Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e302e302f32302d3234203d3e2034373833.roa
File: 3231302e36372e302e302f32302d3234203d3e2034373833.roa (raw, json)
Hash identifier: wjwfBFHpMOaJa38KIrYl3Psjw0WhKS7Yo8OYk8jCybg=
Subject key identifier: D3:E1:E2:91:4D:FE:81:86:19:26:37:62:05:07:99:17:E1:F4:CF:B2
Certificate issuer: /CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Certificate serial: 60E5BF57190C01EC04AC80BC8BD3CD96E5A55295
Authority key identifier: ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e302e302f32302d3234203d3e2034373833.roa
Signing time: Mon 11 May 2026 17:40:20 +0000
ROA not before: Mon 11 May 2026 17:35:20 +0000
ROA not after: Mon 10 May 2027 17:40:20 +0000
asID: 4783
IP address blocks: 210.67.0.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e5:bf:57:19:0c:01:ec:04:ac:80:bc:8b:d3:cd:96:e5:a5:52:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Validity
Not Before: May 11 17:35:20 2026 GMT
Not After : May 10 17:40:20 2027 GMT
Subject: CN=D3E1E2914DFE81861926376205079917E1F4CFB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:9e:20:ae:76:75:a9:92:76:6a:0c:5e:aa:
74:04:90:0d:88:05:64:c9:bf:57:87:c0:0f:6d:3e:
94:bb:7e:fd:b9:d3:de:5b:74:33:45:96:a6:c7:5d:
dc:58:04:22:fd:f4:d0:03:dc:66:28:eb:cf:a9:5c:
0b:c6:0c:d8:de:0f:21:a7:6e:f8:ea:13:65:e2:8d:
6d:1d:b4:a6:94:11:ae:f8:eb:3b:c2:46:69:9f:51:
30:c1:b7:9d:73:51:02:59:a5:e7:00:75:2a:cf:a1:
b2:c9:9d:6c:16:63:75:24:cb:f9:6e:13:f1:2b:95:
60:fa:67:c0:e3:37:93:7a:47:0f:25:9f:20:40:34:
49:07:01:ad:26:a9:17:22:b1:b3:5b:c1:44:ee:b5:
9f:66:c5:e8:69:bb:e5:e9:8d:a2:cd:cf:4f:c5:fc:
1d:1b:7b:ea:c7:39:f2:c9:4c:f4:4d:42:d5:1c:01:
44:44:be:e9:1e:08:65:f9:56:e4:c3:13:91:3c:e3:
8d:53:d8:90:ff:f5:d2:f2:87:66:f8:49:5f:f8:ac:
c1:c4:e6:1b:79:a8:a1:ef:42:dd:67:e8:ac:7c:99:
a1:58:61:14:35:c1:31:7a:78:8c:6b:79:d7:20:85:
79:d2:82:98:83:fd:cd:56:07:05:a8:5b:bc:42:dc:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E1:E2:91:4D:FE:81:86:19:26:37:62:05:07:99:17:E1:F4:CF:B2
X509v3 Authority Key Identifier:
keyid:ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e302e302f32302d3234203d3e2034373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.67.0.0/20
Signature Algorithm: sha256WithRSAEncryption
57:9e:c7:af:c9:3c:9b:f7:58:c0:92:ec:76:c9:0b:27:01:3e:
20:02:c1:bf:c2:c8:70:c4:96:bd:33:31:53:f7:9e:ac:27:05:
82:49:ee:7d:5e:31:93:3e:65:1a:f2:16:7b:83:bd:67:1c:fb:
