Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/SYSNET/0/323430353a6130303a3a2f33322d3332203d3e2034373833.roa
File: 323430353a6130303a3a2f33322d3332203d3e2034373833.roa (raw, json)
Hash identifier: w96CcK3EcuIT7W/c98Q79QR5Oc7Yp+VCg1caJCBvd0k=
Subject key identifier: 49:46:66:42:C1:08:F3:3C:11:5F:D1:21:50:DD:9C:17:8C:04:EF:6B
Certificate issuer: /CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Certificate serial: 728E70D90FE437FA0C7A24302F1982CA95B09894
Authority key identifier: ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SYSNET/0/323430353a6130303a3a2f33322d3332203d3e2034373833.roa
Signing time: Mon 11 May 2026 17:57:09 +0000
ROA not before: Mon 11 May 2026 17:52:09 +0000
ROA not after: Mon 10 May 2027 17:57:09 +0000
asID: 4783
IP address blocks: 2405:a00::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:8e:70:d9:0f:e4:37:fa:0c:7a:24:30:2f:19:82:ca:95:b0:98:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Validity
Not Before: May 11 17:52:09 2026 GMT
Not After : May 10 17:57:09 2027 GMT
Subject: CN=49466642C108F33C115FD12150DD9C178C04EF6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:86:34:9b:35:31:08:96:64:a2:55:5a:e5:
20:4c:4e:2a:5a:a0:5d:f7:a7:23:2f:9f:4a:a5:1b:
53:0d:65:5e:4b:73:4c:44:71:95:4d:c4:cb:ee:e7:
39:67:c9:c2:61:5f:56:ae:3b:0b:58:39:6d:42:06:
04:db:20:5f:5a:ca:45:a8:68:61:fe:3d:23:e6:76:
d5:bc:1f:d2:81:7a:9e:e0:a3:3f:88:eb:9e:a5:f4:
5d:26:76:1c:a8:65:0e:e8:c8:81:d3:cb:e8:cf:0d:
d1:c6:2b:4c:24:88:45:a3:d8:b4:d0:c9:f3:c9:cd:
d5:1b:6f:f8:52:a3:6d:d4:c8:86:03:53:ec:d7:9e:
df:96:30:16:be:8e:64:d2:05:6b:95:44:91:37:3a:
13:7f:7e:2a:e3:54:8f:44:0c:2c:b0:d3:4a:51:fb:
61:f3:c8:3a:9f:d6:14:6b:e8:53:4a:18:58:e3:1b:
aa:ce:db:6a:26:77:44:24:07:86:14:07:83:b2:66:
04:0e:80:7a:43:7f:f7:a5:27:e2:b9:b0:5e:97:25:
7c:ab:1f:b1:b1:9b:1f:b0:b9:57:18:07:f4:8f:71:
31:96:e9:b7:7b:e1:f4:dd:1e:89:51:ff:12:72:54:
54:ac:66:10:49:32:c3:fd:c5:a6:64:ca:7a:96:4e:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:46:66:42:C1:08:F3:3C:11:5F:D1:21:50:DD:9C:17:8C:04:EF:6B
X509v3 Authority Key Identifier:
keyid:ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/323430353a6130303a3a2f33322d3332203d3e2034373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:a00::/32
Signature Algorithm: sha256WithRSAEncryption
23:5e:7d:39:c1:a5:b0:14:4e:31:d9:4a:4b:56:8f:d2:b0:08:
7f:bf:44:ee:d1:45:c9:46:5c:b8:cd:5a:66:6e:99:79:5b:a8:
d1:ec:be:88:69:e8:9e:b0:f6:00:23:83:0c:70:36:55:7e:b1:
05:02:cc:b0:ab:1f:a9:88:59:8a:c3:e3:a1:d0:49:71:b0:f1:
0d:fb:9e:35:89:d3:f1:82:4e:12:2d:29:c5:39:ec:2f:d6:48:
2d:4c:fe:54:88:2b:1e:fe:da:01:0c:71:ca:70:a2:48:18:67:
d9:38:18:52:af:c2:68:76:2c:60:83:48:19:81:3f:17:39:ef:
82:a1:df:47:d2:20:88:0b:e3:ef:62:e3:1e:0d:60:13:07:6e:
59:2a:d2:de:87:d7:e7:f2:1c:21:62:6e:75:07:ef:68:ca:6c:
ee:89:a8:91:8b:b1:2d:53:11:ee:90:05:57:c7:79:6a:72:61:
98:5e:65:af:e6:7d:16:67:dc:86:ff:76:d4:c7:a3:60:47:c2:
dd:c0:8e:36:16:09:19:3e:5c:1d:1e:96:59:8b:1e:02:76:3d:
11:8b:c2:97:b0:90:05:57:41:b6:aa:38:74:a4:f8:0d:28:1e:
f7:ed:3a:98:11:19:a4:b1:1b:97:f8:3b:89:64:d2:e2:ec:62:
8f:34:95:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:50:55 2026 by rpki-client