Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/OPENFOR/0/3130332e3134392e36342e302f32332d3234203d3e20313331363734.roa
File: 3130332e3134392e36342e302f32332d3234203d3e20313331363734.roa (raw, json)
Hash identifier: GSRooEfHneMScmMay9/suUawwfISd9M2Zp/oSqWxd5c=
Subject key identifier: 30:13:56:E9:A2:0B:A0:61:17:46:AD:8D:E2:65:4A:63:DB:4B:43:62
Certificate issuer: /CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162
Certificate serial: 4FD03D12E08E63084C9453EB218AEAF537919A94
Authority key identifier: 42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/3130332e3134392e36342e302f32332d3234203d3e20313331363734.roa
Signing time: Mon 11 May 2026 17:09:48 +0000
ROA not before: Mon 11 May 2026 17:04:48 +0000
ROA not after: Mon 10 May 2027 17:09:48 +0000
asID: 131674
IP address blocks: 103.149.64.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:d0:3d:12:e0:8e:63:08:4c:94:53:eb:21:8a:ea:f5:37:91:9a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162
Validity
Not Before: May 11 17:04:48 2026 GMT
Not After : May 10 17:09:48 2027 GMT
Subject: CN=301356E9A20BA0611746AD8DE2654A63DB4B4362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:01:a6:19:c6:a0:7e:a6:a8:ad:96:46:fd:e8:
15:78:24:2f:15:3f:7e:18:99:c5:7f:b4:af:5e:d8:
8c:7a:c8:59:b3:2a:46:66:a0:e7:43:0b:2f:38:e1:
08:df:c4:03:a6:80:79:a4:fe:1d:20:f7:39:56:4c:
0b:11:b9:22:03:06:e5:b3:80:8a:3c:40:b2:dd:d7:
13:df:19:1b:45:a1:4d:a2:77:49:2a:b7:6e:a0:e4:
08:45:74:72:f3:4b:5c:c1:f4:5f:3f:0f:64:fe:3d:
02:e3:cd:a5:a2:2a:53:16:34:3a:02:42:9e:ca:e0:
c1:3c:cb:89:f9:be:f7:ac:4d:c2:ed:79:f5:e9:b3:
97:60:03:61:2b:94:e6:4e:9b:b7:0d:32:81:ad:f3:
bf:0e:7d:fb:ec:60:7a:88:ef:8d:cd:2e:fa:7a:b5:
5a:e7:1c:3c:37:2f:e3:f7:c4:d0:63:d8:eb:c7:90:
b2:2d:d9:4d:37:eb:cc:af:f3:e6:85:6a:21:36:d5:
44:f1:b2:30:cc:d2:5a:58:f1:0f:d5:01:a1:7c:7d:
d2:1e:bd:5a:5c:64:70:61:63:f5:49:40:cb:19:db:
8c:9a:73:53:f9:b2:d4:fd:9f:fe:22:c5:c9:8b:1d:
34:2a:f7:3c:9a:01:ad:f7:ae:b7:ad:bc:fc:de:67:
56:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:13:56:E9:A2:0B:A0:61:17:46:AD:8D:E2:65:4A:63:DB:4B:43:62
X509v3 Authority Key Identifier:
keyid:42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/3130332e3134392e36342e302f32332d3234203d3e20313331363734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.149.64.0/23
Signature Algorithm: sha256WithRSAEncryption
57:33:08:d7:32:01:02:46:85:7e:7b:52:17:30:8f:6d:25:f8:
40:33:e1:c6:16:59:fb:68:c1:ac:33:30:ad:df:78:34:4c:13:
