Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SONET/0/33392e312e36342e302f32302d3234203d3e2039393232.roa
File: 33392e312e36342e302f32302d3234203d3e2039393232.roa (raw, json)
Hash identifier: juMnZBysyILQxgKPuDDStLHZSQ2rmujkQS4MrnwwJ/s=
Subject key identifier: 5F:21:9E:5A:25:28:8D:C9:F7:34:33:46:29:EC:CA:D3:B9:BB:0E:79
Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Certificate serial: 685D8142CC59C064E3C398889457BEDE8697EAC4
Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/33392e312e36342e302f32302d3234203d3e2039393232.roa
Signing time: Mon 11 May 2026 17:38:14 +0000
ROA not before: Mon 11 May 2026 17:33:14 +0000
ROA not after: Mon 10 May 2027 17:38:14 +0000
asID: 9922
IP address blocks: 39.1.64.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:5d:81:42:cc:59:c0:64:e3:c3:98:88:94:57:be:de:86:97:ea:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Validity
Not Before: May 11 17:33:14 2026 GMT
Not After : May 10 17:38:14 2027 GMT
Subject: CN=5F219E5A25288DC9F734334629ECCAD3B9BB0E79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:d9:cf:24:2a:2c:f4:a9:0c:4c:2c:49:1a:
99:13:9c:f2:f5:62:aa:92:df:a9:36:67:05:c7:12:
9c:69:48:a0:30:4a:92:65:cc:e5:4c:04:bb:de:63:
7f:d5:25:98:44:5b:94:b5:9b:8d:60:d3:ce:a4:23:
45:1a:ad:6f:39:1e:e7:6b:20:d9:d5:b9:5e:b2:82:
6a:f3:0b:0e:0e:55:96:69:8d:27:3d:67:fa:8a:89:
3d:2f:e4:36:6c:f9:52:ad:10:3f:c2:58:a2:c7:29:
46:41:7d:ab:79:db:9d:0f:d2:e9:61:f4:aa:da:42:
68:8c:85:2b:b1:f6:c2:d1:2f:68:d8:bb:e2:ff:90:
cd:56:12:c3:96:e9:da:0e:74:2b:59:40:86:c0:6b:
36:b8:79:a6:6d:ef:ef:9d:71:a3:6c:5d:09:f1:03:
0b:f0:44:67:ce:97:37:93:a7:b9:dc:28:b0:fd:7e:
26:14:0b:19:d4:d1:39:f0:fd:6e:c8:03:e1:ba:ee:
3b:cc:4d:5a:63:09:fc:f6:7d:69:fc:eb:09:5c:da:
0d:8b:6f:b7:9a:2c:19:22:39:6e:39:16:24:20:b2:
81:0d:1d:3a:10:bf:0f:3c:10:ee:77:32:12:14:eb:
79:3f:17:e6:da:ef:15:82:e2:76:38:88:69:32:41:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:21:9E:5A:25:28:8D:C9:F7:34:33:46:29:EC:CA:D3:B9:BB:0E:79
X509v3 Authority Key Identifier:
keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/33392e312e36342e302f32302d3234203d3e2039393232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
39.1.64.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:c9:4d:b0:ec:c1:da:7c:e8:a9:b8:b4:08:29:03:5c:c9:3e:
bf:f6:e3:77:4b:ee:cf:8d:2a:b0:ef:08:84:19:ee:04:a5:86:
ad:35:62:ae:36:8e:ba:04:ce:e3:bb:4b:d5:47:60:66:67:1a:
4f:73:0d:aa:61:d4:21:c3:0c:7d:fa:d9:28:45:39:5d:29:c0:
af:42:d1:a1:37:cf:2c:11:74:23:a3:90:51:de:b3:e8:a5:1b:
0b:c2:57:3b:b2:95:31:15:93:c5:40:5c:c7:79:95:f4:58:54:
eb:0a:c8:e1:3c:e5:c9:b1:de:f5:fc:e6:d7:5e:5e:01:ae:c5:
a2:50:c9:d4:07:4f:e9:ee:ce:12:d1:e5:08:e9:3d:4a:3d:b1:
4d:bc:3b:b7:1f:cd:93:8c:8d:a9:7f:88:eb:46:62:e1:46:60:
ea:51:28:77:ac:d1:00:37:0d:42:34:72:e8:a0:af:84:ea:05:
09:1f:e6:66:a2:31:01:7f:f0:17:eb:8f:47:e0:f0:f0:00:4b:
7c:bd:07:12:90:fa:32:9e:22:d5:76:0e:70:c8:a1:9a:05:44:
d8:e4:e9:5e:2d:28:bb:46:39:ce:af:92:74:40:dc:6d:ef:ca:
38:a5:fc:05:22:d0:5b:81:13:cd:a2:2c:d9:fb:9d:f1:c8:51:
52:03:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:56:34 2026 by rpki-client