Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ASIACLOUD/0/3232332e32362e31322e302f32332d3234203d3e203231383539.roa
File:                     3232332e32362e31322e302f32332d3234203d3e203231383539.roa (raw, json)
Hash identifier:          Yulci9bkgMYRgIg4iVIneixuoddYy+1JFiBzhbuhzck=
Subject key identifier:   F1:C4:A6:A9:40:94:2A:57:07:4F:D0:EA:20:CE:FD:D8:19:A6:A0:8E
Certificate issuer:       /CN=93D669EECC68CD9CE817D7976BADC107AB3C5851
Certificate serial:       35D156CCCF72F1D1351389C9D99DD7F40DCB7ACD
Authority key identifier: 93:D6:69:EE:CC:68:CD:9C:E8:17:D7:97:6B:AD:C1:07:AB:3C:58:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/93D669EECC68CD9CE817D7976BADC107AB3C5851.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ASIACLOUD/0/3232332e32362e31322e302f32332d3234203d3e203231383539.roa
Signing time:             Mon 11 May 2026 17:56:40 +0000
ROA not before:           Mon 11 May 2026 17:51:40 +0000
ROA not after:            Mon 10 May 2027 17:56:40 +0000
asID:                     21859
IP address blocks:        223.26.12.0/23 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d1:56:cc:cf:72:f1:d1:35:13:89:c9:d9:9d:d7:f4:0d:cb:7a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93D669EECC68CD9CE817D7976BADC107AB3C5851
        Validity
            Not Before: May 11 17:51:40 2026 GMT
            Not After : May 10 17:56:40 2027 GMT
        Subject: CN=F1C4A6A940942A57074FD0EA20CEFDD819A6A08E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:a2:b9:f2:d6:dd:08:5a:1d:bc:2a:93:b9:
                    09:44:9f:49:56:f8:b8:a5:2e:cc:5c:41:b7:bd:50:
                    47:f8:06:ab:74:a5:b9:ef:bd:ef:6a:60:6f:4a:5a:
                    c9:89:29:30:0b:6a:b4:5d:bc:dc:46:b0:e4:ff:d7:
                    6c:7a:5e:1c:fb:70:bf:3d:82:24:b6:84:90:d6:82:
                    be:a0:0d:11:3d:e1:04:38:85:a4:4b:0f:95:3d:c8:
                    af:4d:24:98:45:e9:17:7a:3a:19:a0:c6:d2:98:44:
                    f9:ac:8d:58:c0:60:a8:21:af:f0:44:32:c8:90:14:
                    42:1c:7b:95:99:af:14:62:6e:79:49:49:fe:ed:23:
                    67:f4:47:27:78:57:83:3f:dc:85:3a:0b:ec:9d:d3:
                    e0:e8:52:54:d1:0d:17:25:81:90:67:3c:45:4c:11:
                    16:5b:7d:49:00:1d:90:24:f8:fb:66:81:90:df:ef:
                    00:08:4d:37:f7:a1:b5:16:cc:4f:b4:fe:37:e3:b7:
                    19:38:b3:f1:32:8c:d0:40:6e:14:68:4f:1d:f7:96:
                    90:20:d6:df:9a:4b:29:40:d2:d0:57:70:bf:26:89:
                    98:16:fe:57:b5:33:9f:b8:13:f6:77:a8:92:30:78:
                    f5:fb:fd:7c:e4:67:4b:f8:d9:82:5c:9d:b7:1a:76:
                    8f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C4:A6:A9:40:94:2A:57:07:4F:D0:EA:20:CE:FD:D8:19:A6:A0:8E
            X509v3 Authority Key Identifier:
