Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SIGMA/0/36312e36302e3139322e302f32302d3234203d3e203138343139.roa
File: 36312e36302e3139322e302f32302d3234203d3e203138343139.roa (raw, json)
Hash identifier: tuheNvJMz4zwayXYGvRDblOovwy+NWjn4+g3KFs3iEE=
Subject key identifier: 53:7D:33:68:1D:AE:BA:67:9B:1E:C7:7F:BD:65:AB:44:95:57:5E:4D
Certificate issuer: /CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Certificate serial: 0164ED7776840C0E85A3AA7F3C5B749E2E342C73
Authority key identifier: 61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/36312e36302e3139322e302f32302d3234203d3e203138343139.roa
Signing time: Mon 11 May 2026 16:41:52 +0000
ROA not before: Mon 11 May 2026 16:36:52 +0000
ROA not after: Mon 10 May 2027 16:41:52 +0000
asID: 18419
IP address blocks: 61.60.192.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:64:ed:77:76:84:0c:0e:85:a3:aa:7f:3c:5b:74:9e:2e:34:2c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Validity
Not Before: May 11 16:36:52 2026 GMT
Not After : May 10 16:41:52 2027 GMT
Subject: CN=537D33681DAEBA679B1EC77FBD65AB4495575E4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:2e:9a:2e:43:f3:bd:11:18:38:b2:aa:20:
0f:3d:56:bb:d6:9e:79:9a:ed:31:b0:f1:4b:22:1f:
2c:36:cf:1c:8b:a6:69:5d:1f:15:5d:d5:8a:28:47:
1c:83:ef:04:ea:fe:85:9e:a1:0d:81:af:3d:54:a4:
99:36:8a:16:ad:18:85:9a:bf:49:53:bf:48:8a:ea:
47:09:39:b1:31:8b:01:ff:9b:18:94:89:7f:89:75:
c3:9c:b5:59:f1:9c:7f:56:9c:fa:7c:af:83:c8:f9:
04:98:fc:0f:4b:27:15:5c:6c:42:f5:b5:1e:bd:f9:
56:77:0e:64:08:11:85:9d:9b:63:f3:50:c9:36:24:
78:8e:c2:c0:dc:5f:a1:c6:86:30:93:e5:db:d0:97:
31:45:87:5f:56:34:e9:a9:15:a7:25:ec:bf:f8:11:
84:f4:d7:56:22:55:fa:5b:ea:55:81:d0:36:ac:a9:
23:d5:21:55:18:62:ad:e4:58:9a:f2:51:1b:7d:54:
20:21:1c:da:cf:86:cf:8d:34:5a:7e:ee:5f:f1:42:
74:1d:e7:60:e0:fc:f5:64:dc:b8:7b:6c:c1:7b:d3:
6a:5a:50:ee:df:b2:58:25:67:1c:49:34:19:c6:00:
85:6e:46:a4:f0:d7:e9:82:3b:9b:9d:a2:a4:39:7c:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7D:33:68:1D:AE:BA:67:9B:1E:C7:7F:BD:65:AB:44:95:57:5E:4D
X509v3 Authority Key Identifier:
keyid:61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/36312e36302e3139322e302f32302d3234203d3e203138343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.60.192.0/20
Signature Algorithm: sha256WithRSAEncryption
af:59:5b:28:3e:07:10:5a:b1:4f:38:c9:01:7b:22:79:0a:42:
91:e8:18:7d:18:d9:d5:45:b5:5c:50:76:cb:e2:d6:8c:b4:d9:
7c:b1:51:49:d9:92:7e:30:ae:d6:20:0b:00:67:77:46:f0:d2:
38:af:62:f5:76:3a:88:9f:8c:ae:21:a6:3f:85:20:c8:ad:80:
71:cb:5a:f9:c8:57:3e:bf:c1:a2:9e:b6:47:22:01:08:4b:b5:
28:8f:61:e3:6f:ff:d9:71:7d:05:aa:ec:28:6a:ef:5e:c9:e3:
04:3a:73:11:12:74:ba:b9:44:6a:7e:b6:41:e3:82:62:dd:6e:
12:63:fa:96:1f:95:a0:c2:92:98:72:6a:64:c9:20:de:63:2c:
c4:61:92:81:33:13:be:91:94:11:ea:71:de:b7:05:4f:18:63:
36:84:c7:0d:c6:6c:49:de:e8:35:81:d0:da:31:ac:3b:ae:bd:
c1:f2:ed:68:14:0c:c8:ac:ee:1c:3e:d6:ce:bc:f5:25:e3:55:
1f:11:d0:f7:ee:35:38:25:97:9a:f2:ea:e2:65:66:dc:7d:ef:
46:27:55:2e:b9:33:50:4b:dc:eb:23:c3:8e:e6:10:96:cc:a2:
b8:b9:f3:47:ba:34:58:0d:a6:fd:69:32:3e:2d:3a:fc:92:ad:
c7:09:2c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:33:52 2026 by rpki-client