Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e34382e302f32302d3234203d3e203338383433.roa
File: 3232332e32372e34382e302f32302d3234203d3e203338383433.roa (raw, json)
Hash identifier: OjXRhIQZtcmmwxd4YAKN7fIr9Elq5J6xvbWEnPrm5Yg=
Subject key identifier: 80:97:9A:DF:B1:0C:57:63:A9:C0:82:C9:C1:02:BF:3F:E1:86:30:E6
Certificate issuer: /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Certificate serial: 1B38C34100F6729428472C6DE4AD3F8B28A9684C
Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e34382e302f32302d3234203d3e203338383433.roa
Signing time: Mon 11 May 2026 17:11:20 +0000
ROA not before: Mon 11 May 2026 17:06:20 +0000
ROA not after: Mon 10 May 2027 17:11:20 +0000
asID: 38843
IP address blocks: 223.27.48.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:38:c3:41:00:f6:72:94:28:47:2c:6d:e4:ad:3f:8b:28:a9:68:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Validity
Not Before: May 11 17:06:20 2026 GMT
Not After : May 10 17:11:20 2027 GMT
Subject: CN=80979ADFB10C5763A9C082C9C102BF3FE18630E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:a1:ee:8b:5a:dc:d2:ce:da:af:d9:7c:a6:
f8:bf:9b:c1:b3:10:ed:14:de:9a:36:b7:29:f1:80:
af:74:8c:a9:b2:97:6c:96:75:ed:5f:38:a2:e9:79:
f0:13:d9:0a:cc:3f:a5:a1:2b:e9:2c:32:7b:e2:7d:
24:4c:ff:08:ce:e4:e4:5f:35:00:ae:7b:db:6f:6d:
0d:26:26:4a:02:a0:cb:e2:96:1d:01:21:f6:db:fb:
58:02:cb:2d:d8:9b:39:62:d2:dd:c4:f0:77:76:5e:
5b:f4:fd:57:af:b3:ea:a6:ee:d6:d7:20:68:ca:2b:
13:3f:8b:d9:cb:e0:22:1d:5f:a1:72:a4:c2:f0:26:
af:47:25:91:3d:1c:e7:98:f4:e0:3a:60:72:f0:25:
be:8c:d0:de:5e:6d:12:7c:75:9e:d9:b8:56:69:ad:
39:98:19:a7:39:47:42:ab:15:f9:c5:96:e1:6e:7a:
a7:02:fb:da:19:e9:4d:54:21:3a:aa:0c:df:95:b2:
be:90:eb:5d:40:9e:06:78:22:e7:17:f2:a4:07:db:
9e:7b:58:0c:2e:6c:c7:d6:73:83:0e:87:db:91:d9:
2b:25:ea:e1:2d:b2:2e:08:bf:2d:47:c1:47:4f:69:
14:4a:f0:b0:aa:9d:ee:37:8e:59:32:c1:bf:59:ec:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:97:9A:DF:B1:0C:57:63:A9:C0:82:C9:C1:02:BF:3F:E1:86:30:E6
X509v3 Authority Key Identifier:
keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e34382e302f32302d3234203d3e203338383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.27.48.0/20
Signature Algorithm: sha256WithRSAEncryption
64:fd:c2:a9:d2:a7:3b:72:df:4f:d9:e1:a6:a7:57:62:51:d3:
f8:91:ee:39:d9:1f:86:c1:fd:7c:22:46:9c:ed:cb:b8:7e:d2:
cd:38:3b:dc:f7:c0:4a:c0:8b:69:13:04:1b:92:4a:1f:44:61:
5a:d1:f3:23:a0:c9:c0:a7:aa:d9:e6:16:1a:ad:85:4a:a6:bd:
4e:a9:2e:2d:c5:53:f3:64:c2:ff:0b:3c:61:fe:20:aa:31:22:
0e:96:8f:57:c7:42:43:eb:94:d3:ca:e8:6b:13:68:1e:40:0e:
c0:50:b5:55:c0:2e:8e:1b:6a:34:76:86:33:9a:be:65:aa:07:
80:a9:fa:bb:81:6c:36:8f:27:75:72:60:11:d4:67:cc:8a:ca:
a8:64:14:39:21:d9:63:16:e5:3c:89:7c:8d:c4:e7:c6:f9:55:
85:85:cf:bc:f0:26:43:80:c4:4d:96:77:10:61:29:78:d8:7b:
5e:31:af:38:07:83:74:87:2f:7e:0f:69:59:b4:8d:03:c1:3d:
91:2b:0a:13:a8:3e:1f:51:ea:8c:0c:cb:c0:cd:85:8d:59:77:
49:42:c2:9d:ed:d7:38:96:95:1c:af:60:2e:a1:1e:e1:9c:06:
2a:5b:7f:a3:d8:cf:84:30:67:4d:0b:64:0c:b9:2a:78:0c:a8:
d1:78:16:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:17 2026 by rpki-client