Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SONET/0/36312e35362e3132382e302f31392d3234203d3e203138313832.roa
File: 36312e35362e3132382e302f31392d3234203d3e203138313832.roa (raw, json)
Hash identifier: Wz4YbIAlDY3Rql9HeEh2BYj6+M1ftVPyXgPvQ2mi8EE=
Subject key identifier: 47:1F:A9:16:B8:AE:EB:DA:B4:4F:D2:D4:C1:80:FD:4C:6C:FF:F7:30
Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Certificate serial: 4B3AD8A178B8617E224DEF0C459D2257ACDF8D2D
Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/36312e35362e3132382e302f31392d3234203d3e203138313832.roa
Signing time: Mon 11 May 2026 17:01:24 +0000
ROA not before: Mon 11 May 2026 16:56:24 +0000
ROA not after: Mon 10 May 2027 17:01:24 +0000
asID: 18182
IP address blocks: 61.56.128.0/19 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:3a:d8:a1:78:b8:61:7e:22:4d:ef:0c:45:9d:22:57:ac:df:8d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Validity
Not Before: May 11 16:56:24 2026 GMT
Not After : May 10 17:01:24 2027 GMT
Subject: CN=471FA916B8AEEBDAB44FD2D4C180FD4C6CFFF730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:97:73:52:7d:91:c7:9d:3c:98:f1:c4:e5:
15:d8:78:0c:f2:87:c0:ba:c3:68:d7:60:db:b5:7a:
c5:4b:87:68:68:cc:91:96:a3:2f:3e:84:5f:36:de:
63:ea:1e:29:ae:bc:be:21:77:1a:d3:7c:a5:f3:a3:
ae:fd:d6:3e:18:42:4a:99:13:11:34:02:76:82:84:
b0:1c:35:6c:2d:a1:83:c4:bd:4a:08:9a:96:67:1d:
d7:65:d0:9b:4b:08:6d:5f:f5:fa:6e:cd:99:97:f2:
2c:37:63:74:86:f0:7f:23:2e:ca:d3:20:dd:b6:66:
c4:ba:67:1d:b8:50:0a:54:72:43:8b:c7:9c:97:e8:
bb:80:94:2a:0f:9b:eb:db:ce:62:b0:1c:cd:9e:22:
6d:f0:35:75:0b:58:2d:89:31:69:2f:c2:d3:2f:f8:
f1:3d:82:af:2d:0c:63:64:45:79:9f:87:20:86:6d:
9c:d4:db:28:db:89:80:e5:a1:23:7e:94:88:94:99:
af:74:09:ea:1e:7e:42:0c:12:87:45:35:e1:44:9d:
70:8c:55:9b:ae:31:32:ec:01:96:8e:1e:5c:92:5d:
02:18:6e:e4:7f:7b:d1:57:99:79:bb:e3:05:cd:dc:
ed:ec:c9:84:34:4a:f9:19:93:ab:af:df:53:8d:7e:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1F:A9:16:B8:AE:EB:DA:B4:4F:D2:D4:C1:80:FD:4C:6C:FF:F7:30
X509v3 Authority Key Identifier:
keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/36312e35362e3132382e302f31392d3234203d3e203138313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.56.128.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:86:2e:3b:0a:a6:12:e9:46:6b:20:f8:6a:20:1d:c9:34:e1:
10:9b:15:ce:21:35:db:c5:11:aa:8d:50:e8:c8:86:87:0c:3d:
