Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e31362e302f32302d3234203d3e2034373833.roa
File: 3231302e36372e31362e302f32302d3234203d3e2034373833.roa (raw, json)
Hash identifier: OOqyxUF2Eo0uwi9ygYamcvINthWEw9KhH9b8voFJxlo=
Subject key identifier: 41:00:E6:02:6A:06:34:53:B2:D7:AE:81:F2:64:43:42:D0:52:9A:1A
Certificate issuer: /CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Certificate serial: 512A7406E773258438F40003D24369BEDD7F0A09
Authority key identifier: ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e31362e302f32302d3234203d3e2034373833.roa
Signing time: Mon 11 May 2026 17:40:20 +0000
ROA not before: Mon 11 May 2026 17:35:20 +0000
ROA not after: Mon 10 May 2027 17:40:20 +0000
asID: 4783
IP address blocks: 210.67.16.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:2a:74:06:e7:73:25:84:38:f4:00:03:d2:43:69:be:dd:7f:0a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Validity
Not Before: May 11 17:35:20 2026 GMT
Not After : May 10 17:40:20 2027 GMT
Subject: CN=4100E6026A063453B2D7AE81F2644342D0529A1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:9f:a9:82:1d:cb:ef:70:9f:76:15:75:18:
12:c2:d9:87:69:7c:49:da:5b:85:93:17:f3:5d:13:
eb:ab:89:78:d2:96:43:02:d4:7e:bf:57:2b:b4:72:
e4:c8:3c:7a:d8:20:26:5a:42:47:7e:96:e1:29:23:
ee:12:e8:51:85:44:2f:e3:49:17:c5:e3:19:df:70:
2a:34:8f:6c:05:24:64:64:5a:32:3e:ab:c5:85:e8:
bd:72:68:11:f0:fe:ca:61:94:70:c8:a2:0c:33:17:
78:e8:d7:cb:19:25:83:ae:f2:be:a6:d9:2f:e4:8b:
5e:15:a6:ea:70:b6:5e:8d:b4:51:8e:88:d1:2b:c4:
d4:a2:3a:46:d4:a3:dd:1b:a0:08:a5:30:16:ed:6e:
64:85:40:64:e6:88:c3:10:1f:a8:dd:3a:30:eb:a2:
f6:ff:7c:20:d4:0a:cf:10:bb:74:44:b2:88:cf:3c:
c9:c0:48:d9:ab:90:e2:df:27:d1:53:2e:2c:6a:22:
c3:18:ff:a3:d5:e7:78:c1:c5:ed:a5:c8:a7:b6:3b:
d8:57:cc:36:13:13:d3:43:fd:2f:c4:4d:52:30:5a:
7a:cc:86:53:fc:f9:bf:93:1e:11:07:5e:e0:02:49:
b3:f0:e2:35:14:81:6a:9c:d7:75:dc:5d:7d:8c:a8:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:00:E6:02:6A:06:34:53:B2:D7:AE:81:F2:64:43:42:D0:52:9A:1A
X509v3 Authority Key Identifier:
keyid:ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e31362e302f32302d3234203d3e2034373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.67.16.0/20
Signature Algorithm: sha256WithRSAEncryption
27:2d:c2:9c:75:1a:4e:73:38:89:5c:b1:3a:4b:69:3d:55:ce:
05:4d:ec:a9:b2:0c:a8:61:db:61:67:dd:98:ba:ec:bf:83:e1:
1d:cc:94:87:72:ec:3b:54:0e:4b:e6:96:6d:91:80:6d:e9:34:
