Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SYSNET/0/3231302e36332e302e302f31392d3234203d3e2034373833.roa
File: 3231302e36332e302e302f31392d3234203d3e2034373833.roa (raw, json)
Hash identifier: qlDALeqbVpWwwXPI8oaegagYfsk3fuVfubVcHj5iuSo=
Subject key identifier: 05:48:76:25:B4:EE:24:E2:FD:47:A8:A0:47:87:B7:41:71:B6:D9:69
Certificate issuer: /CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Certificate serial: 7BFCA0EB7D67885055ACBD5634B6FAE7048B129C
Authority key identifier: ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36332e302e302f31392d3234203d3e2034373833.roa
Signing time: Mon 11 May 2026 17:40:19 +0000
ROA not before: Mon 11 May 2026 17:35:19 +0000
ROA not after: Mon 10 May 2027 17:40:19 +0000
asID: 4783
IP address blocks: 210.63.0.0/19 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:fc:a0:eb:7d:67:88:50:55:ac:bd:56:34:b6:fa:e7:04:8b:12:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Validity
Not Before: May 11 17:35:19 2026 GMT
Not After : May 10 17:40:19 2027 GMT
Subject: CN=05487625B4EE24E2FD47A8A04787B74171B6D969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:8f:fc:e9:e5:1e:8a:cc:9f:b0:f6:0d:21:
41:60:68:b4:21:ff:2e:25:56:13:e5:d6:b4:99:61:
07:32:65:e6:21:b7:87:c1:48:9f:dc:03:b2:29:46:
15:ab:81:2d:93:a7:a2:58:d0:92:98:aa:55:33:79:
15:22:63:ce:8f:5c:a2:d1:4b:34:d9:dd:02:34:f8:
ba:f8:2a:c6:63:4b:77:ce:f2:e1:f3:92:8c:c1:f7:
a6:f2:43:81:6d:21:cb:c1:7b:53:93:d6:a2:20:84:
0f:0a:21:69:c6:97:1d:e4:39:78:10:b8:2f:a1:b7:
e8:5e:54:bd:53:6c:39:63:8e:95:58:18:ec:fb:db:
1e:a8:07:7d:e8:55:75:04:1f:6f:68:8e:4b:5a:96:
a2:39:53:27:96:9d:ec:ef:ce:49:9d:36:cc:66:aa:
6a:b5:82:70:55:0a:c6:a2:60:4b:04:a2:5a:78:4c:
ba:4b:f8:ec:52:bd:11:49:bc:09:6b:f5:5e:ed:93:
67:f4:c8:a3:f3:7a:be:cd:98:c8:82:e7:af:d2:e2:
6f:07:0a:96:19:d5:06:91:9a:76:c4:ad:38:4c:c4:
0d:39:1c:76:3e:76:13:0e:8f:9e:4f:76:50:95:0a:
b1:f1:b1:56:f0:c1:23:82:20:06:ab:1a:8d:b7:8d:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:48:76:25:B4:EE:24:E2:FD:47:A8:A0:47:87:B7:41:71:B6:D9:69
X509v3 Authority Key Identifier:
keyid:ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36332e302e302f31392d3234203d3e2034373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.63.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:54:51:a4:3a:8b:e4:3a:09:50:e7:44:9d:c1:31:22:ce:ee:
b2:2c:90:b7:74:bc:ca:12:9f:60:7b:60:b6:61:88:b0:ee:b8:
