Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/MITACMDC/0/3231312e37382e3234302e302f32302d3232203d3e203138313739.roa
File: 3231312e37382e3234302e302f32302d3232203d3e203138313739.roa (raw, json)
Hash identifier: wtDOplvpAqeejc+mSEqtFsj/OGKvnvcOzFKX6zd6nQY=
Subject key identifier: 26:10:49:78:5D:59:1D:03:4E:68:EA:D9:EC:F7:86:E7:60:3F:DD:D0
Certificate issuer: /CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
Certificate serial: 039500923288D0403469924320E16AEC06F4DE95
Authority key identifier: F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MITACMDC/0/3231312e37382e3234302e302f32302d3232203d3e203138313739.roa
Signing time: Mon 11 May 2026 17:03:56 +0000
ROA not before: Mon 11 May 2026 16:58:56 +0000
ROA not after: Mon 10 May 2027 17:03:56 +0000
asID: 18179
IP address blocks: 211.78.240.0/20 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:95:00:92:32:88:d0:40:34:69:92:43:20:e1:6a:ec:06:f4:de:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
Validity
Not Before: May 11 16:58:56 2026 GMT
Not After : May 10 17:03:56 2027 GMT
Subject: CN=261049785D591D034E68EAD9ECF786E7603FDDD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:3d:b0:9d:1f:08:b2:a7:c6:50:6a:71:a0:
bd:05:e6:f3:4a:8f:eb:91:4d:d1:59:62:d0:d9:0c:
64:c5:4d:27:41:5b:51:9e:97:30:9a:79:c9:4a:d8:
13:37:c3:37:a3:70:ad:e4:32:a9:b1:ff:4f:b2:01:
48:08:da:b8:52:98:c0:8c:f1:64:a2:ed:6d:16:e2:
19:b8:c6:d8:09:e8:94:77:37:5c:ef:2e:2e:ad:4f:
0b:cb:48:41:86:4f:96:31:88:c4:b0:45:2c:c5:77:
30:28:be:2c:52:a3:88:5f:22:1e:61:6a:c3:29:ec:
36:13:94:15:bd:23:09:56:00:cd:0c:70:ad:5a:a5:
04:04:fc:90:99:5b:c2:b2:85:7f:b3:14:28:38:b5:
5a:45:b2:50:8b:f5:d3:c3:c9:d3:78:1a:96:32:12:
7e:e1:ff:93:c7:2b:02:16:c4:8f:b5:8b:3d:8d:ec:
86:cc:90:cf:14:a3:33:c2:1b:88:34:2a:b3:44:54:
d9:72:1f:37:64:fd:ca:5c:1a:7b:29:a8:eb:12:55:
48:2e:ec:74:cb:ca:80:cc:19:eb:e2:7c:1d:32:c2:
62:1f:1c:ae:1a:c4:92:d1:40:6f:f8:4f:8d:9d:a7:
58:49:9e:72:2f:fc:e2:90:84:35:95:55:aa:61:a0:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:10:49:78:5D:59:1D:03:4E:68:EA:D9:EC:F7:86:E7:60:3F:DD:D0
X509v3 Authority Key Identifier:
keyid:F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/3231312e37382e3234302e302f32302d3232203d3e203138313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.78.240.0/20
Signature Algorithm: sha256WithRSAEncryption
24:ad:65:11:22:b1:9b:b8:23:f3:53:e6:25:6d:16:98:83:26:
01:59:ca:bd:35:a1:22:98:71:d6:f3:ca:bc:67:e5:49:6c:6a:
