Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCCC/1/3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa
File: 3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa (raw, json)
Hash identifier: NsVC+kyCCo5iuf92xRmrMNAeZWnd0GFdv+b5P5erIsw=
Subject key identifier: 3B:0B:E9:67:60:7E:34:BA:5F:03:F1:55:BC:90:49:FF:CF:57:D9:76
Certificate issuer: /CN=F4194E27E15A4F76E006403795143D4EFDCF022E
Certificate serial: 290FFD3C0526B9A958B07BE7093933DF8625788C
Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/1/3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa
Signing time: Mon 11 May 2026 17:39:39 +0000
ROA not before: Mon 11 May 2026 17:34:39 +0000
ROA not after: Mon 10 May 2027 17:39:39 +0000
asID: 198949
IP address blocks: 157.20.106.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:0f:fd:3c:05:26:b9:a9:58:b0:7b:e7:09:39:33:df:86:25:78:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E
Validity
Not Before: May 11 17:34:39 2026 GMT
Not After : May 10 17:39:39 2027 GMT
Subject: CN=3B0BE967607E34BA5F03F155BC9049FFCF57D976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:f1:1a:d0:03:e4:48:f6:cb:2f:38:c2:1f:
3b:9f:75:09:a6:c4:6c:58:4b:1e:07:78:b1:1b:bf:
06:f2:62:d4:3e:33:e1:86:b3:bd:cb:c6:c8:5b:6d:
fa:a2:5d:5b:56:8f:a0:0f:5b:fc:56:98:db:cc:97:
35:7e:d4:3b:3c:22:46:1e:aa:39:d5:8a:7e:b1:f2:
63:03:ab:09:c8:a5:bb:c9:7c:b0:17:c0:4a:da:bc:
2a:b5:ed:9b:c1:6c:d9:9b:a9:ce:28:9c:65:ab:14:
a3:b0:2b:39:a9:ef:32:dc:f0:6b:d7:17:95:7c:e5:
b8:fa:ac:0c:ef:e7:98:f0:5b:92:dc:f3:40:8b:ff:
d6:22:bc:6c:8f:db:8f:07:c0:e8:2a:e3:03:09:6a:
80:b6:0a:93:57:85:4c:d8:df:82:5d:31:43:d5:a0:
10:4d:ef:d7:99:7b:08:21:b9:da:f1:83:d9:93:cd:
87:ac:5b:ef:fc:ed:14:4d:8b:20:dd:8a:0f:68:5a:
6e:e7:a2:c5:1f:37:40:31:c8:3e:dc:27:b8:af:92:
84:c1:2b:b4:be:d5:d6:c0:1b:b3:19:d9:8b:c8:1c:
8d:ec:0f:e3:70:31:e0:73:b3:8a:56:d4:62:93:04:
05:11:d8:d1:d6:1d:37:44:01:18:05:3a:6a:17:fb:
68:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0B:E9:67:60:7E:34:BA:5F:03:F1:55:BC:90:49:FF:CF:57:D9:76
X509v3 Authority Key Identifier:
keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.106.0/23
Signature Algorithm: sha256WithRSAEncryption
75:30:9c:2e:0b:86:da:b3:49:d1:a5:4f:a6:57:95:9b:3d:80:
0f:4f:66:62:cc:9f:ca:57:01:00:af:2c:8e:9c:37:b7:44:86:
6f:ef:37:9f:a1:e6:fb:2a:c0:6c:bf:1f:f1:fd:b5:2c:e8:90:
f4:42:3d:6d:93:99:f0:7d:f8:40:e5:52:aa:cb:c0:0f:e4:a1:
93:93:78:ce:b0:08:2e:14:0c:fd:d4:db:cb:82:33:4b:d3:57:
e1:78:7d:77:bc:7b:a0:57:53:9d:10:67:cc:d0:f5:ba:87:a6:
a7:f0:19:b2:6f:d3:0d:30:34:4a:54:bb:34:a9:a9:33:7b:a4:
e0:79:50:d5:f6:d1:73:ff:d3:ff:10:33:ec:e9:38:ee:8a:03:
cb:01:a0:33:f1:11:25:1a:c0:bb:45:c3:89:e9:5a:6a:51:56:
58:34:55:0c:06:41:81:81:27:d4:78:77:b3:a5:3a:b9:d2:52:
b4:de:ac:f7:3e:20:18:0d:b8:40:58:5d:8c:7b:34:ad:4b:91:
18:92:79:fc:0a:15:37:34:db:64:c1:81:ab:46:d2:a4:21:bc:
9d:4d:12:a7:3c:45:de:e6:ca:58:20:0c:b8:ce:bd:79:0a:de:
88:be:00:0a:35:0a:4d:98:b3:78:55:ab:92:18:9e:7f:e5:d8:
ec:bd:85:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:45:05 2026 by rpki-client