Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SYSNET/0/3231302e36332e33322e302f31392d3234203d3e2034373833.roa
File: 3231302e36332e33322e302f31392d3234203d3e2034373833.roa (raw, json)
Hash identifier: IOBRQRi5x1l7RkWh7H2TjOm1bcz8SF4MkljnqrXFDYE=
Subject key identifier: 02:F2:8C:F8:01:B0:BA:98:BD:2E:77:81:44:7B:C1:BA:BE:FE:5E:83
Certificate issuer: /CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Certificate serial: 437E73AF67CB9785E43485072FBCB55E3614F2E5
Authority key identifier: ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36332e33322e302f31392d3234203d3e2034373833.roa
Signing time: Mon 11 May 2026 17:40:19 +0000
ROA not before: Mon 11 May 2026 17:35:19 +0000
ROA not after: Mon 10 May 2027 17:40:19 +0000
asID: 4783
IP address blocks: 210.63.32.0/19 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:7e:73:af:67:cb:97:85:e4:34:85:07:2f:bc:b5:5e:36:14:f2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Validity
Not Before: May 11 17:35:19 2026 GMT
Not After : May 10 17:40:19 2027 GMT
Subject: CN=02F28CF801B0BA98BD2E7781447BC1BABEFE5E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:54:dc:fa:39:b2:32:fe:2c:56:1e:84:ea:
be:15:b4:8e:40:8c:e7:a7:88:fa:2c:9e:2f:d6:25:
af:fc:0d:27:9f:ac:70:1b:91:50:b7:15:b0:13:d2:
ef:8d:7f:e9:38:a0:a7:7d:e4:92:03:1a:d1:2d:62:
f7:72:b1:b0:1d:63:7c:40:a9:26:c3:ce:77:3f:8d:
96:b1:31:3d:e1:8e:86:56:94:01:60:0b:da:52:f7:
0e:8b:e0:8b:be:6f:af:39:70:6f:32:de:7d:45:8d:
fb:0f:34:98:e0:28:11:7e:a5:d4:d6:ba:e8:42:87:
8d:c7:f7:53:e1:92:a9:09:45:b0:8d:6e:23:1f:7d:
f0:68:af:d3:cb:2b:04:d6:17:1f:9e:db:00:d4:12:
0f:e6:34:13:39:9a:30:9a:fe:7e:f2:ac:8a:d6:33:
2c:37:74:5b:09:23:f2:46:2d:d9:e3:b1:ad:27:36:
59:b7:fb:7e:13:b2:99:96:fb:6b:c2:70:78:57:37:
6a:fa:f7:03:28:30:c0:12:0e:d8:4f:1e:76:c9:5d:
8f:89:f7:26:b6:4f:72:83:92:9d:6c:09:28:c1:86:
8d:93:58:16:ae:1b:ab:cd:48:cc:68:e8:b7:79:bd:
ee:bb:50:33:88:dc:5c:f4:8d:dd:de:b1:2e:8c:75:
fe:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F2:8C:F8:01:B0:BA:98:BD:2E:77:81:44:7B:C1:BA:BE:FE:5E:83
X509v3 Authority Key Identifier:
keyid:ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36332e33322e302f31392d3234203d3e2034373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.63.32.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:8c:21:91:7b:f1:67:bd:f4:d0:38:eb:f1:67:5a:37:b8:1e:
2d:11:30:e8:29:19:38:58:a3:fa:2e:2c:89:27:28:85:44:3c:
12:28:56:a8:79:88:8b:86:c9:04:d9:44:1c:2f:4b:5e:d8:ad:
d5:9c:95:63:ea:68:33:90:fd:60:31:47:90:e8:a6:70:f3:1d:
e2:99:82:ee:f9:85:76:49:40:38:8b:b4:52:5f:97:df:d0:ff:
8c:58:a8:c3:20:ca:d1:7b:a0:0d:b5:ef:24:a6:2a:62:60:61:
7c:0b:2e:fe:7f:40:da:b2:9c:37:af:3c:09:8d:b9:cd:6d:20:
d3:10:b5:36:df:10:da:f0:8a:ae:c4:c6:6f:a6:ef:82:33:92:
89:fb:ce:54:76:b3:55:1c:19:03:35:2a:88:93:33:4b:39:36:
5e:9e:91:91:67:55:4e:82:ff:bd:70:38:b2:f0:99:ad:ba:87:
c3:66:f2:31:ae:5b:4a:78:e8:b6:56:13:4f:f3:12:2a:06:c4:
96:a1:a8:78:f3:37:77:0a:6a:54:31:52:25:3d:55:a8:84:a1:
18:fd:4b:f3:d0:c6:df:9d:87:ed:4b:10:ac:9a:96:a3:f2:f2:
f8:d9:c4:48:02:80:25:21:04:21:88:36:12:71:4d:54:9a:3f:
97:7d:4c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:59:41 2026 by rpki-client