49:54:ae:2e:5d:03:4b:96:fc:b2:70:09:96:fc:f4:f8:0b:6d:
33:11:9e:06:19:55:5f:3a:d8:1b:03:69:41:60:89:b1:94:29:
b7:97:86:35:b3:7e:4e:18:bc:b2:fc:ff:84:8b:ad:6f:6e:74:
4c:1a:88:bd:da:9d:b2:1e:3b:09:fa:f9:18:a6:b6:e9:2b:00:
43:ec:59:ca:2f:15:d8:d5:e0:70:f2:3a:5a:a6:78:1e:02:f7:
2a:87:89:3f:4c:55:df:47:9e:4e:cc:1c:ab:8b:90:0a:f8:67:
aa:c1:ee:ab:d3:17:03:8c:fe:ac:f1:ca:7b:0d:0e:bd:29:b7:
37:d9:2d:77:46:30:4d:8e:c5:93:7c:26:d6:07:91:7a:b8:c0:
08:0d:7b:b9:99:1d:8f:51:4e:08:f0:44:0b:59:95:0f:41:48:
f2:8b:c1:03:7d:fd:a0:b7:af:cc:f9:96:33:d5:bd:60:ba:2d:
af:44:d8:25:ca:74:e3:e1:3e:5c:e3:9e:d7:a9:21:4d:68:2d:
7c:f0:c1:7b:3b:4e:7b:64:29:21:f7:cb:ca:1d:90:ef:5f:b4:
98:6f:d8:74
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUA5UAkjKI0EA0aZJDIOFq7Ab03pUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFDRUFFNEFFMTNBNzFBRjZBMDcwOUE0QzMwMEFEQTQ2
MjNBMkNBQTAeFw0yNjA1MTExNjU4NTZaFw0yNzA1MTAxNzAzNTZaMDMxMTAvBgNV
BAMTKDI2MTA0OTc4NUQ1OTFEMDM0RTY4RUFEOUVDRjc4NkU3NjAzRkRERDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiCT2wnR8IsqfGUGpxoL0F5vNK
j+uRTdFZYtDZDGTFTSdBW1GelzCaeclK2BM3wzejcK3kMqmx/0+yAUgI2rhSmMCM
8WSi7W0W4hm4xtgJ6JR3N1zvLi6tTwvLSEGGT5YxiMSwRSzFdzAovixSo4hfIh5h
asMp7DYTlBW9IwlWAM0McK1apQQE/JCZW8KyhX+zFCg4tVpFslCL9dPDydN4GpYy
En7h/5PHKwIWxI+1iz2N7IbMkM8UozPCG4g0KrNEVNlyHzdk/cpcGnspqOsSVUgu
7HTLyoDMGevifB0ywmIfHK4axJLRQG/4T42dp1hJnnIv/OKQhDWVVaphoIhzAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUJhBJeF1ZHQNOaOrZ7PeG52A/3dAwHwYDVR0j
BBgwFoAU8c6uSuE6ca9qBwmkwwCtpGI6LKowDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlUQUNN
REMvMC9GMUNFQUU0QUUxM0E3MUFGNkEwNzA5QTRDMzAwQURBNDYyM0EyQ0FBLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0YxQ0VBRTRBRTEzQTcxQUY2QTA3MDlBNEMz
MDBBREE0NjIzQTJDQUEuY2VyMH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4Zi
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NSVRBQ01EQy8wLzMyMzEzMTJl
MzczODJlMzIzNDMwMmUzMDJmMzIzMDJkMzIzMjIwM2QzZTIwMzEzODMxMzczOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBNNO8DANBgkqhkiG9w0BAQsFAAOCAQEAJK1lESKxm7gj81PmJW0W
mIMmAVnKvTWhIphx1vPKvGflSWxqSVSuLl0DS5b8snAJlvz0+AttMxGeBhlVXzrY
GwNpQWCJsZQpt5eGNbN+Thi8svz/hIutb250TBqIvdqdsh47Cfr5GKa26SsAQ+xZ
yi8V2NXgcPI6WqZ4HgL3KoeJP0xV30eeTswcq4uQCvhnqsHuq9MXA4z+rPHKew0O
vSm3N9ktd0YwTY7Fk3wm1geRerjACA17uZkdj1FOCPBEC1mVD0FI8ovBA339oLev
zPmWM9W9YLotr0TYJcp04+E+XOOe16khTWgtfPDBeztOe2QpIffLyh2Q71+0mG/Y
dA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:14:47 2026 by rpki-client