Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCCC/1/3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa
File: 3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa (raw, json)
Hash identifier: OmqcGxA2rNXj2dFvkkVaw1M6A48OHsdG1EyNXCLdbEU=
Subject key identifier: 09:2C:1A:D9:7E:CB:12:A6:94:46:DC:65:11:BB:84:56:04:50:FF:D8
Certificate issuer: /CN=F4194E27E15A4F76E006403795143D4EFDCF022E
Certificate serial: 783F1B3A763869F1E439D5D18C05B6272B5EF3F9
Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/1/3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa
Signing time: Mon 11 May 2026 17:36:25 +0000
ROA not before: Mon 11 May 2026 17:31:25 +0000
ROA not after: Mon 10 May 2027 17:36:25 +0000
asID: 150772
IP address blocks: 157.20.106.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:3f:1b:3a:76:38:69:f1:e4:39:d5:d1:8c:05:b6:27:2b:5e:f3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E
Validity
Not Before: May 11 17:31:25 2026 GMT
Not After : May 10 17:36:25 2027 GMT
Subject: CN=092C1AD97ECB12A69446DC6511BB84560450FFD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:95:a0:c5:15:fe:b9:39:3b:57:4e:36:ba:
8f:60:75:12:83:6c:df:7e:01:85:3a:77:37:d3:86:
4f:e0:37:e7:d6:77:77:44:09:43:bf:f5:b6:e9:a6:
69:cb:21:d1:ea:54:71:77:7b:70:cd:bd:c8:f9:61:
5d:0c:a3:14:cd:84:f4:8a:d2:c1:96:ec:b1:76:f2:
33:fb:69:25:47:28:2a:d8:40:ea:31:b7:67:fb:59:
34:42:98:21:56:ae:f5:39:0d:57:49:f9:90:36:32:
4d:ad:7b:47:fb:d5:a5:0e:9f:80:53:d9:e3:98:ad:
2d:5c:9c:e1:84:7e:f6:f8:7c:11:7a:50:79:15:b0:
21:5f:f6:f1:b5:a5:31:f6:8c:9a:ba:37:60:5b:8e:
db:32:9e:d4:84:83:71:49:2c:c2:fc:3e:fb:6d:24:
07:5a:88:0a:8a:0c:cd:1c:94:2b:88:fb:64:1f:01:
0f:28:16:14:48:72:57:2a:c0:c9:8a:ec:37:ef:a7:
b7:09:47:38:17:dd:93:91:24:00:f1:00:8a:37:b7:
55:90:92:75:e5:ff:19:e4:5a:f4:fb:86:8e:aa:e7:
e2:95:62:50:e6:1e:72:fb:9a:15:b4:24:44:64:c9:
11:a3:b8:94:06:4d:c0:3c:01:e4:59:6b:61:f3:04:
c8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2C:1A:D9:7E:CB:12:A6:94:46:DC:65:11:BB:84:56:04:50:FF:D8
X509v3 Authority Key Identifier:
keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.106.0/24
Signature Algorithm: sha256WithRSAEncryption
72:83:db:e8:3e:f7:4c:84:b7:b0:18:c4:d2:4a:3e:e3:7e:a8:
b0:3a:2d:69:d3:e3:d2:d7:c8:1b:ab:91:0e:78:1f:de:3a:29:
90:d8:48:b7:f2:85:e5:cc:d6:79:82:03:96:d7:36:18:ec:97:
ef:d1:06:a6:86:15:0d:92:c0:c4:74:93:50:b4:71:ee:e5:8f:
fa:d3:54:c0:fe:d3:d1:68:5a:ae:3c:68:fb:d5:58:7b:61:07:
83:da:dd:6f:12:cf:72:68:7b:2a:10:e9:4a:36:f7:12:ba:4c:
27:f5:30:ae:70:a0:ce:a5:28:ef:74:7f:61:1b:cb:a4:85:53:
7d:de:7f:60:c4:96:3b:ce:7f:22:2d:ed:c7:49:3f:e5:b7:d6:
5b:13:b3:44:9c:6a:26:af:c3:f0:23:e8:20:6c:52:ce:fd:a9:
ca:60:ac:91:df:bf:8b:07:10:ed:d0:12:3d:af:5e:80:71:0c:
27:77:8e:25:fe:9c:49:9f:fd:84:a0:d1:c7:4b:d4:87:2c:05:
81:f5:af:2b:2f:e2:68:1f:98:dd:cb:86:80:a0:27:92:c4:94:
f1:fb:82:9f:bf:39:23:61:5e:b8:01:8b:5b:22:57:29:0c:81:
9e:fd:dd:cd:ce:c0:de:ab:26:62:5b:78:f4:78:48:96:ab:37:
03:02:50:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:20:13 2026 by rpki-client