Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e3134302e302f32332d3234203d3e20313532363236.roa
File: 3231302e36372e3134302e302f32332d3234203d3e20313532363236.roa (raw, json)
Hash identifier: U41ACqKjqLv3A2k99iT0Zw/yVaptjAgUgR8Sqx4uySY=
Subject key identifier: 78:7F:DE:CA:4E:BD:21:89:66:7C:9B:14:7E:98:80:86:DD:23:04:3B
Certificate issuer: /CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Certificate serial: 417742C39F4D51A806D5D7B67E7A41935A463866
Authority key identifier: ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e3134302e302f32332d3234203d3e20313532363236.roa
Signing time: Mon 11 May 2026 17:52:48 +0000
ROA not before: Mon 11 May 2026 17:47:48 +0000
ROA not after: Mon 10 May 2027 17:52:48 +0000
asID: 152626
IP address blocks: 210.67.140.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:77:42:c3:9f:4d:51:a8:06:d5:d7:b6:7e:7a:41:93:5a:46:38:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Validity
Not Before: May 11 17:47:48 2026 GMT
Not After : May 10 17:52:48 2027 GMT
Subject: CN=787FDECA4EBD2189667C9B147E988086DD23043B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:df:54:ea:88:25:51:b7:70:ca:ab:45:ed:
c8:64:49:5b:f7:8e:8c:f7:13:d0:f8:25:17:db:55:
bd:7a:61:bb:64:6e:fe:bb:ad:f4:48:7a:38:d9:ae:
bd:6b:58:67:5e:6b:7e:6a:b6:8c:44:89:fe:f9:67:
f3:27:93:74:9e:df:31:dd:08:1b:ec:55:a7:c8:3c:
17:6f:0f:8b:da:23:13:89:7f:f9:19:79:a0:16:e2:
f7:96:a8:df:3d:6a:e0:78:2a:1c:94:68:27:e9:a1:
b1:15:a8:4f:13:68:b6:83:bb:77:63:a5:16:ee:c2:
ac:4b:37:a1:85:bf:00:be:3e:82:be:54:b6:c9:8c:
84:34:c7:d9:5c:41:7c:ec:f9:a6:e5:7e:87:04:5a:
1b:3d:66:a7:ac:6d:23:1c:28:0a:3e:38:f3:97:35:
b7:bd:09:6b:ee:3b:1c:a3:56:d0:6f:10:95:c5:de:
b3:78:6c:00:44:d2:9e:3b:68:43:22:0c:39:60:6f:
10:47:24:41:d6:ef:0b:ed:7d:fb:ea:5c:ae:dc:f8:
73:3a:4b:7e:67:81:78:78:7e:2b:aa:95:7c:ec:e7:
f5:c6:8e:b2:79:8e:a0:5c:6b:b5:39:b4:8e:d0:08:
97:6a:78:2a:58:1b:84:7a:33:79:92:e1:91:18:58:
84:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7F:DE:CA:4E:BD:21:89:66:7C:9B:14:7E:98:80:86:DD:23:04:3B
X509v3 Authority Key Identifier:
keyid:ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e3134302e302f32332d3234203d3e20313532363236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.67.140.0/23
Signature Algorithm: sha256WithRSAEncryption
66:b7:ab:e9:5d:7f:6c:42:6e:00:30:a4:ce:f4:40:e7:92:39:
01:ce:61:06:d0:cf:96:99:95:aa:d4:da:b7:dd:f9:ec:d0:3f:
33:85:98:42:8e:49:f5:3b:c1:52:11:73:3f:6d:97:76:16:ca:
02:1b:bc:9d:4e:42:f1:9b:67:a9:17:62:ea:8c:86:52:0a:84:
be:bf:eb:1a:7b:2e:fe:bd:77:40:5c:22:3d:2e:6d:66:d5:87:
1a:a2:ee:50:ab:2b:2e:8a:19:1f:ac:72:8f:84:07:68:71:5f:
1e:bc:24:ab:7d:e2:c4:a4:c8:a2:73:02:fa:54:01:e7:c1:09:
26:7d:d0:61:44:6a:07:8e:fb:19:8b:2f:b1:b4:6d:8f:7f:a3:
a0:83:b9:e7:23:cf:23:86:55:5c:3a:36:f0:2f:db:95:b0:d6:
30:cf:f1:38:5d:37:8a:9c:a9:a0:9d:4b:8c:4f:98:78:ca:85:
2e:fb:57:7d:6f:32:e7:a1:94:92:39:1a:13:d3:9b:b6:c5:49:
2a:63:4a:a8:c4:37:62:c0:b3:91:36:24:cd:f5:fd:90:cb:8c:
1d:b3:71:a9:0c:2c:2d:b4:8a:fd:17:87:8a:43:45:7f:da:5f:
87:89:16:7c:1f:ce:4d:c5:fa:11:ce:92:a3:27:7f:c9:60:0e:
84:5d:72:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 22:50:55 2026 by rpki-client