Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232342e302f32342d3234203d3e20333936393832.roa
File: 3130332e3132352e3232342e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier: Uem5Q3NCsbS+pBiksFlyOVkJAZV5kyuPM0+iiLLcI/A=
Subject key identifier: D2:99:99:5E:3E:F4:17:C0:8F:1D:68:8E:B8:21:C2:81:75:2A:80:6B
Certificate issuer: /CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
Certificate serial: 2BACC4D43FEDA1C56319E53443F8A0463D29C269
Authority key identifier: 29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232342e302f32342d3234203d3e20333936393832.roa
Signing time: Mon 11 May 2026 17:26:31 +0000
ROA not before: Mon 11 May 2026 17:21:31 +0000
ROA not after: Mon 10 May 2027 17:26:31 +0000
asID: 396982
IP address blocks: 103.125.224.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ac:c4:d4:3f:ed:a1:c5:63:19:e5:34:43:f8:a0:46:3d:29:c2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
Validity
Not Before: May 11 17:21:31 2026 GMT
Not After : May 10 17:26:31 2027 GMT
Subject: CN=D299995E3EF417C08F1D688EB821C281752A806B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:99:12:56:dc:78:8b:2d:eb:a0:21:1b:25:
e3:d2:30:ef:1f:28:3b:a4:3e:62:c1:53:72:b0:85:
19:8c:13:1d:0a:af:cd:d0:bf:89:2f:04:11:6e:30:
40:36:52:a6:90:e6:1b:5f:f6:e6:9d:98:61:6f:2f:
79:a3:93:f0:53:75:53:f1:17:e7:39:e9:e5:15:99:
34:a7:22:04:9f:6b:c3:fa:00:18:c4:df:28:e9:36:
d5:b4:ce:ff:bf:ce:e9:28:51:03:9d:b7:bf:4b:60:
61:0c:10:de:db:f1:9c:a8:a0:9b:ca:10:43:5e:2c:
2c:f1:08:c4:04:69:df:31:68:a9:6a:4f:24:e1:42:
39:92:82:28:f3:fd:78:a1:ba:48:6e:33:2e:4b:9a:
e6:83:bb:2a:93:8d:41:6f:41:6f:95:a8:33:8a:7f:
02:c3:72:a5:65:f0:05:92:d8:6f:d1:a7:85:08:c7:
6a:93:dd:d8:64:1a:75:99:a6:ea:ec:3f:9c:d2:33:
9c:2f:af:18:b8:db:8a:7b:9b:aa:a9:48:4d:27:67:
02:f6:14:36:ab:af:04:21:ee:2c:52:c7:f1:2b:16:
05:87:f6:d7:65:38:b2:68:f4:c5:42:a1:15:3c:f2:
e5:86:f4:c7:01:1e:30:78:8e:87:1a:95:0e:f0:2e:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:99:99:5E:3E:F4:17:C0:8F:1D:68:8E:B8:21:C2:81:75:2A:80:6B
X509v3 Authority Key Identifier:
keyid:29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232342e302f32342d3234203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.224.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:8a:20:af:39:b7:df:7a:03:39:92:22:10:36:b3:58:c9:b2:
26:2b:05:c9:10:3a:4a:9f:08:c7:5b:00:fb:c6:f0:82:ab:c9:
e3:db:a9:27:ac:99:3f:8f:e6:39:07:f5:3d:23:43:8e:09:b3:
1a:8c:4e:8d:0e:dd:c4:4a:18:d0:17:41:ec:e5:25:5f:e6:b3:
d8:02:7e:d8:fa:40:95:f8:92:ad:53:59:fa:aa:08:46:70:28:
f4:b1:77:39:3f:c4:38:05:7b:35:c3:a1:79:e2:00:68:02:00:
0f:c2:ac:f3:ea:48:e7:55:15:2f:ee:9e:e6:41:07:28:47:4d:
8b:43:91:76:f4:0f:83:a5:0e:4d:9d:ef:24:79:aa:f9:f9:56:
78:43:56:c8:db:bb:07:d8:02:a7:23:a2:7b:b5:39:51:b7:19:
3a:d4:c2:45:80:e2:dd:5a:a4:f6:51:ef:42:71:77:45:c7:59:
d0:1b:13:fe:39:6a:a0:69:8b:be:ab:3e:df:2d:aa:86:6d:44:
a5:85:32:64:1f:16:8e:7e:14:7b:25:06:e1:61:24:b8:9b:d1:
15:47:1d:8c:bf:c0:b1:2b:98:d6:99:9d:24:61:01:b7:9a:36:
de:24:b9:8c:87:86:cc:31:de:66:f5:29:16:c8:c5:d4:69:fa:
d4:3e:5e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:10:36 2026 by rpki-client