Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/ONEDEGREE/0/3130332e3133312e3134382e302f32342d3234203d3e2038303735.roa
File: 3130332e3133312e3134382e302f32342d3234203d3e2038303735.roa (raw, json)
Hash identifier: ngU9yGwnv4zDeMAuwTOcnfYW07w9n6079RMDCBEl224=
Subject key identifier: FE:CE:7B:74:09:AD:AE:C5:C2:81:ED:F7:3F:B8:EE:60:4B:C2:60:A4
Certificate issuer: /CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8
Certificate serial: 03DBBD10AD7D290476BB50EA58268DCEE7D6772E
Authority key identifier: F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/3130332e3133312e3134382e302f32342d3234203d3e2038303735.roa
Signing time: Mon 11 May 2026 17:31:20 +0000
ROA not before: Mon 11 May 2026 17:26:20 +0000
ROA not after: Mon 10 May 2027 17:31:20 +0000
asID: 8075
IP address blocks: 103.131.148.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:db:bd:10:ad:7d:29:04:76:bb:50:ea:58:26:8d:ce:e7:d6:77:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8
Validity
Not Before: May 11 17:26:20 2026 GMT
Not After : May 10 17:31:20 2027 GMT
Subject: CN=FECE7B7409ADAEC5C281EDF73FB8EE604BC260A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:88:f3:d8:4f:95:0b:d2:5b:49:29:b9:15:
d2:d3:ba:3c:fd:5d:73:5a:67:28:4b:f0:6e:6d:6b:
55:9e:0c:f8:4c:7a:3f:cb:97:39:36:f1:81:26:d7:
e8:d9:7e:b9:20:5f:ce:df:25:46:45:d7:ff:34:94:
c3:68:f9:d6:b5:55:25:68:03:6a:2e:16:e2:20:84:
fb:a1:d8:35:ba:b6:ad:3f:8f:ed:39:fb:87:b5:44:
54:f3:38:6a:d1:5b:c5:9c:7b:da:bf:38:29:f3:0c:
d3:e8:33:e0:18:ac:01:a1:10:cd:0c:55:8e:94:64:
22:8b:0a:04:9c:0b:33:35:8b:e2:ff:d8:b1:a1:6f:
b7:d2:fe:4e:b1:ae:dd:5e:24:c8:29:d7:f2:bb:57:
a1:d9:c3:55:72:34:4a:af:cd:9a:f1:75:4e:17:75:
8b:e4:d0:dc:9f:7b:dd:76:cd:65:45:2d:b9:c2:b6:
96:bb:e2:d1:9a:4d:80:24:29:69:f5:d8:03:51:6d:
28:04:7e:77:7a:b1:64:b2:29:7d:67:15:1e:95:9a:
52:43:dc:98:55:7a:a2:d2:59:fa:ee:e2:e9:b2:88:
b9:00:65:47:68:7b:56:40:75:2e:b6:b2:03:bd:f7:
d7:1a:f8:f0:84:51:72:86:1a:f9:07:61:2b:24:44:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CE:7B:74:09:AD:AE:C5:C2:81:ED:F7:3F:B8:EE:60:4B:C2:60:A4
X509v3 Authority Key Identifier:
keyid:F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/3130332e3133312e3134382e302f32342d3234203d3e2038303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.131.148.0/24
Signature Algorithm: sha256WithRSAEncryption
50:9c:69:7c:e8:cd:0b:31:cd:af:ca:59:f4:20:91:5d:ef:aa:
c4:f2:34:3f:f6:72:f6:a6:e6:2e:76:4a:cc:60:3b:76:b0:3c:
98:c4:fd:2e:81:1a:df:a2:a9:fd:c6:7b:60:ec:b6:c6:b4:3b:
19:a0:62:d0:ab:50:77:14:7f:74:ba:89:4a:e7:79:57:3b:a0:
7e:b1:21:f3:f9:99:3b:f1:0d:a3:eb:9d:a5:97:b1:c7:a0:60:
e8:df:27:7d:c3:a3:3c:4d:22:94:91:65:7d:41:5c:d1:82:94:
46:00:52:c2:ba:1d:01:c9:32:6b:4b:1b:99:9c:2f:4d:39:e1:
5e:80:73:14:6d:aa:72:4d:13:63:c2:c8:60:b2:ff:0c:54:1c:
6e:b9:a2:0c:20:a9:36:e2:c7:84:9a:16:24:49:c2:79:5f:d5:
15:0f:f4:01:f8:3a:87:51:d2:4c:2a:4a:c4:1b:48:44:d0:58:
e2:e9:1c:81:d6:f5:e2:5f:15:83:00:95:53:36:2e:39:fd:8d:
9a:00:1c:55:f6:94:81:26:64:3b:83:7a:f2:8f:08:1b:b6:51:
16:3a:b4:a3:d7:f6:c8:53:24:fb:74:84:fa:87:17:9a:22:df:
36:a8:b9:52:c0:a6:5a:a8:de:0b:4c:17:56:27:d2:7a:e3:25:
69:36:1b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:40 2026 by rpki-client