Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NETEASE/0/3130332e3133312e3235322e302f32322d3234203d3e20313331363539.roa
File: 3130332e3133312e3235322e302f32322d3234203d3e20313331363539.roa (raw, json)
Hash identifier: Ppc60+bUC3jHoIb/YKg+BjxMbGsU0hJNh7cule9AHd0=
Subject key identifier: C1:81:04:3E:C2:9D:97:FB:1A:82:1F:EB:7D:2A:B2:B0:05:58:CC:B1
Certificate issuer: /CN=694D566B900CA748266EF03C5A70F9F846AC9E9D
Certificate serial: 278E4149ED153DAF60BE9F6968D8BE21A9B9C0D0
Authority key identifier: 69:4D:56:6B:90:0C:A7:48:26:6E:F0:3C:5A:70:F9:F8:46:AC:9E:9D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/694D566B900CA748266EF03C5A70F9F846AC9E9D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NETEASE/0/3130332e3133312e3235322e302f32322d3234203d3e20313331363539.roa
Signing time: Mon 11 May 2026 17:09:50 +0000
ROA not before: Mon 11 May 2026 17:04:50 +0000
ROA not after: Mon 10 May 2027 17:09:50 +0000
asID: 131659
IP address blocks: 103.131.252.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:8e:41:49:ed:15:3d:af:60:be:9f:69:68:d8:be:21:a9:b9:c0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694D566B900CA748266EF03C5A70F9F846AC9E9D
Validity
Not Before: May 11 17:04:50 2026 GMT
Not After : May 10 17:09:50 2027 GMT
Subject: CN=C181043EC29D97FB1A821FEB7D2AB2B00558CCB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:2e:b1:5b:94:f7:2f:91:4a:52:27:86:f9:
30:2f:ab:e6:4d:9d:77:d3:24:d8:3f:f4:89:81:6f:
c8:a5:0f:c3:aa:a4:73:04:8b:e3:ff:76:6a:49:f5:
06:22:dd:55:c2:9c:db:c9:d7:39:f3:7f:01:b9:c3:
82:b0:20:0e:fd:af:6f:7e:a3:8e:07:e5:55:df:1b:
c5:f6:f7:10:41:f2:ec:be:dc:a9:36:bd:95:9b:26:
d6:19:f8:17:b7:e1:22:87:37:37:b5:16:fd:f9:81:
1f:e9:f0:08:7e:49:ac:9a:6b:a8:7a:e7:66:e0:8e:
6c:5a:91:ec:d8:7c:e2:e4:cb:1d:3c:a3:c6:36:15:
9a:e9:b7:a9:cd:bb:8f:a9:f8:96:3d:da:1c:5a:fd:
35:06:e1:4e:dc:f9:5d:9b:65:ff:7f:9d:6f:0d:dd:
9f:16:9b:90:cd:05:35:3e:bd:e3:77:2b:20:5f:cb:
a7:f7:f8:7a:3c:9e:54:78:da:9c:66:1d:c9:40:6a:
36:bf:20:e5:64:73:b6:13:fc:ba:12:a7:a1:a1:ae:
bc:21:f2:b6:63:0c:67:8c:9c:ce:ee:3f:f5:cb:0b:
17:bc:8f:96:5b:ff:54:c1:9e:21:f4:f9:5d:fe:47:
dc:58:a9:80:a2:28:3a:95:99:fe:9c:20:3e:93:d8:
e0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:81:04:3E:C2:9D:97:FB:1A:82:1F:EB:7D:2A:B2:B0:05:58:CC:B1
X509v3 Authority Key Identifier:
keyid:69:4D:56:6B:90:0C:A7:48:26:6E:F0:3C:5A:70:F9:F8:46:AC:9E:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NETEASE/0/694D566B900CA748266EF03C5A70F9F846AC9E9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/694D566B900CA748266EF03C5A70F9F846AC9E9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NETEASE/0/3130332e3133312e3235322e302f32322d3234203d3e20313331363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.131.252.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:e5:b5:7d:5c:fa:b0:d5:91:19:7b:97:9e:99:72:60:38:78:
