Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SIGMA/0/3132342e3130392e3131322e302f32302d3234203d3e203138343139.roa
File: 3132342e3130392e3131322e302f32302d3234203d3e203138343139.roa (raw, json)
Hash identifier: 3vg2ywFZjW79UyDByYfdvjw6Q/gKX9Y0d3v3lvpiGgc=
Subject key identifier: 05:13:18:6D:06:CE:B2:AE:24:21:39:78:27:BC:88:99:9C:D9:4C:FA
Certificate issuer: /CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Certificate serial: 78CBFABD3919A3F351948F882D370A64956DF4FF
Authority key identifier: 61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3132342e3130392e3131322e302f32302d3234203d3e203138343139.roa
Signing time: Mon 11 May 2026 16:41:45 +0000
ROA not before: Mon 11 May 2026 16:36:45 +0000
ROA not after: Mon 10 May 2027 16:41:45 +0000
asID: 18419
IP address blocks: 124.109.112.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:cb:fa:bd:39:19:a3:f3:51:94:8f:88:2d:37:0a:64:95:6d:f4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Validity
Not Before: May 11 16:36:45 2026 GMT
Not After : May 10 16:41:45 2027 GMT
Subject: CN=0513186D06CEB2AE2421397827BC88999CD94CFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:ee:a7:86:9d:30:31:b2:8b:98:dc:7b:25:
c6:2c:23:01:1d:cd:9e:41:3a:a5:59:7f:e3:be:db:
59:7e:5b:b3:1d:c3:8f:1c:77:a2:58:60:07:c7:41:
78:6a:03:22:65:fb:a1:7e:d5:7a:d9:6e:03:aa:d5:
f4:93:3e:d4:40:05:ba:41:0f:a4:77:de:65:c0:6f:
32:89:52:cb:57:2b:e0:0f:e2:60:1b:08:80:4f:02:
b2:2e:b6:34:9c:24:2d:eb:17:cd:cb:a7:52:27:a0:
d6:39:70:7c:47:fa:ce:36:d9:c0:f6:82:1b:3d:84:
d0:99:19:1e:02:38:9b:41:3a:f7:fc:14:80:dc:14:
55:f8:d8:fd:94:1b:91:92:2d:e8:a0:45:8e:ae:1e:
d1:e6:32:50:da:a2:3d:e4:02:e8:78:9d:bd:83:ed:
81:5d:a9:70:d4:f7:de:de:dc:a5:51:07:2c:2b:21:
b2:14:78:0e:ba:63:a5:e7:4d:72:cc:9f:ff:c7:4a:
8e:72:ed:db:e7:eb:bc:a4:d2:02:74:e8:28:05:da:
66:fa:48:0e:b0:10:42:52:2b:95:47:57:d3:aa:d8:
99:b2:27:92:8f:3f:f8:c3:f9:4b:a9:49:6d:84:78:
b9:d4:1d:dd:6e:08:af:7c:33:fc:a1:b7:7c:71:f2:
36:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:13:18:6D:06:CE:B2:AE:24:21:39:78:27:BC:88:99:9C:D9:4C:FA
X509v3 Authority Key Identifier:
keyid:61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3132342e3130392e3131322e302f32302d3234203d3e203138343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.109.112.0/20
Signature Algorithm: sha256WithRSAEncryption
95:4d:eb:3d:a9:18:07:70:6a:71:8d:a1:92:1a:95:b8:8c:57:
b8:d3:32:08:df:89:c2:07:ee:27:0e:12:92:cc:af:1a:6e:7d:
28:0e:cd:b9:d1:96:23:62:1a:b4:cb:3b:3e:ec:ba:6b:b2:f3:
ae:0e:3f:25:fa:41:be:af:eb:45:9b:42:f6:d2:4c:07:51:de:
46:b5:46:f6:95:80:f3:29:48:6d:83:c1:22:de:29:46:c4:b0:
02:d3:ef:64:ff:6a:3c:ee:9d:36:df:c7:54:7c:48:25:8a:95:
75:f1:a4:a5:92:28:8a:28:e8:09:09:3e:76:11:3c:3a:9b:91:
96:89:37:10:4c:e0:a8:7c:d6:59:e8:f0:4f:ee:7a:f9:45:0d:
2c:36:66:30:38:2f:e3:1b:e2:4f:d6:39:96:50:ab:41:bf:eb:
95:aa:41:8d:68:ea:9a:36:17:e1:69:5b:ba:83:48:92:db:3d:
47:22:95:fb:37:28:c9:a6:4e:0f:13:a9:05:c0:a6:ba:7a:8e:
e1:3f:59:95:a3:b9:4d:c8:3d:7b:53:59:6e:88:ef:be:f1:2b:
94:8e:4c:40:0e:9b:96:5f:87:87:af:b7:f2:00:63:76:a7:4b:
d9:d2:15:0a:ab:4c:dc:6a:3a:ef:53:70:ad:08:f1:75:df:08:
81:13:41:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:41:03 2026 by rpki-client