Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa
File: 3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa (raw, json)
Hash identifier: Hjj9ZYwdtLiJXABY0e1iJff7SFPXMoErgmjX5YkzSAY=
Subject key identifier: 4E:52:18:2B:4B:64:C7:7D:C6:65:4A:5B:19:91:18:8B:70:D3:0F:06
Certificate issuer: /CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Certificate serial: 6651A887073CDB5178BED7E09E8EA7820ADE7171
Authority key identifier: 61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa
Signing time: Mon 11 May 2026 16:41:44 +0000
ROA not before: Mon 11 May 2026 16:36:44 +0000
ROA not after: Mon 10 May 2027 16:41:44 +0000
asID: 4780
IP address blocks: 103.234.228.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:51:a8:87:07:3c:db:51:78:be:d7:e0:9e:8e:a7:82:0a:de:71:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Validity
Not Before: May 11 16:36:44 2026 GMT
Not After : May 10 16:41:44 2027 GMT
Subject: CN=4E52182B4B64C77DC6654A5B1991188B70D30F06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:ae:32:a4:b7:d4:46:96:6b:14:84:83:cc:
e8:ab:d2:70:83:a7:15:6a:e7:f8:e2:3b:c0:06:15:
20:5a:e3:85:77:00:0b:66:b1:32:e5:d4:db:9b:4e:
2b:3e:65:a3:84:11:a4:76:cf:7d:5c:00:99:ec:ad:
8a:22:66:06:95:6a:fa:de:fc:76:78:17:e1:71:27:
60:6d:db:2a:7e:a8:b1:fd:d4:8f:ea:e9:39:01:e0:
17:8f:30:2b:c8:a8:d4:a6:f4:0a:cc:82:ea:f5:12:
d9:c1:d3:ab:11:25:09:69:30:5c:97:a1:72:54:ef:
93:95:ae:0a:d2:e5:ba:88:78:c0:d0:a6:f4:a6:b3:
fc:64:cf:c0:dc:b6:db:e7:a9:c0:97:7d:be:55:ff:
25:72:bd:06:ff:37:8b:5b:df:4d:27:ed:dd:86:48:
da:7e:98:62:b3:d6:91:09:43:82:ab:90:ca:4e:24:
93:6d:6c:75:a9:d8:b5:51:48:f2:f0:b4:ff:d5:b2:
bd:d0:e6:8f:ae:85:ba:7b:a5:c0:0d:53:30:51:29:
78:e8:90:d5:62:3d:fd:30:15:11:9b:24:2a:a0:ac:
c1:87:5e:d9:64:91:6d:c5:40:5f:b4:a9:a3:3f:14:
6f:18:ca:3c:3a:84:86:7c:1d:2c:c0:60:65:e9:05:
02:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:52:18:2B:4B:64:C7:7D:C6:65:4A:5B:19:91:18:8B:70:D3:0F:06
X509v3 Authority Key Identifier:
keyid:61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.234.228.0/22
Signature Algorithm: sha256WithRSAEncryption
74:1b:1f:1d:46:89:4c:77:e2:39:c4:9e:cd:6c:da:1e:96:8f:
88:47:7b:8f:d9:de:e2:22:41:a5:3c:29:3e:e1:7f:c4:a4:62:
c5:6c:67:81:5e:04:bd:b8:50:ee:c7:54:ca:3b:c2:5c:35:76:
86:5d:16:c9:bf:f3:f5:f9:21:89:ca:63:4f:89:3c:ec:3c:04:
42:45:e4:ad:8b:56:e9:42:57:ad:57:47:70:e0:d6:be:e0:af:
cf:e4:44:da:c8:84:12:2c:eb:9c:bd:a3:94:a5:b6:d2:80:7e:
0f:d1:cb:5b:09:a8:2a:a6:0f:40:d8:3a:f8:75:27:38:8c:43:
5f:bb:0e:5e:c4:ea:6d:96:6e:84:36:44:48:1f:a5:6c:32:44:
7b:57:d0:d3:52:c7:67:d7:6d:13:37:a1:b2:95:3a:eb:9c:34:
93:52:36:e8:54:c5:5c:66:8d:e4:4e:1c:11:2e:58:b0:29:0c:
a3:55:f7:e8:5d:dc:75:7d:41:11:66:67:13:88:68:18:15:ed:
0d:17:8b:80:c2:dd:94:e2:2d:24:bb:e3:a3:89:8e:8b:64:e5:
18:8c:26:63:16:f8:29:68:6d:95:28:7c:45:c2:98:c7:18:5e:
2b:5f:23:f9:2c:f7:e7:c1:86:25:68:94:3a:ff:c5:9d:f8:c7:
7d:4d:93:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:25 2026 by rpki-client