Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/Qi9r7SAykhgYWpQpenGJzFGB1UU.roa
File: Qi9r7SAykhgYWpQpenGJzFGB1UU.roa (raw, json)
Hash identifier: Wd935ORM1zUW1vIUChYKNwzMto8YW65lLr6IEYcZtVI=
Subject key identifier: 42:2F:6B:ED:20:32:92:18:18:5A:94:29:7A:71:89:CC:51:81:D5:45
Certificate issuer: /CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Certificate serial: 93
Authority key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/Qi9r7SAykhgYWpQpenGJzFGB1UU.roa
Signing time: Wed 28 Jan 2026 08:05:19 +0000
ROA not before: Wed 28 Jan 2026 08:05:19 +0000
ROA not after: Wed 30 Dec 2026 15:30:20 +0000
asID: 152612
IP address blocks: 2402:43e0:a::/48 maxlen: 64
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Validity
Not Before: Jan 28 08:05:19 2026 GMT
Not After : Dec 30 15:30:20 2026 GMT
Subject: CN=422F6BED20329218185A94297A7189CC5181D545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6c:1c:3a:c1:85:22:58:4a:f2:15:38:bb:4e:
1d:a2:21:c9:04:71:61:12:03:23:52:5d:d7:1c:29:
73:31:a6:99:b3:8e:02:d8:1e:bf:5b:53:d6:47:81:
61:00:7c:16:95:05:09:dd:51:92:1e:6a:a7:f5:dc:
eb:67:02:34:78:bf:e6:a0:fd:0d:2b:59:51:1a:5c:
a0:6c:4f:c8:1f:d1:94:15:80:c3:69:92:d4:02:a4:
77:84:04:aa:13:60:9d:a0:d9:c7:e1:ce:96:89:c4:
2b:50:41:27:bd:bb:bd:df:c9:d0:53:ed:37:bd:33:
2b:30:69:9b:28:1d:67:93:12:2d:85:0e:a6:cb:f9:
65:73:ce:00:c8:8c:49:41:d0:9b:26:31:da:ca:76:
ef:4a:e1:26:42:11:f6:b6:72:08:ce:94:15:f0:28:
14:96:45:73:48:32:5d:61:d5:55:7d:84:4a:62:33:
28:4b:66:a9:29:82:3b:4a:b1:88:8e:f5:b8:96:30:
16:d4:67:d0:23:a6:3e:4c:e6:22:f8:c8:b2:59:00:
ef:33:5f:42:11:64:06:7a:9f:f0:79:fc:e9:18:0f:
fb:6c:09:94:65:cd:76:cf:87:48:73:9f:84:87:b4:
1b:5b:75:d6:35:4e:65:06:fe:3c:36:4e:a8:bd:7a:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2F:6B:ED:20:32:92:18:18:5A:94:29:7A:71:89:CC:51:81:D5:45
X509v3 Authority Key Identifier:
keyid:FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/Qi9r7SAykhgYWpQpenGJzFGB1UU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:43e0:a::/48
Signature Algorithm: sha256WithRSAEncryption
42:48:9b:50:00:81:68:bd:f7:a5:ec:c7:81:51:ab:6c:06:9b:
72:6f:84:47:f8:5c:55:56:ef:f7:b8:8a:66:a3:22:d4:58:1d:
ef:08:99:bc:68:38:86:8a:48:e5:e8:bb:28:42:42:b9:7a:2e:
3f:91:9a:d8:74:f3:2a:fd:5a:cc:d4:12:ff:30:df:5a:b6:ad:
a5:e7:38:40:db:86:28:28:24:7b:c0:b0:7d:47:57:5f:83:9b:
3b:56:89:0f:f2:0a:4a:fe:d2:96:d2:2f:57:d5:8a:24:11:e4:
cb:3b:46:49:8a:c5:c7:7c:23:3a:db:46:ef:05:ef:6d:f1:3a:
de:3e:7f:48:31:a3:85:de:b3:08:2b:f6:43:fd:52:b3:75:57:
11:ca:5d:d3:bd:c7:ce:f0:b8:bc:d3:2a:bb:e3:b6:aa:b5:9c:
94:be:87:87:03:56:48:3a:01:11:79:65:b3:ce:a5:8e:31:1b:
73:97:a9:9d:ba:32:09:27:43:5a:29:e7:bc:99:5f:3d:08:4f:
55:b8:38:b2:32:43:7b:77:e2:6c:96:fa:6c:1b:b3:fa:4d:d1:
71:bb:e0:f4:cf:68:64:55:eb:25:b5:9a:2c:ca:cd:1a:c7:f6:
8f:e0:31:c8:86:08:a0:3b:42:e2:47:34:8f:ff:17:22:9e:e7:
ac:4d:03:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:59:41 2026 by rpki-client