Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e3132382e302f32312d3234203d3e2034373833.roa
File: 3231302e36372e3132382e302f32312d3234203d3e2034373833.roa (raw, json)
Hash identifier: P4roJwDVKM9TY4KBoWKPfagZ+CcKwN77hxj/5KRPjoY=
Subject key identifier: 13:CC:6A:2F:C3:CA:76:C2:00:82:18:A9:CF:AF:EB:86:59:0E:E2:53
Certificate issuer: /CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Certificate serial: 7571D2E7354B99946712D840B64A37325EF4DB6B
Authority key identifier: ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e3132382e302f32312d3234203d3e2034373833.roa
Signing time: Mon 11 May 2026 17:40:25 +0000
ROA not before: Mon 11 May 2026 17:35:25 +0000
ROA not after: Mon 10 May 2027 17:40:25 +0000
asID: 4783
IP address blocks: 210.67.128.0/21 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:71:d2:e7:35:4b:99:94:67:12:d8:40:b6:4a:37:32:5e:f4:db:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Validity
Not Before: May 11 17:35:25 2026 GMT
Not After : May 10 17:40:25 2027 GMT
Subject: CN=13CC6A2FC3CA76C2008218A9CFAFEB86590EE253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:7a:3e:6e:14:05:16:a1:67:d9:3b:a8:29:
b9:99:63:9c:30:77:1e:e2:4b:07:57:b8:c5:e3:59:
7d:3c:33:46:9c:59:22:3f:fd:93:e8:66:49:e2:79:
a8:a3:9f:e3:9f:0b:47:3b:e4:eb:3e:92:57:65:41:
23:21:ca:3c:bc:34:d2:7d:17:2a:5a:23:31:e8:5b:
51:9a:14:7e:73:7c:c0:6e:b7:14:05:22:82:c2:3e:
e7:31:ac:05:cd:ee:74:45:35:3a:7f:07:0d:bd:0d:
a0:30:aa:5c:72:27:40:84:34:d9:28:3a:e6:99:40:
1f:a9:56:26:62:04:a4:8a:a5:64:4d:7a:d9:d5:74:
67:09:4c:da:97:de:6d:d6:85:27:cc:6c:19:22:fb:
1b:99:ed:f5:d8:0e:e4:77:2f:61:89:29:3a:f6:1a:
f2:1b:cf:db:e6:9e:34:b4:37:00:56:c3:58:f2:0a:
7d:29:1d:d7:b6:a6:b0:8b:45:bc:9a:65:cf:72:60:
c9:f1:bb:0f:90:5e:69:ea:dc:d8:51:47:bf:ec:cb:
7c:39:2e:ff:10:5b:28:23:8b:b0:5c:2f:30:8d:8a:
c1:b8:e8:52:dd:b1:6c:e6:5d:7b:14:8c:70:2e:d1:
e7:33:4b:cb:09:90:24:1c:4e:55:8a:2b:ce:d9:88:
8d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CC:6A:2F:C3:CA:76:C2:00:82:18:A9:CF:AF:EB:86:59:0E:E2:53
X509v3 Authority Key Identifier:
keyid:ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e3132382e302f32312d3234203d3e2034373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.67.128.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:51:71:14:1d:08:43:bf:c6:c9:23:a8:9c:39:a4:80:d9:8e:
b3:99:ad:04:3f:66:a0:f1:1f:07:ba:0a:c7:59:5d:42:55:38:
47:03:f2:5c:f6:90:29:55:58:8e:1c:3b:0d:13:4e:0a:a6:ac:
5f:82:ac:8a:95:68:fd:e1:4a:3a:1b:12:8b:7c:03:8d:52:eb:
0f:3d:80:4e:11:48:be:9e:bc:ed:ea:7e:e4:93:f8:d4:21:9e:
ae:a6:ed:a6:83:51:e2:b1:6b:d3:3b:7a:77:ea:ae:dd:7f:98:
b4:4a:1d:8f:84:13:55:a8:56:71:c8:c4:7c:71:4b:79:73:fd:
85:5f:e4:e4:0b:3d:55:8c:09:0f:3e:9d:0f:e2:c8:31:58:9f:
05:c4:f4:45:e6:e7:01:42:cd:6d:da:77:06:f8:4f:28:3b:f0:
3f:c6:83:d8:4c:a5:5a:fa:ff:2f:91:1d:7b:dc:a8:41:a7:fe:
ab:c2:64:81:5a:88:f5:22:6e:ef:bb:b3:00:a0:bf:95:6d:4a:
45:8b:e6:ad:69:b1:2d:d8:62:12:24:94:d2:02:a0:4d:bf:9c:
23:ca:8c:a8:ca:d0:cf:62:5e:15:c6:b2:44:3b:91:fc:ba:8f:
4a:bb:61:ba:bf:7c:89:d6:d6:4a:ce:d7:97:64:be:00:12:f2:
90:c9:af:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:59:35 2026 by rpki-client