Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCCC/1/3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa
File: 3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa (raw, json)
Hash identifier: f9osk8atvNFbwzlzm+0pX0JbzGg2b5M3dZ9aT1SRM7Y=
Subject key identifier: 02:C7:08:81:15:D5:2B:59:B6:8B:D2:E0:A0:37:42:F5:97:B7:8B:31
Certificate issuer: /CN=F4194E27E15A4F76E006403795143D4EFDCF022E
Certificate serial: 76A502F008372260AB15161DA34899CECF1C9CCD
Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/1/3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa
Signing time: Mon 11 May 2026 17:36:24 +0000
ROA not before: Mon 11 May 2026 17:31:24 +0000
ROA not after: Mon 10 May 2027 17:36:24 +0000
asID: 150772
IP address blocks: 157.20.106.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a5:02:f0:08:37:22:60:ab:15:16:1d:a3:48:99:ce:cf:1c:9c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E
Validity
Not Before: May 11 17:31:24 2026 GMT
Not After : May 10 17:36:24 2027 GMT
Subject: CN=02C7088115D52B59B68BD2E0A03742F597B78B31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:eb:76:d3:8b:46:02:2a:bf:fc:c0:7f:1d:
57:f0:95:09:45:2c:0f:80:6f:da:23:7a:05:be:08:
d1:1d:e9:0d:07:03:63:39:b6:3e:0c:34:de:d8:ed:
48:4e:b3:66:8d:ae:32:14:6e:49:30:e1:c0:c9:51:
66:6d:01:1b:be:d8:10:c6:f3:b3:f5:3e:9f:b5:d0:
a9:65:b4:e7:aa:25:3b:cb:a2:d4:35:0e:7d:50:56:
c5:f5:d6:88:42:67:3a:4f:5b:ec:49:96:d8:79:d6:
bd:4f:45:0e:02:a4:57:ca:fa:5d:9b:4c:9f:4c:9f:
c0:49:6f:ce:9e:9d:17:fd:ed:a3:3f:fb:cc:d6:c8:
30:28:9f:0d:cd:df:11:5d:fe:02:45:7e:72:39:b1:
03:a1:a5:c2:62:89:07:e3:89:4b:b9:50:b2:bf:1f:
2b:1f:03:de:f3:d6:a2:0b:4a:35:98:df:62:41:96:
9b:5c:43:c4:dc:c3:12:d7:b8:ae:44:d4:90:4b:e2:
76:ff:e3:9c:18:f1:8f:0e:9c:d9:73:be:d5:17:5f:
9d:b5:23:41:55:78:8e:1b:a4:c1:59:f3:6c:b6:6d:
39:4e:b3:98:ad:86:d9:3d:bb:28:0a:2b:ac:70:62:
a8:8f:11:51:f3:7e:1b:ca:23:cc:3d:28:4e:a3:ac:
7b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C7:08:81:15:D5:2B:59:B6:8B:D2:E0:A0:37:42:F5:97:B7:8B:31
X509v3 Authority Key Identifier:
keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.106.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:26:ab:7d:0e:93:5c:a8:cc:c1:73:3b:51:d6:cf:bc:6a:dc:
9c:44:f5:29:18:9b:ba:6d:6b:99:31:b1:0a:1f:c6:81:6b:15:
b0:51:f1:54:35:a8:46:14:97:24:c8:4b:2d:94:e6:17:29:2e:
7e:a6:95:cd:d2:5f:0b:73:4e:fe:c8:04:31:df:ff:99:c2:e4:
f2:ff:9d:d8:d1:2b:c3:4d:29:fd:2d:0b:d8:88:e5:09:01:29:
44:a6:42:23:6e:f6:10:5a:6f:68:b0:77:eb:e5:d8:d2:a4:23:
c6:b7:89:a5:61:5e:96:c1:c1:88:f0:12:39:cf:16:82:63:34:
2a:13:57:b2:8d:3c:5b:a9:81:b9:aa:16:fa:df:01:cb:18:dc:
96:eb:0d:4a:62:72:9e:29:c3:08:cd:27:84:f8:06:1b:42:be:
39:bb:98:8b:04:25:ed:e5:05:30:5d:96:a6:0c:88:09:0c:c5:
33:ce:22:21:f4:6a:09:01:51:8b:ea:fd:6b:84:10:fc:71:6a:
2d:49:4a:3a:bd:a3:54:65:e8:53:54:9e:4a:27:d7:bf:37:26:
99:6f:99:f5:11:d7:8e:77:17:e9:48:1c:c0:bd:24:d5:2f:0b:
c9:16:84:f9:20:97:30:eb:fc:e1:13:5a:51:6a:74:78:40:c7:
e8:5a:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:42 2026 by rpki-client