c5:ef:1f:d2:31:09:09:7e:df:2b:b4:af:02:d2:1e:31:9c:37:
e9:63:0b:fe:bf:63:5d:a4:af:9e:71:99:60:3a:43:aa:09:8c:
17:da:4a:f6:00:aa:20:53:25:9c:34:c6:45:6d:c0:33:e4:3b:
1a:2d:b7:64:3d:e6:e8:04:db:32:f3:c0:24:97:64:06:45:f5:
ed:b9:80:e1:73:60:28:38:3f:4f:cc:9c:48:37:7d:99:29:22:
27:b6:a4:c7:99:7d:44:84:87:e6:39:b5:6f:3d:57:20:83:b6:
c4:fe:cb:b0:5b:d2:e5:69:eb:00:0c:d4:15:99:85:e0:ce:55:
e2:de:8b:52:45:43:20:a5:d2:fa:2d:6c:66:fb:4f:90:f4:96:
26:f5:54:0f:f4:82:8e:1e:85:7e:8f:01:3d:3b:0e:6e:bf:33:
49:43:7d:71:d1:c8:88:51:ea:a4:54:c2:21:15:e1:b4:35:4e:
ab:14:43:07:1a:b7:57:4a:da:91:7d:e6:9a:1c:5a:28:b6:de:
b1:58:07:73
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUYOW/VxkMAewErIC8i9PNluWlUpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURFNzM4OUI2RDlBMzM1RDZCNkZERDQyODZEQjc5MDEx
Rjg3NTU0QjAeFw0yNjA1MTExNzM1MjBaFw0yNzA1MTAxNzQwMjBaMDMxMTAvBgNV
BAMTKEQzRTFFMjkxNERGRTgxODYxOTI2Mzc2MjA1MDc5OTE3RTFGNENGQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCumJ4grnZ1qZJ2agxeqnQEkA2I
BWTJv1eHwA9tPpS7fv25095bdDNFlqbHXdxYBCL99NAD3GYo68+pXAvGDNjeDyGn
bvjqE2XijW0dtKaUEa746zvCRmmfUTDBt51zUQJZpecAdSrPobLJnWwWY3Uky/lu
E/ErlWD6Z8DjN5N6Rw8lnyBANEkHAa0mqRcisbNbwUTutZ9mxehpu+XpjaLNz0/F
/B0be+rHOfLJTPRNQtUcAUREvukeCGX5VuTDE5E8441T2JD/9dLyh2b4SV/4rMHE
5ht5qKHvQt1n6Kx8maFYYRQ1wTF6eIxredcghXnSgpiD/c1WBwWoW7xC3D5RAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQU0+HikU3+gYYZJjdiBQeZF+H0z7IwHwYDVR0j
BBgwFoAU7ec4m22aM11rb91Chtt5AR+HVUswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1lTTkVU
LzAvRURFNzM4OUI2RDlBMzM1RDZCNkZERDQyODZEQjc5MDExRjg3NTU0Qi5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS9FREU3Mzg5QjZEOUEzMzVENkI2RkRENDI4NkRC
NzkwMTFGODc1NTRCLmNlcjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1lTTkVULzAvMzIzMTMwMmUzNjM3
MmUzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM0MzczODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
0kMAMA0GCSqGSIb3DQEBCwUAA4IBAQBXnsevyTyb91jAkux2yQsnAT4gAsG/wshw
xJa9MzFT956sJwWCSe59XjGTPmUa8hZ7g71nHPvF7x/SMQkJft8rtK8C0h4xnDfp
Ywv+v2NdpK+ecZlgOkOqCYwX2kr2AKogUyWcNMZFbcAz5DsaLbdkPeboBNsy88Ak
l2QGRfXtuYDhc2AoOD9PzJxIN32ZKSIntqTHmX1EhIfmObVvPVcgg7bE/suwW9Ll
aesADNQVmYXgzlXi3otSRUMgpdL6LWxm+0+Q9JYm9VQP9IKOHoV+jwE9Ow5uvzNJ
Q31x0ciIUeqkVMIhFeG0NU6rFEMHGrdXStqRfeaaHFoott6xWAdz
-----END CERTIFICATE-----
Generated at Tue May 12 23:25:19 2026 by rpki-client