Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SONET/0/33392e312e34342e302f32342d3234203d3e2039393232.roa
File: 33392e312e34342e302f32342d3234203d3e2039393232.roa (raw, json)
Hash identifier: dh03y3MeArVsb+oESUBRNDxrsrn5jbUmgM4ZXBS0tXU=
Subject key identifier: 05:B7:CC:A4:98:6B:DF:07:DE:A3:C0:98:03:0D:41:98:73:E9:84:13
Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Certificate serial: 741EE11FF3DD139503D20F59F997289FD47FE58F
Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/33392e312e34342e302f32342d3234203d3e2039393232.roa
Signing time: Mon 11 May 2026 17:36:58 +0000
ROA not before: Mon 11 May 2026 17:31:58 +0000
ROA not after: Mon 10 May 2027 17:36:58 +0000
asID: 9922
IP address blocks: 39.1.44.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:1e:e1:1f:f3:dd:13:95:03:d2:0f:59:f9:97:28:9f:d4:7f:e5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Validity
Not Before: May 11 17:31:58 2026 GMT
Not After : May 10 17:36:58 2027 GMT
Subject: CN=05B7CCA4986BDF07DEA3C098030D419873E98413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:91:ff:f1:ae:49:b2:ef:b4:c7:61:4e:cf:53:
34:49:5f:2a:9f:88:eb:87:56:09:8f:89:71:1a:bc:
65:05:79:64:9d:b8:af:33:fa:0e:6a:cd:3d:db:dd:
19:4f:75:2a:fa:30:5a:2d:8f:65:22:75:3e:98:9e:
56:90:53:6d:a3:81:e7:02:ce:37:0c:b7:b4:14:bf:
f1:94:71:2e:28:a5:eb:1f:e1:76:9a:af:3b:b6:4a:
30:0c:21:5d:f1:2c:66:5e:3a:69:0b:5b:14:a8:41:
a0:91:1c:8c:7d:e0:75:51:19:a8:7d:d0:43:a7:e9:
b9:91:5e:d6:cc:85:79:86:72:79:a1:41:f5:7d:9d:
5b:e7:0f:8a:93:98:63:18:ec:30:9f:5d:c0:76:3d:
bc:b6:94:0c:41:9d:a0:1b:ac:ff:8c:80:3d:36:fa:
07:97:6e:7a:2b:92:17:25:ce:cd:fe:0b:1a:db:2c:
ad:e3:fd:0a:1f:6c:45:18:b5:29:3d:3c:21:4e:42:
63:2e:7b:d7:f4:0e:c9:8c:b7:ed:68:4f:fc:4b:89:
e4:a3:a9:9b:eb:36:6b:78:7e:da:ac:19:15:b9:d3:
7a:58:38:d6:0e:42:c9:07:9c:41:0f:6a:14:75:e6:
d7:de:ab:1f:1d:9c:cc:ea:f2:f2:a5:3e:9c:a5:0d:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B7:CC:A4:98:6B:DF:07:DE:A3:C0:98:03:0D:41:98:73:E9:84:13
X509v3 Authority Key Identifier:
keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/33392e312e34342e302f32342d3234203d3e2039393232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
39.1.44.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f0:91:a0:6e:d2:bb:82:0f:6e:56:c2:e2:12:5a:a9:8e:d4:
fe:67:de:b3:65:5f:c3:b7:1d:8d:f2:da:94:f7:81:e2:d7:e9:
9c:3b:61:56:06:c7:2a:4f:9b:50:79:e2:2c:4e:01:fa:a3:19:
46:18:11:58:10:57:43:e3:8e:71:d2:9f:93:e3:61:c4:39:be:
98:1d:1b:8e:5f:62:c0:0b:53:98:0c:99:f3:55:01:f6:5d:0e:
c2:0a:47:73:bd:be:d7:54:91:05:25:c9:50:66:9a:93:0a:88:
8b:bb:d3:b2:51:0d:b8:7f:5f:55:e0:31:26:1d:e3:9d:6b:c4:
74:96:84:97:db:32:30:5f:d2:b3:26:1c:6e:9d:0c:0e:1f:6f:
5f:11:c2:79:b9:b0:e7:cc:e1:ae:d3:17:60:63:bc:aa:ef:07:
25:75:5b:1e:bd:3f:0e:7b:03:5b:3b:b0:6d:f6:c9:06:04:fb:
74:68:90:91:40:41:84:b9:fe:85:4f:f2:e0:cd:94:22:f0:71:
57:da:77:94:68:74:40:47:36:f5:8a:8a:22:7a:c7:fe:d6:be:
60:55:6d:94:f7:76:41:0c:e2:33:59:93:2b:69:fa:50:fc:2b:
78:fc:b4:2d:bb:13:c4:25:32:4d:10:28:45:39:cf:39:25:7b:
42:ff:9a:fa
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgIUdB7hH/PdE5UD0g9Z+Zcon9R/5Y8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y2RDMzQzlCMzlDRkM5NTBBMkQzREJDNzgxMzFFMUFB
RjhDQzhFRjAeFw0yNjA1MTExNzMxNThaFw0yNzA1MTAxNzM2NThaMDMxMTAvBgNV
BAMTKDA1QjdDQ0E0OTg2QkRGMDdERUEzQzA5ODAzMEQ0MTk4NzNFOTg0MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXkf/xrkmy77THYU7PUzRJXyqf
iOuHVgmPiXEavGUFeWSduK8z+g5qzT3b3RlPdSr6MFotj2UidT6YnlaQU22jgecC
zjcMt7QUv/GUcS4opesf4Xaarzu2SjAMIV3xLGZeOmkLWxSoQaCRHIx94HVRGah9
0EOn6bmRXtbMhXmGcnmhQfV9nVvnD4qTmGMY7DCfXcB2Pby2lAxBnaAbrP+MgD02
+geXbnorkhclzs3+CxrbLK3j/QofbEUYtSk9PCFOQmMue9f0DsmMt+1oT/xLieSj
qZvrNmt4ftqsGRW503pYONYOQskHnEEPahR15tfeqx8dnMzq8vKlPpylDWY3AgMB
AAGjggHZMIIB1TAdBgNVHQ4EFgQUBbfMpJhr3wfeo8CYAw1BmHPphBMwHwYDVR0j
BBgwFoAUP20zybOc/JUKLT28eBMeGq+MyO8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU09ORVQv
MC8zRjZEMzNDOUIzOUNGQzk1MEEyRDNEQkM3ODEzMUUxQUFGOENDOEVGLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzNGNkQzM0M5QjM5Q0ZDOTUwQTJEM0RCQzc4MTMx
RTFBQUY4Q0M4RUYuY2VyMHMGCCsGAQUFBwELBGcwZTBjBggrBgEFBQcwC4ZXcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TT05FVC8wLzMzMzkyZTMxMmUzNDM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzOTMyMzIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAnASww
DQYJKoZIhvcNAQELBQADggEBAGXwkaBu0ruCD25WwuISWqmO1P5n3rNlX8O3HY3y
2pT3geLX6Zw7YVYGxypPm1B54ixOAfqjGUYYEVgQV0PjjnHSn5PjYcQ5vpgdG45f
YsALU5gMmfNVAfZdDsIKR3O9vtdUkQUlyVBmmpMKiIu707JRDbh/X1XgMSYd451r
xHSWhJfbMjBf0rMmHG6dDA4fb18Rwnm5sOfM4a7TF2BjvKrvByV1Wx69Pw57A1s7
sG32yQYE+3RokJFAQYS5/oVP8uDNlCLwcVfad5RodEBHNvWKiiJ6x/7WvmBVbZT3
dkEM4jNZkytp+lD8K3j8tC27E8QlMk0QKEU5zzkle0L/mvo=
-----END CERTIFICATE-----
Generated at Wed May 13 01:14:38 2026 by rpki-client