Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SONET/0/33392e312e34382e302f32302d3234203d3e2039393232.roa
File: 33392e312e34382e302f32302d3234203d3e2039393232.roa (raw, json)
Hash identifier: TTEoeJ1Nt73LCduyQM6y6wzx3+jdUSQumP9bhes2+UY=
Subject key identifier: 09:DE:F0:B7:52:4E:0F:B7:DD:21:D5:76:5D:E7:49:64:4C:AA:03:BF
Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Certificate serial: 15278ACA6C481EB70176096B59DCD62C33A711EE
Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/33392e312e34382e302f32302d3234203d3e2039393232.roa
Signing time: Mon 11 May 2026 17:38:13 +0000
ROA not before: Mon 11 May 2026 17:33:13 +0000
ROA not after: Mon 10 May 2027 17:38:13 +0000
asID: 9922
IP address blocks: 39.1.48.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:27:8a:ca:6c:48:1e:b7:01:76:09:6b:59:dc:d6:2c:33:a7:11:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Validity
Not Before: May 11 17:33:13 2026 GMT
Not After : May 10 17:38:13 2027 GMT
Subject: CN=09DEF0B7524E0FB7DD21D5765DE749644CAA03BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:63:d4:4d:3d:36:02:2d:27:7e:31:dc:65:
31:ad:1c:86:60:52:55:ae:c4:71:9b:d1:60:20:45:
5e:97:39:c1:e4:02:ea:46:e3:ba:9f:ab:0b:90:9b:
1a:76:b8:3d:4e:74:c3:39:10:57:99:da:0c:ff:0c:
8b:89:93:69:ee:f6:07:46:32:9c:47:6d:95:4e:17:
e3:63:86:01:da:89:fc:74:50:6e:ab:4c:22:01:2c:
a9:81:3c:43:dc:28:8e:e5:24:71:44:e3:39:ec:f1:
97:c5:3d:1f:1f:f0:36:64:05:cc:0e:7c:c8:95:d1:
d7:71:c4:45:26:71:31:f6:3f:6f:1c:11:d0:cd:9a:
cc:fa:14:1d:95:25:02:45:47:4e:bf:5f:99:a7:bb:
c7:d0:24:56:c2:47:f4:06:9b:24:46:2c:32:e2:71:
58:ba:d5:71:5c:f4:5d:f8:52:ed:03:af:fd:13:79:
37:fd:9a:20:dc:51:5e:76:d3:b9:2c:10:44:e3:2a:
62:85:71:99:89:84:8e:d4:fd:34:37:60:c7:77:d2:
63:f8:bd:0b:41:4e:d6:b4:f5:dc:70:5a:4d:b8:05:
b3:23:a1:be:fd:4e:c5:b2:b8:43:4d:d8:00:4d:73:
06:42:8c:f0:fb:65:a2:bb:b1:9e:be:85:85:20:c4:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DE:F0:B7:52:4E:0F:B7:DD:21:D5:76:5D:E7:49:64:4C:AA:03:BF
X509v3 Authority Key Identifier:
keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/33392e312e34382e302f32302d3234203d3e2039393232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
39.1.48.0/20
Signature Algorithm: sha256WithRSAEncryption
36:d5:37:28:f1:02:1d:24:78:a8:01:7c:14:66:6d:f3:b4:cf:
b1:c3:79:fb:c0:53:e4:eb:30:aa:73:a8:9f:5b:77:2e:28:5c:
a9:a9:df:3a:83:35:4c:d2:3d:c1:f3:80:87:2c:7f:53:7c:33:
26:b6:63:2a:2d:e1:9f:4f:b5:a7:bf:2a:8f:5b:72:f5:c3:81:
a5:0f:a5:8d:fa:35:a8:86:94:24:e4:d3:07:f6:a2:0a:73:ca:
e3:70:ff:98:25:81:79:ff:38:c9:5a:d8:4f:ed:f0:80:0d:89:
1e:ff:90:8e:cc:90:0f:84:1a:c7:82:e8:02:ca:bd:ca:90:60:
5f:f7:6b:62:53:65:5c:fe:fc:7c:76:7e:84:92:da:aa:1c:e5:
2f:ae:c1:d1:6a:eb:a7:23:51:07:9e:e9:a8:c4:51:ca:28:19:
c6:67:ef:fa:3f:32:8e:84:50:7f:a4:2b:da:c4:cc:50:4c:c9:
cf:d9:d4:61:60:5f:16:cf:2c:40:dc:b0:d5:7b:b1:e8:eb:33:
7f:4f:73:19:69:df:f0:1f:4e:ea:bc:b7:d1:8f:9e:df:df:5c:
26:6b:f6:73:ae:43:32:e7:aa:5e:aa:77:da:a2:7d:f1:7d:5c:
9a:87:d8:8e:7d:d9:3e:58:ba:5a:36:31:7e:fe:8c:4b:6d:f6:
87:6a:ac:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:21:02 2026 by rpki-client