cc:f9:d9:6f:c3:52:51:6c:84:9a:b8:ba:b4:5b:5e:91:d6:dc:
2e:6a:5f:7d:ac:4b:1c:2f:f6:d4:93:12:e7:14:98:af:7a:5c:
b3:24:f1:a4:7d:6e:39:30:0c:79:6b:31:12:4f:57:c2:80:31:
5b:26:42:79:17:b5:81:96:3b:1a:ea:2b:c4:a0:3e:28:18:05:
8f:fa:33:26:3c:80:eb:e1:81:cf:ec:22:da:60:5d:8e:b5:63:
ba:89:b2:9e:da:94:14:74:f6:1c:ed:80:0c:98:7c:ba:12:c0:
52:ce:33:22:ee:9b:b3:af:d1:fb:80:eb:16:58:39:10:d2:4b:
af:11:56:87:7f:19:5f:a1:b4:25:32:5b:c5:db:2e:f0:f1:df:
cf:63:4d:69:28:2c:e8:1d:85:d2:d1:9c:39:ab:18:a9:42:0f:
92:a9:1a:d2:cb:08:7b:ef:bd:48:68:02:a6:bb:2c:17:3b:e1:
b8:bd:7f:32:dc:2b:a6:64:8d:92:98:91:1f:7d:e3:05:5f:df:
91:e6:c4:b8:cd:ce:fd:b0:b1:0e:e5:5a:e7:ea:0f:ff:4d:20:
2d:ed:ba:82
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUe/yg631niFBVrL1WNLb65wSLEpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURFNzM4OUI2RDlBMzM1RDZCNkZERDQyODZEQjc5MDEx
Rjg3NTU0QjAeFw0yNjA1MTExNzM1MTlaFw0yNzA1MTAxNzQwMTlaMDMxMTAvBgNV
BAMTKDA1NDg3NjI1QjRFRTI0RTJGRDQ3QThBMDQ3ODdCNzQxNzFCNkQ5NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDakI/86eUeisyfsPYNIUFgaLQh
/y4lVhPl1rSZYQcyZeYht4fBSJ/cA7IpRhWrgS2Tp6JY0JKYqlUzeRUiY86PXKLR
SzTZ3QI0+Lr4KsZjS3fO8uHzkozB96byQ4FtIcvBe1OT1qIghA8KIWnGlx3kOXgQ
uC+ht+heVL1TbDljjpVYGOz72x6oB33oVXUEH29ojktalqI5UyeWnezvzkmdNsxm
qmq1gnBVCsaiYEsEolp4TLpL+OxSvRFJvAlr9V7tk2f0yKPzer7NmMiC56/S4m8H
CpYZ1QaRmnbErThMxA05HHY+dhMOj55PdlCVCrHxsVbwwSOCIAarGo23jWF7AgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUBUh2JbTuJOL9R6igR4e3QXG22WkwHwYDVR0j
BBgwFoAU7ec4m22aM11rb91Chtt5AR+HVUswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1lTTkVU
LzAvRURFNzM4OUI2RDlBMzM1RDZCNkZERDQyODZEQjc5MDExRjg3NTU0Qi5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS9FREU3Mzg5QjZEOUEzMzVENkI2RkRENDI4NkRC
NzkwMTFGODc1NTRCLmNlcjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1lTTkVULzAvMzIzMTMwMmUzNjMz
MmUzMDJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDM0MzczODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF
0j8AMA0GCSqGSIb3DQEBCwUAA4IBAQCdVFGkOovkOglQ50SdwTEizu6yLJC3dLzK
Ep9ge2C2YYiw7rjM+dlvw1JRbISauLq0W16R1twual99rEscL/bUkxLnFJivelyz
JPGkfW45MAx5azEST1fCgDFbJkJ5F7WBljsa6ivEoD4oGAWP+jMmPIDr4YHP7CLa
YF2OtWO6ibKe2pQUdPYc7YAMmHy6EsBSzjMi7puzr9H7gOsWWDkQ0kuvEVaHfxlf
obQlMlvF2y7w8d/PY01pKCzoHYXS0Zw5qxipQg+SqRrSywh7771IaAKmuywXO+G4
vX8y3CumZI2SmJEffeMFX9+R5sS4zc79sLEO5Vrn6g//TSAt7bqC
-----END CERTIFICATE-----
Generated at Tue May 12 23:24:44 2026 by rpki-client