Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PIINET/0/3130332e3233342e38302e302f32322d3234203d3e203137373130.roa
File: 3130332e3233342e38302e302f32322d3234203d3e203137373130.roa (raw, json)
Hash identifier: uqLuHrrFZUmLWpdnoJCaLRe1oXTuRusUvNya24FB8bg=
Subject key identifier: 34:38:F0:EB:57:1C:C5:B9:53:36:AA:9C:ED:93:DC:7F:D5:BB:BA:3C
Certificate issuer: /CN=857A2684D7DBC89CE784E4DF16F1A1C03D945585
Certificate serial: 56538BB3AB8D41A9E52DC403F0561DFF1F71F7D0
Authority key identifier: 85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PIINET/0/3130332e3233342e38302e302f32322d3234203d3e203137373130.roa
Signing time: Mon 11 May 2026 17:04:34 +0000
ROA not before: Mon 11 May 2026 16:59:34 +0000
ROA not after: Mon 10 May 2027 17:04:34 +0000
asID: 17710
IP address blocks: 103.234.80.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:53:8b:b3:ab:8d:41:a9:e5:2d:c4:03:f0:56:1d:ff:1f:71:f7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857A2684D7DBC89CE784E4DF16F1A1C03D945585
Validity
Not Before: May 11 16:59:34 2026 GMT
Not After : May 10 17:04:34 2027 GMT
Subject: CN=3438F0EB571CC5B95336AA9CED93DC7FD5BBBA3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:8f:a3:8a:dc:79:ef:51:99:2f:3f:3f:30:
ca:25:9b:3c:fc:7a:bb:f4:c4:4b:cf:f7:de:04:d6:
fc:49:04:6d:32:1d:62:cb:9f:4f:94:ad:c6:6b:be:
63:52:41:1c:f2:46:38:5c:42:44:f0:90:4f:39:87:
b4:74:f3:a9:58:95:c0:34:0f:48:07:56:c6:0b:51:
c7:46:b4:18:4e:a8:26:63:77:1b:c8:4c:ad:f4:6f:
66:c4:1c:56:cb:91:fb:f8:18:15:21:a6:48:dc:26:
17:4f:71:8e:cc:c7:f6:42:f7:ca:df:b1:6c:4e:03:
be:9c:8a:03:ec:2f:ac:fd:72:1d:49:32:12:82:5c:
42:33:99:24:99:7c:9f:38:43:9a:fb:52:1c:ec:f2:
a3:97:fa:e0:97:8e:61:f7:02:54:57:a9:9b:8c:b4:
0b:51:aa:32:ed:43:c8:7d:9c:04:e9:8c:cb:0e:9d:
68:89:2a:62:a5:1e:60:3a:51:67:ed:49:2d:47:34:
e1:13:1c:16:0f:4b:29:46:2f:df:75:c3:ea:14:24:
8a:f7:9c:b4:57:07:27:bc:41:a8:b0:50:93:d7:b9:
6c:a4:5e:58:53:ae:43:cd:2a:31:3c:42:28:ae:7d:
dd:39:8c:42:17:63:10:c0:5f:46:06:a8:33:f2:0a:
85:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:38:F0:EB:57:1C:C5:B9:53:36:AA:9C:ED:93:DC:7F:D5:BB:BA:3C
X509v3 Authority Key Identifier:
keyid:85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/3130332e3233342e38302e302f32322d3234203d3e203137373130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.234.80.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:81:e2:06:ca:9e:53:6f:8f:0d:57:9f:52:ee:ba:c5:32:82:
db:65:e4:ed:77:36:dc:d1:76:59:ec:33:24:32:a7:0d:9b:dd:
