Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SPETW/0/3130332e3131372e342e302f32322d3234203d3e20313331363334.roa
File: 3130332e3131372e342e302f32322d3234203d3e20313331363334.roa (raw, json)
Hash identifier: jhLjBnMm1fhbsjRhkAAaIjaX4J41EYic1BnBWo6KESI=
Subject key identifier: 5C:CE:1E:02:7E:C6:A0:8C:F7:70:06:16:E4:54:AB:EB:26:55:99:F7
Certificate issuer: /CN=871300497118DBA75FA9B46DE2D7D39663DBDE52
Certificate serial: 19AD8D82E9D141813824835E1DEA18B087CA5C0D
Authority key identifier: 87:13:00:49:71:18:DB:A7:5F:A9:B4:6D:E2:D7:D3:96:63:DB:DE:52
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SPETW/0/3130332e3131372e342e302f32322d3234203d3e20313331363334.roa
Signing time: Mon 11 May 2026 17:09:21 +0000
ROA not before: Mon 11 May 2026 17:04:21 +0000
ROA not after: Mon 10 May 2027 17:09:21 +0000
asID: 131634
IP address blocks: 103.117.4.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ad:8d:82:e9:d1:41:81:38:24:83:5e:1d:ea:18:b0:87:ca:5c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871300497118DBA75FA9B46DE2D7D39663DBDE52
Validity
Not Before: May 11 17:04:21 2026 GMT
Not After : May 10 17:09:21 2027 GMT
Subject: CN=5CCE1E027EC6A08CF7700616E454ABEB265599F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:da:83:47:00:ca:34:c8:31:13:7b:4c:22:
03:ad:23:5a:e1:86:bc:33:2b:ad:c8:f4:e2:a9:8a:
09:07:f7:d9:9b:eb:89:c5:8f:51:c4:35:76:62:5c:
05:22:84:ba:86:2d:77:80:c8:4c:47:a8:b4:aa:1f:
14:c1:8a:25:b2:5e:d2:bc:3d:bd:80:49:f6:28:81:
60:a8:8e:2c:64:c4:d3:ab:bb:f2:de:f1:45:d8:7b:
33:62:87:b8:22:2d:c0:d0:ea:9d:49:35:f1:20:79:
15:4e:a0:ab:92:2a:2f:2c:77:10:7a:76:5e:9e:81:
fa:4f:6b:e9:71:73:f9:07:b2:02:c2:c8:03:d7:8d:
cf:ec:97:b2:fe:26:b0:42:c2:22:a3:7b:9d:3b:20:
08:41:c0:c4:de:58:9d:08:06:f5:b8:52:32:48:34:
a2:b0:57:9c:5a:98:e2:e5:b7:50:a4:13:4d:a2:95:
ab:ea:06:e3:84:75:45:1d:c9:ca:8b:3f:0d:c4:d9:
4a:6b:c5:56:7e:24:99:e0:e6:90:a1:3b:c7:3d:68:
42:74:4e:04:0b:e5:b8:23:1b:01:bd:02:cc:b4:8c:
cc:30:52:7a:b1:2c:2c:46:3a:47:ba:35:23:97:ff:
3e:79:79:75:45:ef:99:64:5d:42:b7:9c:4b:fc:70:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CE:1E:02:7E:C6:A0:8C:F7:70:06:16:E4:54:AB:EB:26:55:99:F7
X509v3 Authority Key Identifier:
keyid:87:13:00:49:71:18:DB:A7:5F:A9:B4:6D:E2:D7:D3:96:63:DB:DE:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SPETW/0/3130332e3131372e342e302f32322d3234203d3e20313331363334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.117.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:33:80:87:80:df:8f:44:c6:cc:bf:79:5b:cf:89:46:91:be:
77:d9:ae:b2:ae:c8:5f:bf:3e:a9:55:b7:37:bc:a1:dd:e5:8f:
fa:87:b6:8b:64:34:ae:78:2d:ea:7e:3c:f7:e7:6b:aa:22:ef:
ac:f0:ab:b2:06:ff:28:72:e2:94:4c:73:25:98:cb:49:62:16:
29:4c:e3:f0:a2:cc:67:42:ed:39:54:c0:13:61:25:d3:14:30:
0a:2e:89:aa:06:8c:73:50:2b:21:ec:e7:9a:7c:b8:e8:4d:e6:
60:68:75:06:fc:fc:d6:55:c4:d8:83:ac:de:40:0f:b2:ea:ef:
e3:6e:43:eb:f6:f3:6e:e3:54:ec:eb:28:27:d4:2b:51:ee:7b:
4b:df:75:c4:11:15:a3:72:42:b8:85:a6:f7:0a:77:de:21:b4:
d0:28:7e:20:bc:7e:1d:e2:cc:cf:04:2a:48:5f:cb:2e:a1:1c:
ca:67:e1:70:1a:5e:d4:45:81:7c:b0:7b:63:09:04:b7:bc:16:
28:c6:c9:34:d1:43:ab:2b:66:65:1a:b5:db:60:6a:f4:28:ff:
26:40:ee:84:ef:a5:df:a6:5e:94:d6:8e:aa:b7:18:d3:c1:b4:
c9:3c:bb:2b:96:15:9c:b8:b6:c7:07:34:31:ff:cc:59:b3:20:
56:b2:30:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:54:15 2026 by rpki-client