Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/yqsZsdHjFzqqMq3U6hrl-U6Strk.roa
File: yqsZsdHjFzqqMq3U6hrl-U6Strk.roa (raw, json)
Hash identifier: 1yvvdh8h871LmVCob9jKyk7hpyhqZO0PqpztGpBO4pU=
Subject key identifier: CA:AB:19:B1:D1:E3:17:3A:AA:32:AD:D4:EA:1A:E5:F9:4E:92:B6:B9
Certificate issuer: /CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Certificate serial: 0137
Authority key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/yqsZsdHjFzqqMq3U6hrl-U6Strk.roa
Signing time: Thu 26 Feb 2026 02:55:39 +0000
ROA not before: Thu 26 Feb 2026 02:55:39 +0000
ROA not after: Wed 30 Dec 2026 15:30:20 +0000
asID: 216198
IP address blocks: 2402:43e0:203::/48 maxlen: 64
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Validity
Not Before: Feb 26 02:55:39 2026 GMT
Not After : Dec 30 15:30:20 2026 GMT
Subject: CN=CAAB19B1D1E3173AAA32ADD4EA1AE5F94E92B6B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:d1:f3:c3:7a:0c:1e:e2:15:e8:5e:a4:24:
25:ca:9c:1c:30:e1:dc:cd:fd:d5:11:da:fe:2d:0c:
2d:a1:29:3d:b6:e2:10:09:cc:60:9a:79:6c:78:cd:
2b:1b:7b:54:ae:3e:2a:9a:ab:96:31:c2:f7:58:be:
a0:52:fa:f3:4d:06:a6:85:e0:f0:a1:43:33:84:18:
ab:e7:5b:7c:7a:dd:1d:bd:06:ac:94:90:84:a1:75:
53:9d:de:23:4d:93:84:50:b0:a1:d8:f9:ea:54:a1:
c3:16:84:c0:e4:51:5a:9f:28:50:1e:39:8a:a5:56:
7f:1b:a7:16:0f:9a:dd:cd:18:73:03:0a:b3:e8:6e:
0d:56:3a:5c:eb:62:71:9b:94:96:74:2e:15:1e:e8:
35:f9:3a:32:84:4a:d0:79:0c:58:83:42:c0:aa:35:
98:6f:07:1f:3a:3a:dc:cd:ff:ba:aa:b5:c5:0a:94:
ca:42:06:3b:40:ed:37:4d:ef:7c:f5:e5:d9:a2:2d:
ae:66:cf:b2:94:6c:68:5a:3b:4e:9b:05:ac:cf:44:
11:3e:41:9b:6f:c9:4c:ae:fd:e1:e4:94:6f:2b:c2:
a8:61:0b:75:e4:d7:01:4d:f3:32:25:61:6a:50:b0:
8a:79:8b:b0:a1:65:e4:ec:3b:67:13:7e:67:35:14:
e5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AB:19:B1:D1:E3:17:3A:AA:32:AD:D4:EA:1A:E5:F9:4E:92:B6:B9
X509v3 Authority Key Identifier:
keyid:FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/yqsZsdHjFzqqMq3U6hrl-U6Strk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:43e0:203::/48
Signature Algorithm: sha256WithRSAEncryption
87:3f:08:8e:54:a6:d4:16:c2:18:ef:8d:14:93:ef:47:38:44:
a9:ef:db:51:99:16:a8:03:ba:93:a3:3e:ae:d5:81:d0:02:32:
1b:d5:9a:66:30:72:3d:03:34:29:0f:b1:a6:02:34:41:cc:09:
b3:bd:60:32:91:d8:80:89:88:95:98:2a:56:4b:05:82:ad:29:
74:44:97:16:64:8d:09:32:a8:3f:11:06:d5:9e:0e:f9:54:af:
6e:6d:ae:a4:e7:e4:c2:49:d2:9f:82:f4:db:08:3b:ba:c8:d6:
fd:0d:6d:3d:74:03:d0:d0:f8:58:a3:f8:3a:61:46:cc:d1:7c:
86:7c:69:ec:cb:34:af:2a:f4:31:66:60:f9:25:7e:dd:22:dd:
1c:dc:24:09:ca:83:78:28:04:bf:fb:21:da:a1:00:0b:c7:3c:
a3:2c:1c:78:bd:d6:b6:b0:fb:7f:42:54:59:44:bb:b3:38:7a:
82:19:23:66:74:28:93:60:91:cd:63:b4:0c:23:43:b6:42:e0:
5d:fa:07:ec:c1:77:02:5d:42:d2:5d:ff:dd:34:e4:38:ee:30:
6d:63:0d:e6:55:0f:93:b7:08:fd:8b:3c:00:98:83:b4:d0:61:
65:fc:36:74:cc:69:9d:fe:af:c7:eb:71:9d:fd:90:73:12:5d:
19:7a:0a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:08 2026 by rpki-client