3c:c3:8d:2c:ac:d1:4e:03:c1:ed:eb:76:52:3c:40:e3:cb:81:
d2:fe:29:41:8f:6c:c8:01:3d:66:5e:14:be:7f:5f:f5:72:98:
50:22:87:8d:53:85:fc:5a:1b:c3:f0:db:2d:3f:ad:a9:ad:d7:
df:cc:51:18:ed:63:e6:47:aa:82:73:11:1c:73:d2:5c:48:2d:
ab:a1:1a:c3:42:0c:d0:9a:e2:2d:8e:1f:a6:78:06:91:91:10:
76:85:b2:cb:5b:b6:4e:72:a3:1b:6e:61:c8:3e:60:18:40:1d:
67:f2:a6:89:c2:67:cb:29:5e:6b:c5:10:c2:e3:38:80:af:2a:
58:12:89:a0:50:bf:33:f9:74:92:c7:d2:f0:47:f0:de:f7:86:
da:38:06:d6:da:43:1e:e7:f1:5f:ad:af:fd:c9:03:bd:1b:08:
22:34:67:2d:7d:37:a9:2b:78:09:a3:72:6b:67:0f:a2:21:5a:
4f:bf:ee:52:fc:93:8e:ae:3a:42:20:eb:7f:2c:68:c6:65:ea:
25:ca:0c:b0:a7:96:02:34:b1:04:f4:ce:25:4c:97:fc:52:ae:
14:54:27:ac
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUVlOLs6uNQanlLcQD8FYd/x9x99AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU3QTI2ODREN0RCQzg5Q0U3ODRFNERGMTZGMUExQzAz
RDk0NTU4NTAeFw0yNjA1MTExNjU5MzRaFw0yNzA1MTAxNzA0MzRaMDMxMTAvBgNV
BAMTKDM0MzhGMEVCNTcxQ0M1Qjk1MzM2QUE5Q0VEOTNEQzdGRDVCQkJBM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37o+jitx571GZLz8/MMolmzz8
erv0xEvP994E1vxJBG0yHWLLn0+UrcZrvmNSQRzyRjhcQkTwkE85h7R086lYlcA0
D0gHVsYLUcdGtBhOqCZjdxvITK30b2bEHFbLkfv4GBUhpkjcJhdPcY7Mx/ZC98rf
sWxOA76cigPsL6z9ch1JMhKCXEIzmSSZfJ84Q5r7Uhzs8qOX+uCXjmH3AlRXqZuM
tAtRqjLtQ8h9nATpjMsOnWiJKmKlHmA6UWftSS1HNOETHBYPSylGL991w+oUJIr3
nLRXBye8QaiwUJPXuWykXlhTrkPNKjE8Qiiufd05jEIXYxDAX0YGqDPyCoW1AgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUNDjw61ccxblTNqqc7ZPcf9W7ujwwHwYDVR0j
BBgwFoAUhXomhNfbyJznhOTfFvGhwD2UVYUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUElJTkVU
LzAvODU3QTI2ODREN0RCQzg5Q0U3ODRFNERGMTZGMUExQzAzRDk0NTU4NS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS84NTdBMjY4NEQ3REJDODlDRTc4NEU0REYxNkYx
QTFDMDNEOTQ1NTg1LmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUElJTkVULzAvMzEzMDMzMmUzMjMz
MzQyZTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM3MzczMTMwLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQCZ+pQMA0GCSqGSIb3DQEBCwUAA4IBAQA7geIGyp5Tb48NV59S7rrFMoLb
ZeTtdzbc0XZZ7DMkMqcNm908w40srNFOA8Ht63ZSPEDjy4HS/ilBj2zIAT1mXhS+
f1/1cphQIoeNU4X8WhvD8NstP62prdffzFEY7WPmR6qCcxEcc9JcSC2roRrDQgzQ
muItjh+meAaRkRB2hbLLW7ZOcqMbbmHIPmAYQB1n8qaJwmfLKV5rxRDC4ziArypY
EomgUL8z+XSSx9LwR/De94baOAbW2kMe5/Ffra/9yQO9GwgiNGctfTepK3gJo3Jr
Zw+iIVpPv+5S/JOOrjpCIOt/LGjGZeolygywp5YCNLEE9M4lTJf8Uq4UVCes
-----END CERTIFICATE-----
Generated at Wed May 13 00:31:16 2026 by rpki-client