Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3234362e3231382e302f32332d3234203d3e20313334383233.roa
File: 3130332e3234362e3231382e302f32332d3234203d3e20313334383233.roa (raw, json)
Hash identifier: OzJYK1jOl/dVvskD0N+jBQ6FAS7v+8gWPkXtAjUfvn0=
Subject key identifier: 61:85:40:9D:56:36:B2:81:F4:83:66:49:27:BF:68:A0:E4:27:93:32
Certificate issuer: /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial: 555D1F248A09702DE3F772A71A048FD9F9167B07
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3234362e3231382e302f32332d3234203d3e20313334383233.roa
Signing time: Mon 11 May 2026 17:36:35 +0000
ROA not before: Mon 11 May 2026 17:31:35 +0000
ROA not after: Mon 10 May 2027 17:36:35 +0000
asID: 134823
IP address blocks: 103.246.218.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:5d:1f:24:8a:09:70:2d:e3:f7:72:a7:1a:04:8f:d9:f9:16:7b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Validity
Not Before: May 11 17:31:35 2026 GMT
Not After : May 10 17:36:35 2027 GMT
Subject: CN=6185409D5636B281F483664927BF68A0E4279332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7a:5d:55:32:57:bd:bb:7c:cf:4f:ba:57:84:
93:d0:05:d1:92:81:7a:b7:e6:7f:3d:85:a6:0e:4d:
81:66:b9:87:bc:0e:45:37:4f:f4:ab:05:c4:f4:a8:
94:94:f3:84:a4:87:aa:65:c9:b6:63:70:85:eb:a7:
e5:56:03:b9:b7:2d:a1:e3:63:9c:1f:59:c5:55:0b:
82:56:a1:0f:dc:88:6d:4d:b4:01:27:8e:74:5a:da:
06:66:1d:65:f7:ec:63:2a:3e:ac:22:67:b9:07:e9:
fd:1a:bc:4d:c3:47:69:cf:c5:37:54:6c:aa:e6:70:
28:12:65:03:8f:ca:27:51:d4:e2:de:d9:49:a1:db:
5c:85:56:35:fd:37:53:f1:6d:51:ed:91:74:a8:9f:
40:a7:d3:57:22:71:6a:b6:c0:b6:09:1e:28:67:56:
3e:c4:11:11:0c:9f:65:d8:66:45:77:39:8b:00:1e:
c0:3f:f1:d1:4e:ca:a7:f3:72:d1:6f:55:fa:17:cc:
ff:4b:88:32:92:fc:44:c3:96:30:81:85:47:4b:09:
d6:ec:b2:06:e1:98:1d:c0:0e:1f:45:e3:74:33:77:
d4:09:68:36:da:d8:04:51:a8:50:82:33:7a:d2:6a:
65:1f:eb:d8:4d:bc:9e:29:79:ac:6a:a8:60:21:e1:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:85:40:9D:56:36:B2:81:F4:83:66:49:27:BF:68:A0:E4:27:93:32
X509v3 Authority Key Identifier:
keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3234362e3231382e302f32332d3234203d3e20313334383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.246.218.0/23
Signature Algorithm: sha256WithRSAEncryption
37:e1:7a:e7:f6:12:af:37:ea:81:ec:74:f3:60:70:d7:fb:6e:
9f:64:17:e9:c5:db:66:7a:6c:7d:3f:f0:1f:59:df:58:dc:a8:
af:23:0d:56:30:bb:ba:03:39:ab:9f:3b:c7:1a:e2:7f:18:b9:
9d:39:78:2e:0e:9a:4b:0b:a0:cf:aa:db:5e:2a:5e:98:de:ff:
4d:ee:da:d1:5c:1e:56:11:af:1a:47:ae:57:24:d5:a9:5b:e6:
6c:9b:de:f7:6e:72:7b:46:0b:79:81:91:67:0a:dc:60:04:b1:
1c:ef:95:55:2c:6c:7f:3c:5e:f2:73:c2:30:b1:e6:22:8f:b2:
8a:03:22:15:79:bf:4c:ca:ba:8d:fc:03:60:8b:c9:ce:da:b4:
41:30:f3:0a:29:52:ad:be:32:4b:6d:90:95:41:3c:e5:5a:b3:
e2:f3:a5:36:75:46:d9:40:2a:08:f1:71:b9:32:41:3b:7e:0f:
a6:53:8d:ff:12:b6:1e:57:ae:fd:45:cc:45:9d:a5:f1:3f:14:
7e:d2:69:51:e0:64:0e:b6:ed:d2:79:35:fb:ce:4a:7d:90:dd:
48:37:53:7a:7f:10:2f:7c:ee:8b:06:fc:b0:c1:60:cf:09:cd:
b8:af:a9:4b:35:8c:40:fe:d7:31:58:ae:cf:ef:a1:aa:1f:03:
18:ac:1e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:52 2026 by rpki-client