Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SIGMA/0/3138302e3231342e3137362e302f32302d3234203d3e2034373830.roa
File: 3138302e3231342e3137362e302f32302d3234203d3e2034373830.roa (raw, json)
Hash identifier: eU7OpfWhT5+1neZH4PL9z1KFvOlEcS3lxri+EEYud58=
Subject key identifier: 63:24:D9:43:E7:27:7A:4C:FB:B0:DC:05:86:DE:8C:B4:EB:C3:8D:3F
Certificate issuer: /CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Certificate serial: 590EBAD1BDB341128E2E53B839791C001D850544
Authority key identifier: 61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3138302e3231342e3137362e302f32302d3234203d3e2034373830.roa
Signing time: Mon 11 May 2026 16:41:48 +0000
ROA not before: Mon 11 May 2026 16:36:48 +0000
ROA not after: Mon 10 May 2027 16:41:48 +0000
asID: 4780
IP address blocks: 180.214.176.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0e:ba:d1:bd:b3:41:12:8e:2e:53:b8:39:79:1c:00:1d:85:05:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Validity
Not Before: May 11 16:36:48 2026 GMT
Not After : May 10 16:41:48 2027 GMT
Subject: CN=6324D943E7277A4CFBB0DC0586DE8CB4EBC38D3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:b2:e5:25:24:80:d3:d2:29:b3:37:4b:97:
2c:1b:9d:b3:f4:8a:70:13:f9:f5:30:25:d2:c3:5c:
a9:bd:aa:62:e3:de:f8:56:0e:11:95:da:37:28:74:
a2:ec:23:fc:89:80:93:ef:24:44:1f:b8:12:91:bf:
0e:b2:08:0d:83:43:74:14:ad:38:f7:05:0a:cb:d6:
bc:23:42:76:fb:db:45:04:a2:e4:b7:f2:d1:27:06:
b7:7a:46:86:01:4d:74:fe:c7:1e:8d:44:d6:f0:36:
67:ab:2a:37:1b:fa:11:34:4f:4b:73:59:59:74:6a:
3b:1f:91:95:22:61:14:38:79:4c:2f:1c:17:de:52:
7e:15:c8:1d:77:68:3a:93:e8:5d:2b:2d:1d:5a:87:
79:cb:5b:3a:1c:03:97:39:bc:ce:c2:3a:4c:ba:89:
8b:7a:d7:4e:54:64:6c:97:e9:d6:97:6a:dd:5f:0b:
54:39:c9:5b:cc:de:f3:98:9d:cc:bf:98:4e:4b:61:
ef:95:ad:fc:3a:7e:4b:cb:c3:d0:37:76:e2:d0:7f:
b5:71:27:75:7e:ae:a9:f9:6d:99:9b:fb:52:c7:b2:
20:ff:f6:d1:79:c1:8d:4d:f9:26:35:ae:96:4c:ca:
31:fe:46:54:6b:29:34:bf:bf:28:f8:e6:d6:c1:c4:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:24:D9:43:E7:27:7A:4C:FB:B0:DC:05:86:DE:8C:B4:EB:C3:8D:3F
X509v3 Authority Key Identifier:
keyid:61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3138302e3231342e3137362e302f32302d3234203d3e2034373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.214.176.0/20
Signature Algorithm: sha256WithRSAEncryption
15:dc:f1:89:4c:ae:ca:07:19:00:1e:fd:7b:69:e2:18:e9:af:
03:75:e7:52:a3:89:f8:c6:e1:22:16:b8:c6:4f:77:ab:dd:cb:
af:95:cd:7c:4c:32:53:1e:11:d9:b1:c4:da:69:a8:0b:cd:df:
a4:0a:c4:1c:3b:0f:c9:95:d7:e6:b2:f2:f8:df:ec:5b:1f:99:
d7:01:21:ae:33:9a:1e:c4:35:32:d1:0c:4f:56:15:7a:79:f0:
7a:91:c5:8b:89:c7:2d:c2:9a:8b:fe:c8:23:86:dc:c6:63:3b:
29:96:27:05:c5:f3:db:62:e0:03:b2:d5:c0:d7:a3:21:21:b7:
93:af:b4:22:16:62:5d:44:0d:e5:da:38:be:9f:45:fe:09:d1:
56:dc:e6:32:88:28:d7:5a:f4:fe:0c:02:bb:5a:58:c2:dd:33:
22:94:2f:07:4a:50:f5:e2:86:5e:2c:0f:5a:5c:1a:67:07:4b:
41:1d:da:64:92:da:bd:2b:e6:56:12:57:e9:99:6f:20:dc:f0:
51:63:81:93:5c:2c:61:25:03:68:0f:38:d3:d2:95:3b:33:3b:
a0:52:d3:9f:5e:c5:6a:67:7c:c6:00:44:58:b6:93:ca:d7:98:
d0:a3:47:cc:7a:c5:fb:a6:54:d9:61:f5:09:23:03:b1:1d:9b:
1b:bf:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:08 2026 by rpki-client