Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/3130332e3135392e38382e302f32332d3234203d3e20313332333639.roa
File: 3130332e3135392e38382e302f32332d3234203d3e20313332333639.roa (raw, json)
Hash identifier: 83VaupmQcP8aGjwKicONhsZqmG/0fmQWoqtdQ72vsQk=
Subject key identifier: 45:50:A0:1E:9C:26:DF:1C:57:58:6F:A0:3E:79:84:D9:5E:03:B5:F2
Certificate issuer: /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68
Certificate serial: 7BD7C4BF6C0FCF2A7DDCC75E15EA7785B23DC1B9
Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/3130332e3135392e38382e302f32332d3234203d3e20313332333639.roa
Signing time: Mon 11 May 2026 17:32:49 +0000
ROA not before: Mon 11 May 2026 17:27:49 +0000
ROA not after: Mon 10 May 2027 17:32:49 +0000
asID: 132369
IP address blocks: 103.159.88.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:d7:c4:bf:6c:0f:cf:2a:7d:dc:c7:5e:15:ea:77:85:b2:3d:c1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68
Validity
Not Before: May 11 17:27:49 2026 GMT
Not After : May 10 17:32:49 2027 GMT
Subject: CN=4550A01E9C26DF1C57586FA03E7984D95E03B5F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:c3:20:7d:95:41:17:71:85:64:f2:61:b1:
98:31:34:a1:1b:53:53:14:0e:5f:33:4b:72:59:f0:
33:51:ad:05:d4:ed:c3:c8:28:58:49:ce:29:83:ac:
54:7e:5a:55:67:e7:5d:2a:c6:1d:b9:9b:f0:db:e9:
6c:d0:90:60:9a:9c:e0:16:c6:ff:91:d9:32:b6:6e:
b9:85:77:d0:ce:e1:7d:f6:af:7c:ce:78:34:2a:6d:
d3:ce:30:a0:c1:3c:60:3e:99:ab:28:bc:f8:d6:5e:
33:f9:53:1f:70:3a:3d:b5:11:3e:03:34:73:30:2f:
0c:05:9c:93:b9:7e:94:ac:10:11:1e:87:5c:9a:f5:
22:3f:c0:34:4d:40:53:4e:15:51:d6:4a:63:ce:a2:
73:a3:03:04:2e:b7:db:c4:f5:31:57:c9:a0:fe:47:
56:b6:7e:4a:da:23:8e:15:c3:7b:8c:cf:e3:e3:6a:
2d:f1:47:b5:08:d2:4d:19:c0:b9:eb:f8:ed:10:3c:
c2:2f:5e:d7:82:46:64:aa:ab:9f:9a:8d:9e:d5:7e:
c5:e2:25:46:51:50:f5:f1:08:20:83:a1:fc:18:39:
a1:c5:9e:d7:ad:99:94:94:b5:fe:8f:22:a0:74:f7:
dc:bf:a3:4c:2a:f7:90:ba:bc:df:0b:b9:c7:f3:a0:
6a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:50:A0:1E:9C:26:DF:1C:57:58:6F:A0:3E:79:84:D9:5E:03:B5:F2
X509v3 Authority Key Identifier:
keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/3130332e3135392e38382e302f32332d3234203d3e20313332333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.88.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:b2:2e:2b:d3:84:a3:71:5d:e2:1c:3e:0f:ba:af:60:73:9b:
a0:dc:25:2a:40:d1:41:f3:71:5f:09:f7:44:de:ad:4e:5f:8f:
42:c6:3c:7b:9c:f5:2f:92:b4:ce:83:31:f6:62:05:fc:c8:d4:
8b:2d:ea:ac:d6:0b:ba:60:53:4c:be:71:b2:35:66:28:55:86:
e7:27:e0:b8:bf:b9:90:7a:3e:db:56:2d:7e:de:78:8a:88:66:
a7:a0:9c:31:e0:ce:03:58:56:6b:d6:b1:52:46:27:87:54:41:
f5:c1:8a:4d:ec:be:26:22:a2:27:8d:81:36:32:df:4c:eb:87:
4f:2e:86:8f:5f:83:94:6b:4b:10:18:75:1c:d4:9c:c5:91:42:
e4:5d:d9:05:55:3d:d9:67:c7:eb:9d:da:dd:e6:8f:2e:c3:82:
4f:fe:de:82:d0:fc:12:32:84:ef:8a:3f:9d:e6:95:40:38:41:
89:3c:64:1d:79:a6:6a:53:9c:ce:b9:f2:98:33:28:80:2b:33:
92:b7:5d:94:85:09:5e:c3:d1:64:a4:88:cc:8b:1e:a5:04:0f:
3b:3e:60:61:45:ca:90:3e:8d:09:00:cf:3f:21:83:ee:59:d3:
8d:1a:19:04:ff:8c:c0:1c:23:e6:10:98:54:db:68:71:f4:76:
99:5e:cd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:36 2026 by rpki-client