Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SECUNET/0/3130332e3139382e3135322e302f32332d3234203d3e2037343833.roa
File: 3130332e3139382e3135322e302f32332d3234203d3e2037343833.roa (raw, json)
Hash identifier: uG7CGWdeS5uhveRrD2X7qwANEb3T2edbHmVXjF6fXlg=
Subject key identifier: F7:A9:F2:54:F0:64:5F:38:87:4E:D7:EA:D5:78:BC:49:B9:DA:47:D6
Certificate issuer: /CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
Certificate serial: 4949238BEB6DAD442E3764269A309991E5EB0683
Authority key identifier: 4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SECUNET/0/3130332e3139382e3135322e302f32332d3234203d3e2037343833.roa
Signing time: Mon 11 May 2026 17:31:39 +0000
ROA not before: Mon 11 May 2026 17:26:39 +0000
ROA not after: Mon 10 May 2027 17:31:39 +0000
asID: 7483
IP address blocks: 103.198.152.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:49:23:8b:eb:6d:ad:44:2e:37:64:26:9a:30:99:91:e5:eb:06:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
Validity
Not Before: May 11 17:26:39 2026 GMT
Not After : May 10 17:31:39 2027 GMT
Subject: CN=F7A9F254F0645F38874ED7EAD578BC49B9DA47D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:85:44:e9:5c:56:ac:2c:36:23:47:17:8b:ca:
e2:1e:c7:d0:71:7d:80:2b:02:55:cf:bf:a4:1c:a5:
2a:13:fe:35:ab:3f:ee:c6:4a:63:87:32:dd:b9:17:
45:7b:ca:91:d9:45:ea:25:f8:2c:46:e1:d4:34:11:
46:36:7e:3f:b5:8d:37:d5:70:3b:dc:47:81:7a:30:
93:a2:32:7d:5d:c0:fd:e6:38:ac:fc:eb:80:db:3e:
24:0e:13:64:55:08:e8:0b:96:34:58:16:88:de:4c:
4b:75:0b:2d:bf:e8:8f:a6:8b:58:c9:9d:8c:b8:01:
45:46:b6:4f:c5:c5:27:bc:38:2d:c8:1f:29:f2:ee:
b2:62:a0:6f:08:21:30:ed:2f:55:07:b7:ea:df:f2:
cd:12:a0:9d:27:d6:a3:45:4d:48:3e:d8:9e:58:96:
47:8d:2e:0e:c1:f9:eb:f5:ed:20:c7:08:98:78:d7:
b9:b9:f3:e6:6c:96:dd:d7:e0:bb:15:df:3c:88:28:
c8:b5:53:03:d8:42:c4:21:93:d1:f1:ec:a6:6c:03:
f1:ac:16:fc:62:6e:ce:b4:2c:44:82:49:0b:37:c5:
51:7f:80:c6:c7:c8:4c:1e:cf:4b:51:1d:df:34:7b:
84:08:91:34:e0:55:e7:a3:7c:a3:6f:c9:83:18:f4:
c7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A9:F2:54:F0:64:5F:38:87:4E:D7:EA:D5:78:BC:49:B9:DA:47:D6
X509v3 Authority Key Identifier:
keyid:4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/3130332e3139382e3135322e302f32332d3234203d3e2037343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.198.152.0/23
Signature Algorithm: sha256WithRSAEncryption
03:01:24:3d:be:90:1c:e4:3f:1a:a2:e1:b4:82:b6:34:12:83:
f1:55:82:0d:f9:4f:41:17:db:56:54:49:1e:dc:7d:05:76:71:
db:cc:b4:c8:31:52:ff:03:e0:af:89:dc:b6:b3:d8:6a:c8:87:
54:5b:f7:f4:45:36:65:56:0e:f9:07:ce:34:2a:fa:d7:a7:86:
60:f1:cf:84:36:dc:4a:f1:40:1f:1a:48:72:d0:9b:8b:7e:ee:
60:39:d7:16:91:a6:54:5c:3a:eb:0d:29:9b:ba:c5:7e:fc:31:
38:86:bf:0d:07:56:68:06:f2:db:98:92:a1:87:84:e9:f8:0d:
90:6e:f7:b0:13:ca:0f:ad:3a:43:a5:0d:c5:d6:66:4e:98:f8:
e6:ee:fd:13:11:0c:1c:9e:65:ee:a7:8a:4d:6a:7b:a5:01:1c:
9a:39:df:ab:c0:22:51:3c:ea:3b:84:cb:6a:41:ea:48:13:96:
99:17:b0:2b:92:2d:d0:ee:6a:b9:7b:2c:9d:00:79:2b:27:77:
02:b9:ef:98:00:6d:04:e9:cd:3a:fd:f1:c6:20:0d:14:7e:40:
0a:d7:d8:31:37:76:d6:8a:a7:05:ef:f7:af:0d:69:0b:34:0f:
e7:21:3e:d9:51:e5:44:03:96:f7:06:2e:68:3b:21:5a:f7:eb:
49:ec:be:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:26:06 2026 by rpki-client