06:08:15:4b:6a:1a:44:98:e0:c6:d5:17:44:bf:c3:f6:98:16:
09:8c:68:f4:d7:81:f8:ca:25:12:0c:a2:7a:b1:49:3e:d9:db:
35:8d:3e:88:4a:ee:7b:2f:bb:1d:2b:bf:91:8a:43:54:ae:bd:
e9:6b:7d:fc:74:9f:98:cb:31:2a:19:44:63:27:c0:4d:cb:d4:
b8:19:1a:6a:e7:0b:23:73:a1:2b:69:ce:ce:2a:a7:54:50:c3:
fc:34:07:6c:63:f3:13:b3:f3:b0:7c:08:0f:24:8b:f0:80:98:
47:57:d5:09:08:53:b5:a4:af:15:dc:79:6c:1e:75:4d:59:79:
de:94:cc:2b:4a:b2:37:84:9f:30:e2:36:7a:9e:04:7f:8a:57:
a5:5d:78:89:53:0f:48:e5:11:13:6e:93:47:2d:ce:09:64:25:
c6:3c:d6:74:c0:72:35:91:aa:ea:6b:02:a0:18:63:87:33:02:
39:ab:47:ca:79:1c:e4:1e:df:be:e2:01:ae:e8:91:17:94:78:
c1:38:5c:92:4e:a1:69:51:04:36:31:4c:d0:76:26:8a:31:9b:
4a:2a:0d:e3:5d:dc:b9:56:9f:2b:db:60:65:7b:fe:e0:cc:48:
9a:4a:8e:bb
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUJ45BSe0VPa9gvp9paNi+Iam5wNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk0RDU2NkI5MDBDQTc0ODI2NkVGMDNDNUE3MEY5Rjg0
NkFDOUU5RDAeFw0yNjA1MTExNzA0NTBaFw0yNzA1MTAxNzA5NTBaMDMxMTAvBgNV
BAMTKEMxODEwNDNFQzI5RDk3RkIxQTgyMUZFQjdEMkFCMkIwMDU1OENDQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHgy6xW5T3L5FKUieG+TAvq+ZN
nXfTJNg/9ImBb8ilD8OqpHMEi+P/dmpJ9QYi3VXCnNvJ1znzfwG5w4KwIA79r29+
o44H5VXfG8X29xBB8uy+3Kk2vZWbJtYZ+Be34SKHNze1Fv35gR/p8Ah+Sayaa6h6
52bgjmxakezYfOLkyx08o8Y2FZrpt6nNu4+p+JY92hxa/TUG4U7c+V2bZf9/nW8N
3Z8Wm5DNBTU+veN3KyBfy6f3+Ho8nlR42pxmHclAaja/IOVkc7YT/LoSp6Ghrrwh
8rZjDGeMnM7uP/XLCxe8j5Zb/1TBniH0+V3+R9xYqYCiKDqVmf6cID6T2OCJAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUwYEEPsKdl/sagh/rfSqysAVYzLEwHwYDVR0j
BBgwFoAUaU1Wa5AMp0gmbvA8WnD5+Easnp0wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVURUFT
RS8wLzY5NEQ1NjZCOTAwQ0E3NDgyNjZFRjAzQzVBNzBGOUY4NDZBQzlFOUQuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvNjk0RDU2NkI5MDBDQTc0ODI2NkVGMDNDNUE3
MEY5Rjg0NkFDOUU5RC5jZXIwgYEGCCsGAQUFBwELBHUwczBxBggrBgEFBQcwC4Zl
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ORVRFQVNFLzAvMzEzMDMzMmUz
MTMzMzEyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzMTM2MzUz
OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmeD/DANBgkqhkiG9w0BAQsFAAOCAQEAPeW1fVz6sNWRGXuX
nplyYDh4BggVS2oaRJjgxtUXRL/D9pgWCYxo9NeB+MolEgyierFJPtnbNY0+iEru
ey+7HSu/kYpDVK696Wt9/HSfmMsxKhlEYyfATcvUuBkaaucLI3OhK2nOziqnVFDD
/DQHbGPzE7PzsHwIDySL8ICYR1fVCQhTtaSvFdx5bB51TVl53pTMK0qyN4SfMOI2
ep4Ef4pXpV14iVMPSOURE26TRy3OCWQlxjzWdMByNZGq6msCoBhjhzMCOatHynkc
5B7fvuIBruiRF5R4wThckk6haVEENjFM0HYmijGbSioN413cuVafK9tgZXv+4MxI
mkqOuw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:11:56 2026 by rpki-client