353336.roa
File: 3130332e3131372e3133322e302f32332d3234203d3e2037353336.roa (raw, json)
Hash identifier: AS3qH/RjBUke7M3rlCKwKKx7OXc4/iKqzu9OBdcpsSg=
Subject key identifier: A0:70:65:7F:0E:4F:F7:05:85:73:33:4E:2D:68:2C:B0:EB:B7:A8:37
Certificate issuer: /CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3
Certificate serial: 0E6D94EFA215C1C9F7346BBC4D175FFA71B4BD65
Authority key identifier: 21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MFE/0/3130332e3131372e3133322e302f32332d3234203d3e2037353336.roa
Signing time: Mon 11 May 2026 17:56:05 +0000
ROA not before: Mon 11 May 2026 17:51:05 +0000
ROA not after: Mon 10 May 2027 17:56:05 +0000
asID: 7536
IP address blocks: 103.117.132.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:6d:94:ef:a2:15:c1:c9:f7:34:6b:bc:4d:17:5f:fa:71:b4:bd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3
Validity
Not Before: May 11 17:51:05 2026 GMT
Not After : May 10 17:56:05 2027 GMT
Subject: CN=A070657F0E4FF7058573334E2D682CB0EBB7A837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b8:d2:71:26:3b:7c:95:21:3d:93:9e:13:9f:
8a:31:6a:74:6f:8d:ab:6e:9b:62:03:23:9e:6f:b7:
26:5f:56:cd:a9:5e:95:89:96:60:5b:75:26:3e:c6:
e9:01:a9:a9:42:2c:dd:6f:7d:ca:0f:d4:1d:a4:b7:
ec:85:b8:d7:a4:5b:9e:47:ae:b3:c8:c7:32:a5:a0:
ad:ef:b8:45:c4:2b:ea:93:ed:6e:6f:9a:33:34:bf:
06:9d:eb:c4:3f:ed:a8:7b:9b:74:ed:87:c2:d6:5c:
a2:e3:4d:22:31:47:34:85:2c:a8:35:57:08:9e:32:
73:03:fb:a5:43:fc:b5:5e:b8:fc:29:b9:f9:db:18:
43:f3:e9:5c:06:cd:88:8f:e0:47:d3:a7:dd:ee:c7:
36:ff:33:68:c5:20:a7:8e:ae:87:e3:74:38:b5:29:
30:54:ba:bf:5c:e1:f7:00:13:5e:cd:da:f1:70:5d:
47:3f:4e:a5:3f:96:79:8e:c0:3f:c8:1a:85:4e:65:
ed:ce:ff:72:9a:13:02:d5:80:7e:32:98:e3:e2:34:
c9:f6:17:20:a0:9f:49:84:a4:d2:a5:9c:29:03:6d:
cb:43:87:5f:9e:a2:78:cb:51:8c:b6:5b:7b:9b:44:
92:e9:c9:28:15:a3:9e:82:c2:e9:11:6a:82:ed:2e:
58:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:70:65:7F:0E:4F:F7:05:85:73:33:4E:2D:68:2C:B0:EB:B7:A8:37
X509v3 Authority Key Identifier:
keyid:21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MFE/0/3130332e3131372e3133322e302f32332d3234203d3e2037353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.117.132.0/23
Signature Algorithm: sha256WithRSAEncryption
36:43:3c:a2:22:8d:bc:25:35:76:43:f6:ae:f4:d8:e0:bf:33:
c4:92:c7:4d:16:9c:ba:43:11:2f:c3:0f:ae:98:b8:e2:57:d9:
fd:a0:0f:c9:31:52:78:31:a5:4c:46:c1:86:d4:8c:cb:93:7e:
48:3b:41:fa:4d:a2:1a:ed:b8:d8:eb:86:32:75:9c:0c:23:8d:
33:7f:29:69:c6:23:cb:52:7a:d1:99:33:f1:45:f7:1b:3b:29:
fb:18:e0:66:26:b4:3d:d7:32:93:04:b6:04:6d:f8:31:5f:49:
53:0c:b8:4a:89:2e:57:3e:43:b5:ba:8c:85:30:5a:99:d2:b2:
47:60:d9:51:bc:44:d7:c9:ba:9b:c8:82:d4:3c:a1:9e:e2:26:
66:77:7d:eb:69:29:c6:2b:75:7f:91:60:d8:04:20:7a:67:03:
ec:25:c3:88:b8:36:f4:f3:4c:d8:0d:83:9d:01:3c:37:50:1d:
b5:e8:07:85:19:c0:0f:d4:c5:6f:fc:72:bb:30:9c:ca:e1:cf:
0e:f7:91:5e:60:4a:ec:bf:fb:b2:34:7f:3a:5c:3a:5e:1e:3f:
ec:ce:07:79:60:64:32:f1:91:93:18:81:ce:6f:c6:84:04:00:
ce:d6:d5:7f:46:d8:19:8d:62:81:18:b3:9f:33:d1:20:84:e9:
5f:f1:da:ea
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUDm2U76IVwcn3NGu8TRdf+nG0vWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQz
RkNGQjVCMzAeFw0yNjA1MTExNzUxMDVaFw0yNzA1MTAxNzU2MDVaMDMxMTAvBgNV
BAMTKEEwNzA2NTdGMEU0RkY3MDU4NTczMzM0RTJENjgyQ0IwRUJCN0E4MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfuNJxJjt8lSE9k54Tn4oxanRv
jatum2IDI55vtyZfVs2pXpWJlmBbdSY+xukBqalCLN1vfcoP1B2kt+yFuNekW55H
rrPIxzKloK3vuEXEK+qT7W5vmjM0vwad68Q/7ah7m3Tth8LWXKLjTSIxRzSFLKg1
VwieMnMD+6VD/LVeuPwpufnbGEPz6VwGzYiP4EfTp93uxzb/M2jFIKeOrofjdDi1
KTBUur9c4fcAE17N2vFwXUc/TqU/lnmOwD/IGoVOZe3O/3KaEwLVgH4ymOPiNMn2
FyCgn0mEpNKlnCkDbctDh1+eonjLUYy2W3ubRJLpySgVo56CwukRaoLtLliJAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUoHBlfw5P9wWFczNOLWgssOu3qDcwHwYDVR0j
BBgwFoAUIbYtYOGrU4A7IpzPg8F5/T/PtbMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAv
MjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS8yMUI2MkQ2MEUxQUI1MzgwM0IyMjlDQ0Y4M0MxNzlG
RDNGQ0ZCNUIzLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAvMzEzMDMzMmUzMTMxMzcyZTMx
MzMzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM3MzUzMzM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
Z3WEMA0GCSqGSIb3DQEBCwUAA4IBAQA2QzyiIo28JTV2Q/au9NjgvzPEksdNFpy6
QxEvww+umLjiV9n9oA/JMVJ4MaVMRsGG1IzLk35IO0H6TaIa7bjY64YydZwMI40z
fylpxiPLUnrRmTPxRfcbOyn7GOBmJrQ91zKTBLYEbfgxX0lTDLhKiS5XPkO1uoyF
MFqZ0rJHYNlRvETXybqbyILUPKGe4iZmd33raSnGK3V/kWDYBCB6ZwPsJcOIuDb0
80zYDYOdATw3UB216AeFGcAP1MVv/HK7MJzK4c8O95FeYErsv/uyNH86XDpeHj/s
zgd5YGQy8ZGTGIHOb8aEBADO1tV/RtgZjWKBGLOfM9EghOlf8drq
-----END CERTIFICATE-----
Generated at Tue May 12 22:32:14 2026 by rpki-client