                keyid:93:D6:69:EE:CC:68:CD:9C:E8:17:D7:97:6B:AD:C1:07:AB:3C:58:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ASIACLOUD/0/93D669EECC68CD9CE817D7976BADC107AB3C5851.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/93D669EECC68CD9CE817D7976BADC107AB3C5851.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASIACLOUD/0/3232332e32362e31322e302f32332d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.26.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:ff:08:99:03:4a:8e:40:bb:95:e4:2b:35:94:16:83:e2:56:
         52:6c:f8:4d:91:bb:e5:1d:77:8a:c1:00:39:c2:ba:08:ae:af:
         1a:af:21:5e:18:0f:eb:25:99:78:e4:62:cf:2e:e6:72:6f:2c:
         6d:d9:d3:bc:8c:a9:f6:1c:e1:62:e0:81:2f:2d:5e:62:92:a5:
         9b:78:77:ac:a0:70:83:34:96:a2:e2:ca:88:05:11:10:64:47:
         56:e1:d2:14:5a:08:f2:04:8b:17:62:12:8e:cf:52:2e:c0:20:
         55:c2:78:80:7a:3d:9b:6d:40:5e:70:13:54:d8:32:7c:4f:05:
         22:ad:84:17:b0:90:7f:f6:f6:18:3e:d3:9e:88:3b:79:86:b0:
         0b:46:5a:bb:ac:02:6b:f7:08:da:f1:4b:68:3a:23:98:4d:e0:
         06:ff:6c:67:a1:32:21:ec:2e:d8:20:f4:0a:dd:40:17:98:5e:
         3c:e4:79:bb:53:a7:b7:8a:6f:bb:94:90:f7:b4:ee:6e:42:55:
         1c:3f:b8:02:af:a1:4b:c3:d4:c0:b5:6e:57:28:5f:49:4d:b1:
         8b:72:7b:5f:1b:c7:7e:eb:b2:54:8f:8a:ad:2d:25:b4:66:fc:
         a0:83:c9:b0:c5:9c:88:f5:1a:20:d8:3c:a2:9d:7b:e7:f1:6d:
         98:70:37:e8
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUNdFWzM9y8dE1E4nJ2Z3X9A3Les0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNENjY5RUVDQzY4Q0Q5Q0U4MTdENzk3NkJBREMxMDdB
QjNDNTg1MTAeFw0yNjA1MTExNzUxNDBaFw0yNzA1MTAxNzU2NDBaMDMxMTAvBgNV
BAMTKEYxQzRBNkE5NDA5NDJBNTcwNzRGRDBFQTIwQ0VGREQ4MTlBNkEwOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwaK58tbdCFodvCqTuQlEn0lW
+LilLsxcQbe9UEf4Bqt0pbnvve9qYG9KWsmJKTALarRdvNxGsOT/12x6Xhz7cL89
giS2hJDWgr6gDRE94QQ4haRLD5U9yK9NJJhF6Rd6OhmgxtKYRPmsjVjAYKghr/BE
MsiQFEIce5WZrxRibnlJSf7tI2f0Ryd4V4M/3IU6C+yd0+DoUlTRDRclgZBnPEVM
ERZbfUkAHZAk+PtmgZDf7wAITTf3obUWzE+0/jfjtxk4s/EyjNBAbhRoTx33lpAg
1t+aSylA0tBXcL8miZgW/le1M5+4E/Z3qJIwePX7/XzkZ0v42YJcnbcado/fAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQU8cSmqUCUKlcHT9DqIM792BmmoI4wHwYDVR0j
BBgwFoAUk9Zp7sxozZzoF9eXa63BB6s8WFEwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVNJQUNM
T1VELzAvOTNENjY5RUVDQzY4Q0Q5Q0U4MTdENzk3NkJBREMxMDdBQjNDNTg1MS5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS85M0Q2NjlFRUNDNjhDRDlDRTgxN0Q3OTc2
QkFEQzEwN0FCM0M1ODUxLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuG
YXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVNJQUNMT1VELzAvMzIzMjMz
MmUzMjM2MmUzMTMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzMTM4MzUzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAd8aDDANBgkqhkiG9w0BAQsFAAOCAQEAVv8ImQNKjkC7leQrNZQW
g+JWUmz4TZG75R13isEAOcK6CK6vGq8hXhgP6yWZeORizy7mcm8sbdnTvIyp9hzh
YuCBLy1eYpKlm3h3rKBwgzSWouLKiAUREGRHVuHSFFoI8gSLF2ISjs9SLsAgVcJ4
gHo9m21AXnATVNgyfE8FIq2EF7CQf/b2GD7Tnog7eYawC0Zau6wCa/cI2vFLaDoj
mE3gBv9sZ6EyIewu2CD0Ct1AF5hePOR5u1Ont4pvu5SQ97TubkJVHD+4Aq+hS8PU
wLVuVyhfSU2xi3J7XxvHfuuyVI+KrS0ltGb8oIPJsMWciPUaINg8op175/FtmHA3
6A==
-----END CERTIFICATE-----
Generated at Wed May 13 01:36:56 2026 by rpki-client