71:53:5c:7a:cf:40:62:cf:8f:c6:7a:fa:f5:76:39:01:62:c9:
4f:4b:a8:e9:76:bf:ea:99:df:0f:a4:26:61:23:0a:c2:bf:f4:
da:22:80:33:51:90:2b:b3:fa:0f:27:18:a6:7b:4f:4f:f4:ab:
8c:72:c5:de:85:76:f9:d3:04:db:f4:16:ef:88:00:ce:78:c6:
c9:5e:e4:70:c3:dd:4a:a8:66:26:65:5f:58:37:92:10:ab:15:
02:17:f6:2d:58:c7:91:2b:6c:c5:a5:bf:ab:d6:d8:11:13:ad:
0f:50:37:52:ed:e6:4a:94:cb:77:80:cf:e0:79:33:26:19:fc:
72:2d:0f:79:22:f2:12:68:03:cb:5b:d0:10:a9:34:72:7c:9e:
d3:4c:1b:0a:bd:fa:42:65:b1:02:18:19:84:85:55:07:c5:8f:
4a:bd:57:c3:a3:58:ab:cb:51:b4:23:7b:10:f7:4a:da:35:d6:
c7:e8:12:01:55:0b:58:48:0d:f0:8d:99:cb:bd:7d:03:25:7f:
24:c5:fa:d1:c2:4e:20:51:60:c8:53:38:29:eb:7b:ba:fd:9e:
ca:c6:a1:c5
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUT9A9EuCOYwhMlFPrIYrq9TeRmpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJDN0Y3OEU5RkRBMDBCOUNBM0UyRDFEREY1RTA4REVB
ODYyMDE2MjAeFw0yNjA1MTExNzA0NDhaFw0yNzA1MTAxNzA5NDhaMDMxMTAvBgNV
BAMTKDMwMTM1NkU5QTIwQkEwNjExNzQ2QUQ4REUyNjU0QTYzREI0QjQzNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLAaYZxqB+pqitlkb96BV4JC8V
P34YmcV/tK9e2Ix6yFmzKkZmoOdDCy844QjfxAOmgHmk/h0g9zlWTAsRuSIDBuWz
gIo8QLLd1xPfGRtFoU2id0kqt26g5AhFdHLzS1zB9F8/D2T+PQLjzaWiKlMWNDoC
Qp7K4ME8y4n5vvesTcLtefXps5dgA2ErlOZOm7cNMoGt878OffvsYHqI743NLvp6
tVrnHDw3L+P3xNBj2OvHkLIt2U0368yv8+aFaiE21UTxsjDM0lpY8Q/VAaF8fdIe
vVpcZHBhY/VJQMsZ24yac1P5stT9n/4ixcmLHTQq9zyaAa33rretvPzeZ1blAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUMBNW6aILoGEXRq2N4mVKY9tLQ2IwHwYDVR0j
BBgwFoAUQsf3jp/aALnKPi0d314I3qhiAWIwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT1BFTkZP
Ui8wLzQyQzdGNzhFOUZEQTAwQjlDQTNFMkQxRERGNUUwOERFQTg2MjAxNjIuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvNDJDN0Y3OEU5RkRBMDBCOUNBM0UyRDFEREY1
RTA4REVBODYyMDE2Mi5jZXIwfwYIKwYBBQUHAQsEczBxMG8GCCsGAQUFBzALhmNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL09QRU5GT1IvMC8zMTMwMzMyZTMx
MzQzOTJlMzYzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzMTM2MzczNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeVQDANBgkqhkiG9w0BAQsFAAOCAQEAVzMI1zIBAkaFfntSFzCP
bSX4QDPhxhZZ+2jBrDMwrd94NEwTcVNces9AYs+Pxnr69XY5AWLJT0uo6Xa/6pnf
D6QmYSMKwr/02iKAM1GQK7P6DycYpntPT/SrjHLF3oV2+dME2/QW74gAznjGyV7k
cMPdSqhmJmVfWDeSEKsVAhf2LVjHkStsxaW/q9bYEROtD1A3Uu3mSpTLd4DP4Hkz
Jhn8ci0PeSLyEmgDy1vQEKk0cnye00wbCr36QmWxAhgZhIVVB8WPSr1Xw6NYq8tR
tCN7EPdK2jXWx+gSAVULWEgN8I2Zy719AyV/JMX60cJOIFFgyFM4Ket7uv2eysah
xQ==
-----END CERTIFICATE-----
Generated at Wed May 13 00:20:31 2026 by rpki-client