2f:1f:53:f4:87:5b:01:73:29:18:91:f7:9d:8a:f4:d8:08:cf:
ee:f0:2f:ea:d5:78:eb:2f:36:41:ea:8c:c8:90:ae:52:87:ee:
1a:d5:6e:d2:c5:65:10:95:df:56:bf:7d:ec:f5:6d:da:53:9f:
14:e2:ad:c3:3e:d0:4b:87:0d:38:22:0b:50:0f:8f:1f:53:4b:
25:4c:4a:28:36:3a:82:f4:96:b1:e0:5e:65:2d:8d:fe:53:21:
8c:eb:9b:e9:49:85:40:4a:7c:85:51:b0:e7:8f:28:c8:b2:d2:
73:44:5d:10:87:ee:cf:c7:6e:56:28:fd:85:ab:69:20:ab:31:
ff:e1:7b:a9:42:b2:29:f5:1a:70:b8:ae:92:42:e2:3d:cf:a0:
2d:0f:e7:f4:41:2d:b4:fa:0a:3a:d8:7d:17:26:b6:a5:2b:78:
e2:7a:9c:b0:29:d9:55:45:8f:83:65:ef:6a:df:88:26:8c:7b:
41:cd:fe:d5:e9:da:4b:5c:15:fd:76:76:28:1b:a8:fb:10:0d:
54:41:7c:15
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUUSp0BudzJYQ49AAD0kNpvt1/CgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURFNzM4OUI2RDlBMzM1RDZCNkZERDQyODZEQjc5MDEx
Rjg3NTU0QjAeFw0yNjA1MTExNzM1MjBaFw0yNzA1MTAxNzQwMjBaMDMxMTAvBgNV
BAMTKDQxMDBFNjAyNkEwNjM0NTNCMkQ3QUU4MUYyNjQ0MzQyRDA1MjlBMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dZ+pgh3L73CfdhV1GBLC2Ydp
fEnaW4WTF/NdE+uriXjSlkMC1H6/Vyu0cuTIPHrYICZaQkd+luEpI+4S6FGFRC/j
SRfF4xnfcCo0j2wFJGRkWjI+q8WF6L1yaBHw/sphlHDIogwzF3jo18sZJYOu8r6m
2S/ki14Vpupwtl6NtFGOiNErxNSiOkbUo90boAilMBbtbmSFQGTmiMMQH6jdOjDr
ovb/fCDUCs8Qu3REsojPPMnASNmrkOLfJ9FTLixqIsMY/6PV53jBxe2lyKe2O9hX
zDYTE9ND/S/ETVIwWnrMhlP8+b+THhEHXuACSbPw4jUUgWqc13XcXX2MqMpxAgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUQQDmAmoGNFOy166B8mRDQtBSmhowHwYDVR0j
BBgwFoAU7ec4m22aM11rb91Chtt5AR+HVUswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1lTTkVU
LzAvRURFNzM4OUI2RDlBMzM1RDZCNkZERDQyODZEQjc5MDExRjg3NTU0Qi5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS9FREU3Mzg5QjZEOUEzMzVENkI2RkRENDI4NkRC
NzkwMTFGODc1NTRCLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1lTTkVULzAvMzIzMTMwMmUzNjM3
MmUzMTM2MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzQzNzM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BATSQxAwDQYJKoZIhvcNAQELBQADggEBACctwpx1Gk5zOIlcsTpLaT1VzgVN7Kmy
DKhh22Fn3Zi67L+D4R3MlIdy7DtUDkvmlm2RgG3pNC8fU/SHWwFzKRiR952K9NgI
z+7wL+rVeOsvNkHqjMiQrlKH7hrVbtLFZRCV31a/fez1bdpTnxTircM+0EuHDTgi
C1APjx9TSyVMSig2OoL0lrHgXmUtjf5TIYzrm+lJhUBKfIVRsOePKMiy0nNEXRCH
7s/HblYo/YWraSCrMf/he6lCsin1GnC4rpJC4j3PoC0P5/RBLbT6CjrYfRcmtqUr
eOJ6nLAp2VVFj4Nl72rfiCaMe0HN/tXp2ktcFf12digbqPsQDVRBfBU=
-----END CERTIFICATE-----
Generated at Tue May 12 23:24:46 2026 by rpki-client