Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCCC/1/3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa
File: 3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa (raw, json)
Hash identifier: nTtkDIS/9RWSvXhNtKm7NzCRLQuNi0ZYeYDRWbSZUkY=
Subject key identifier: 3D:99:98:15:C6:86:11:65:A6:E9:53:4C:83:74:4A:9C:96:04:8A:60
Certificate issuer: /CN=F4194E27E15A4F76E006403795143D4EFDCF022E
Certificate serial: 7195B9B8C0DF9B2A5ED1337352F2BCBB46E76C74
Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/1/3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa
Signing time: Mon 11 May 2026 17:36:25 +0000
ROA not before: Mon 11 May 2026 17:31:25 +0000
ROA not after: Mon 10 May 2027 17:36:25 +0000
asID: 150772
IP address blocks: 157.20.107.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:95:b9:b8:c0:df:9b:2a:5e:d1:33:73:52:f2:bc:bb:46:e7:6c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E
Validity
Not Before: May 11 17:31:25 2026 GMT
Not After : May 10 17:36:25 2027 GMT
Subject: CN=3D999815C6861165A6E9534C83744A9C96048A60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:6e:f2:0e:7b:b8:10:9f:48:ef:c3:7b:bb:
3d:44:a5:68:f4:df:b7:64:86:72:f6:47:a6:73:ea:
96:11:6e:d9:fc:6e:82:3e:bf:af:54:ce:8c:b3:9a:
b9:65:32:c7:91:76:07:45:d0:cc:c2:7b:3f:22:84:
99:ae:f2:27:8f:70:72:f6:b8:c5:ff:6f:6b:62:44:
03:2b:0e:38:b6:39:2e:3d:fe:74:80:30:69:19:50:
8b:2a:59:40:b5:b5:29:a4:b7:45:2c:01:67:df:99:
fa:c6:3a:7a:1c:db:53:33:b2:56:a5:16:b6:95:44:
9b:ed:e4:c7:10:4b:b2:53:29:f0:bc:6c:33:5b:60:
7d:3e:22:5d:77:df:61:f3:3d:5c:69:73:14:d1:62:
20:37:cb:78:7c:1b:09:09:d6:16:ef:fb:eb:d5:ea:
86:92:2e:b8:61:cb:c8:d3:2b:30:d0:76:0b:49:2a:
26:66:b5:84:af:d0:aa:48:6e:92:ff:5a:95:c5:a0:
ee:fc:5c:15:7f:43:6f:49:e3:0d:cd:6d:b5:cc:21:
ff:dc:f0:96:67:8f:3b:ae:53:64:e8:5b:f1:32:d3:
bd:73:c4:d8:14:9e:8c:7b:6a:4a:8a:67:14:c3:37:
28:d9:aa:d0:b4:4f:0f:37:2f:00:7d:22:61:95:6d:
cb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:99:98:15:C6:86:11:65:A6:E9:53:4C:83:74:4A:9C:96:04:8A:60
X509v3 Authority Key Identifier:
keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.107.0/24
Signature Algorithm: sha256WithRSAEncryption
69:9a:06:cb:81:46:24:ac:90:25:97:a3:f3:88:66:4e:3f:5a:
a3:16:2c:5d:ff:65:0b:1a:cd:3a:92:ab:99:db:83:dd:fb:52:
e9:b1:14:08:b9:d7:10:54:73:82:8f:b3:a9:80:77:e2:0b:3e:
d8:58:13:13:1d:1a:63:5e:64:ee:f9:88:15:b5:b9:1f:90:f0:
57:33:02:18:7e:dc:52:e1:bb:85:15:c9:b0:3a:e3:62:63:97:
ea:50:6c:04:b7:82:f0:77:2f:8a:fd:73:af:53:db:c0:a2:19:
16:bb:00:a2:af:50:fc:35:6e:2a:ee:cf:69:11:1e:2a:83:6c:
b2:4b:ef:0b:cc:d9:06:8d:16:69:7f:db:77:f3:22:37:a2:9b:
48:72:4e:55:67:23:65:14:33:2a:14:8b:1c:e5:c8:3e:09:b1:
e1:39:fb:5a:69:ea:6d:57:d1:68:c8:8d:86:16:0d:e9:40:15:
54:00:3d:61:34:31:51:3f:e4:73:97:6c:2b:2a:83:63:e9:2b:
d0:13:9f:74:43:0d:dc:3a:6e:57:79:42:b1:1a:8b:50:e3:a5:
4e:01:ab:95:14:b4:2d:bb:e1:ea:76:8e:1b:56:97:a4:28:80:
0a:58:2c:23:f4:7f:16:b6:c4:e1:cd:c8:1a:33:6d:58:7f:c9:
3a:4c:da:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:47 2026 by rpki-client