Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SONET/0/33392e312e39362e302f32302d3234203d3e203138343139.roa
File: 33392e312e39362e302f32302d3234203d3e203138343139.roa (raw, json)
Hash identifier: W4A9R2ruP8BpTxaCGm9udnAE3yQmyw/+pOzjhpIfz0Y=
Subject key identifier: 6C:DD:82:7E:31:EF:34:C1:01:9F:6B:4B:34:AC:B3:CE:83:98:51:AC
Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Certificate serial: 2C317F14AB7F98A6461F10C22E7804DD8EAF2350
Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/33392e312e39362e302f32302d3234203d3e203138343139.roa
Signing time: Mon 11 May 2026 17:38:14 +0000
ROA not before: Mon 11 May 2026 17:33:14 +0000
ROA not after: Mon 10 May 2027 17:38:14 +0000
asID: 18419
IP address blocks: 39.1.96.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:31:7f:14:ab:7f:98:a6:46:1f:10:c2:2e:78:04:dd:8e:af:23:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Validity
Not Before: May 11 17:33:14 2026 GMT
Not After : May 10 17:38:14 2027 GMT
Subject: CN=6CDD827E31EF34C1019F6B4B34ACB3CE839851AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:77:6c:f2:5f:91:bc:41:41:f8:a2:1e:13:
b7:42:8e:25:6e:aa:92:36:56:66:05:e8:53:34:60:
1f:cc:99:4a:01:98:6d:3d:d8:36:40:8d:e2:6f:d3:
14:ea:37:47:f4:ad:f3:1b:fe:b6:50:58:7e:f8:46:
00:60:c4:75:c7:99:4d:56:d6:81:67:0c:6a:0d:71:
00:5c:e0:1c:d7:ab:e4:7b:9f:7f:76:50:fb:1d:a5:
1e:ac:f6:3e:69:07:bc:24:79:47:bf:87:2f:51:cf:
c7:45:ec:e6:48:b3:e8:ee:da:4c:95:e5:66:1a:bd:
3e:02:e4:5f:a7:f3:9f:ba:d0:43:42:75:92:02:95:
d7:58:5a:d8:7a:76:60:c0:fa:7c:b7:48:d6:a9:6f:
d2:cf:f3:58:a6:44:35:b6:e8:5b:65:d1:01:3c:7c:
ba:59:7f:68:47:e4:f3:56:af:e0:28:ad:67:a7:25:
04:f3:26:b4:1f:3c:08:9e:33:92:d8:19:32:b8:9b:
2e:55:db:b7:07:8a:7e:59:e4:01:71:d0:30:d1:41:
a0:8c:e5:c7:46:ed:6a:1b:30:35:9a:47:0d:d2:51:
ea:53:37:2d:98:7b:ba:06:ef:a3:01:34:ee:0e:ef:
0a:7f:6e:ea:26:fa:7a:d6:93:ad:52:4f:56:2b:28:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DD:82:7E:31:EF:34:C1:01:9F:6B:4B:34:AC:B3:CE:83:98:51:AC
X509v3 Authority Key Identifier:
keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/33392e312e39362e302f32302d3234203d3e203138343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
39.1.96.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:ee:e3:5d:c6:31:34:89:28:27:1b:48:c2:57:8a:af:c8:3a:
a4:7d:c0:65:d5:aa:e6:0f:76:26:6c:64:b1:01:0c:82:36:2b:
73:19:85:6d:e6:d7:3a:c8:35:a0:92:38:e4:40:b7:dc:40:5f:
58:01:4d:96:8e:5b:cb:06:c5:50:98:e5:86:7d:dd:df:15:7f:
ba:ec:5a:6a:25:fa:66:b6:3d:81:d1:bf:79:b8:ad:01:2b:12:
75:c7:b3:f7:f2:f2:26:59:42:b6:f2:31:41:91:87:1e:95:f8:
30:fd:3a:02:60:33:5e:2b:68:ba:86:93:b0:56:fb:32:09:cf:
b5:65:3e:8e:26:a4:8f:a6:12:3e:eb:dd:96:d1:0c:a2:d7:0d:
ce:59:7a:6f:09:65:ff:21:e7:32:ec:3c:18:c0:ba:58:07:4d:
c5:94:9b:fd:72:85:55:12:4c:0d:98:fc:7c:fc:f7:d3:85:07:
a3:0b:00:98:09:f9:ba:34:f0:7c:c7:68:72:d1:a3:a2:7d:ec:
4a:10:b3:8e:30:47:58:f8:ed:33:58:13:07:23:e6:87:25:4c:
f5:55:01:d3:73:1f:ff:8a:a5:a3:7d:a2:cd:f8:4f:ab:3e:24:
a5:6d:1a:3c:68:dd:1a:9f:1b:8e:d5:d6:c0:58:f7:cf:6a:2d:
6f:aa:b7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:53 2026 by rpki-client