2f:2e:69:ef:39:96:1c:57:fc:fe:3f:ab:b3:98:3f:76:e0:25:
68:33:ba:92:a9:01:88:bf:84:00:81:59:34:06:b5:f2:e4:36:
5b:f7:19:c1:43:e1:c3:42:aa:8d:98:04:11:2f:dc:41:93:6e:
6d:31:7d:f1:aa:39:c4:db:e8:ba:a1:78:89:de:cd:9b:14:30:
4d:9b:4b:b4:99:a6:32:a8:0a:3c:d0:9e:af:81:28:d6:14:65:
83:d8:b4:45:1c:8f:2f:68:aa:98:b3:8e:5f:8d:e9:4c:5a:82:
4a:7a:1b:3a:73:36:c8:ed:ba:2d:fc:ae:23:48:3f:97:1e:f8:
55:af:4f:2f:73:af:01:8d:6f:4b:d3:87:1e:91:19:01:38:c5:
bd:92:73:08:b7:ae:86:4d:74:a3:d1:60:b6:76:c9:68:b5:41:
e0:97:39:3f:46:15:2b:95:5d:9a:cb:6d:42:db:0b:8b:0c:83:
a4:0b:bf:5a:62:bb:35:58:c2:02:3c:09:85:ad:de:44:c2:83:
84:1d:3f:14:48:86:60:5b:43:5a:ec:74:72:f1:6f:70:a3:22:
d1:6b:46:1a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUSzrYoXi4YX4iTe8MRZ0iV6zfjS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y2RDMzQzlCMzlDRkM5NTBBMkQzREJDNzgxMzFFMUFB
RjhDQzhFRjAeFw0yNjA1MTExNjU2MjRaFw0yNzA1MTAxNzAxMjRaMDMxMTAvBgNV
BAMTKDQ3MUZBOTE2QjhBRUVCREFCNDRGRDJENEMxODBGRDRDNkNGRkY3MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrwpdzUn2Rx508mPHE5RXYeAzy
h8C6w2jXYNu1esVLh2hozJGWoy8+hF823mPqHimuvL4hdxrTfKXzo6791j4YQkqZ
ExE0AnaChLAcNWwtoYPEvUoImpZnHddl0JtLCG1f9fpuzZmX8iw3Y3SG8H8jLsrT
IN22ZsS6Zx24UApUckOLx5yX6LuAlCoPm+vbzmKwHM2eIm3wNXULWC2JMWkvwtMv
+PE9gq8tDGNkRXmfhyCGbZzU2yjbiYDloSN+lIiUma90CeoefkIMEodFNeFEnXCM
VZuuMTLsAZaOHlySXQIYbuR/e9FXmXm74wXN3O3syYQ0SvkZk6uv31ONfkj9AgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQURx+pFriu69q0T9LUwYD9TGz/9zAwHwYDVR0j
BBgwFoAUP20zybOc/JUKLT28eBMeGq+MyO8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU09ORVQv
MC8zRjZEMzNDOUIzOUNGQzk1MEEyRDNEQkM3ODEzMUUxQUFGOENDOEVGLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzNGNkQzM0M5QjM5Q0ZDOTUwQTJEM0RCQzc4MTMx
RTFBQUY4Q0M4RUYuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TT05FVC8wLzM2MzEyZTM1MzYyZTMx
MzIzODJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzgzMTM4MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAU9OIAwDQYJKoZIhvcNAQELBQADggEBAE2GLjsKphLpRmsg+GogHck04RCbFc4h
NdvFEaqNUOjIhocMPS8uae85lhxX/P4/q7OYP3bgJWgzupKpAYi/hACBWTQGtfLk
Nlv3GcFD4cNCqo2YBBEv3EGTbm0xffGqOcTb6LqheInezZsUME2bS7SZpjKoCjzQ
nq+BKNYUZYPYtEUcjy9oqpizjl+N6Uxagkp6GzpzNsjtui38riNIP5ce+FWvTy9z
rwGNb0vThx6RGQE4xb2Scwi3roZNdKPRYLZ2yWi1QeCXOT9GFSuVXZrLbULbC4sM
g6QLv1piuzVYwgI8CYWt3kTCg4QdPxRIhmBbQ1rsdHLxb3CjItFrRho=
-----END CERTIFICATE-----
Generated at Wed May 13 02:20:22 2026 by rpki-client