Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/3130332e3135392e38382e302f32332d3234203d3e203331393732.roa
File: 3130332e3135392e38382e302f32332d3234203d3e203331393732.roa (raw, json)
Hash identifier: uBJCL+hDXsrLzypekl61CYTy6y1oooM7hy7D2SecWcY=
Subject key identifier: 82:E1:EB:66:68:EE:83:CE:CE:83:75:E2:66:16:FD:57:6D:67:DA:D2
Certificate issuer: /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68
Certificate serial: 566CEC60DBA9FD28240747508779FFB666269078
Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/3130332e3135392e38382e302f32332d3234203d3e203331393732.roa
Signing time: Mon 11 May 2026 17:15:22 +0000
ROA not before: Mon 11 May 2026 17:10:22 +0000
ROA not after: Mon 10 May 2027 17:15:22 +0000
asID: 31972
IP address blocks: 103.159.88.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:6c:ec:60:db:a9:fd:28:24:07:47:50:87:79:ff:b6:66:26:90:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68
Validity
Not Before: May 11 17:10:22 2026 GMT
Not After : May 10 17:15:22 2027 GMT
Subject: CN=82E1EB6668EE83CECE8375E26616FD576D67DAD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ec:9c:e9:5f:5e:c8:88:f6:99:70:2e:cf:4c:
dd:5c:fa:e8:b9:53:33:2b:46:8e:4d:4f:4b:90:64:
92:cd:36:3b:a1:99:89:a9:62:5e:ca:4d:ce:6e:4d:
91:f4:17:1e:42:9b:ce:13:e3:12:8b:80:ac:fe:00:
f3:ad:ed:4b:48:0c:65:ba:81:1c:35:df:4b:fc:0f:
01:57:a6:2d:ad:f9:4a:05:87:3d:25:a1:6a:85:16:
a7:72:64:94:ae:24:49:b1:72:84:ec:3a:42:1f:92:
2c:11:cd:22:89:12:0c:64:73:4e:ee:87:59:89:89:
fc:0a:86:2b:f9:dd:e9:27:e2:ac:19:7e:22:0d:08:
ff:22:f5:15:85:dc:6e:e0:8a:cd:53:02:0d:db:ba:
5f:0d:77:a3:6d:2c:96:3a:7e:c8:30:22:27:4f:99:
32:e4:72:f0:1c:8a:c9:37:1f:e0:57:e3:ea:c7:45:
1d:d6:00:b7:2f:43:c1:b4:b4:e3:a1:28:84:eb:c2:
d8:4d:d4:27:05:0e:b0:fb:ca:83:f5:6a:a6:a9:ba:
f9:82:00:5f:6f:6a:80:79:6c:12:60:4b:3b:95:6f:
f4:46:88:d9:35:ca:04:03:20:bc:05:90:f6:10:2a:
df:ca:9e:0e:06:09:9c:38:d1:0d:4a:67:d0:db:6f:
78:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E1:EB:66:68:EE:83:CE:CE:83:75:E2:66:16:FD:57:6D:67:DA:D2
X509v3 Authority Key Identifier:
keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/3130332e3135392e38382e302f32332d3234203d3e203331393732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.88.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:73:63:2b:80:e5:88:f9:f2:e7:21:10:60:ca:07:d0:15:db:
9d:8e:49:26:f1:bb:66:f6:77:74:ac:ff:fc:b6:de:cb:06:56:
fc:2b:03:a5:5b:13:eb:65:47:ef:a7:f0:8b:08:54:7c:43:09:
35:b0:4b:4f:07:6e:6e:0a:9d:ca:c7:5f:27:38:60:35:de:d4:
0d:a2:cc:81:c7:f9:7c:b1:fb:85:43:f0:6c:51:84:5b:2a:6e:
7c:7a:5a:2f:f1:84:a9:94:45:43:ed:15:de:96:8d:09:8b:10:
4a:c7:54:6e:d0:ff:3f:79:58:9f:34:79:44:c6:64:ae:ca:99:
dd:a0:30:b6:6c:d2:1d:53:e5:5a:de:a1:2e:28:03:1e:3b:9b:
4e:69:31:f6:56:b4:13:45:dd:4e:ac:c2:9b:49:0f:9e:6c:6c:
46:54:fa:f7:9f:78:65:41:e4:01:cb:96:11:22:02:ca:ad:2c:
22:fe:11:79:df:4b:f5:e0:70:ae:9a:3b:45:3f:26:15:20:cd:
86:41:7c:a6:ae:33:88:75:58:3a:b5:85:71:2d:96:18:cc:f5:
13:36:82:0a:a8:41:7b:c8:7a:e3:37:6c:c7:5b:90:e3:a0:f5:
4a:45:35:19:21:61:fa:ef:21:e5:37:16:8c:d7:89:98:04:02:
12:78:c2:31
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUVmzsYNup/SgkB0dQh3n/tmYmkHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJE
QTVBRUI2ODAeFw0yNjA1MTExNzEwMjJaFw0yNzA1MTAxNzE1MjJaMDMxMTAvBgNV
BAMTKDgyRTFFQjY2NjhFRTgzQ0VDRTgzNzVFMjY2MTZGRDU3NkQ2N0RBRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS7JzpX17IiPaZcC7PTN1c+ui5
UzMrRo5NT0uQZJLNNjuhmYmpYl7KTc5uTZH0Fx5Cm84T4xKLgKz+APOt7UtIDGW6
gRw130v8DwFXpi2t+UoFhz0loWqFFqdyZJSuJEmxcoTsOkIfkiwRzSKJEgxkc07u
h1mJifwKhiv53ekn4qwZfiINCP8i9RWF3G7gis1TAg3bul8Nd6NtLJY6fsgwIidP
mTLkcvAcisk3H+BX4+rHRR3WALcvQ8G0tOOhKITrwthN1CcFDrD7yoP1aqapuvmC
AF9vaoB5bBJgSzuVb/RGiNk1ygQDILwFkPYQKt/Kng4GCZw40Q1KZ9Dbb3hbAgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUguHrZmjug87Og3XiZhb9V21n2tIwHwYDVR0j
BBgwFoAUMYh/Do0X7rTfxzRM5Ihfa9pa62gwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT
Q09NLzAvMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS8zMTg4N0YwRThEMTdFRUI0REZDNzM0NENF
NDg4NUY2QkRBNUFFQjY4LmNlcjB/BggrBgEFBQcBCwRzMHEwbwYIKwYBBQUHMAuG
Y3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzAvMzEzMDMz
MmUzMTM1MzkyZTM4MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMzMxMzkzNzMy
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQBZ59YMA0GCSqGSIb3DQEBCwUAA4IBAQCjc2MrgOWI+fLnIRBg
ygfQFdudjkkm8btm9nd0rP/8tt7LBlb8KwOlWxPrZUfvp/CLCFR8Qwk1sEtPB25u
Cp3Kx18nOGA13tQNosyBx/l8sfuFQ/BsUYRbKm58elov8YSplEVD7RXelo0JixBK
x1Ru0P8/eVifNHlExmSuypndoDC2bNIdU+Va3qEuKAMeO5tOaTH2VrQTRd1OrMKb
SQ+ebGxGVPr3n3hlQeQBy5YRIgLKrSwi/hF530v14HCumjtFPyYVIM2GQXymrjOI
dVg6tYVxLZYYzPUTNoIKqEF7yHrjN2zHW5DjoPVKRTUZIWH67yHlNxaM14mYBAIS
eMIx
-----END CERTIFICATE-----
Generated at Wed May 13 00:54:18 2026 by rpki-client