Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ASNET/0/3230322e3136392e3136302e302f32302d3230203d3e2039323634.roa
File:                     3230322e3136392e3136302e302f32302d3230203d3e2039323634.roa (raw, json)
Hash identifier:          sSOmlXcn9YAxBpR7Y/Omip1XRS2+5nTj6dTKOHSNkp4=
Subject key identifier:   14:2A:F6:13:D1:B9:54:75:68:5D:33:9C:BA:B2:D1:A4:DA:5A:8B:83
Certificate issuer:       /CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Certificate serial:       7BABFCAD439F8E358CF1782A87D72364A2909518
Authority key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ASNET/0/3230322e3136392e3136302e302f32302d3230203d3e2039323634.roa
Signing time:             Mon 11 May 2026 17:10:55 +0000
ROA not before:           Mon 11 May 2026 17:05:55 +0000
ROA not after:            Mon 10 May 2027 17:10:55 +0000
asID:                     9264
IP address blocks:        202.169.160.0/20 maxlen: 20
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ab:fc:ad:43:9f:8e:35:8c:f1:78:2a:87:d7:23:64:a2:90:95:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
        Validity
            Not Before: May 11 17:05:55 2026 GMT
            Not After : May 10 17:10:55 2027 GMT
        Subject: CN=142AF613D1B95475685D339CBAB2D1A4DA5A8B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e4:10:ad:d5:fe:56:a0:d3:0c:80:5c:e6:9f:
                    0f:3c:f6:26:9b:cc:ef:f3:76:67:3e:b4:5a:78:1e:
                    f0:7c:ea:d1:5b:a6:f7:36:5b:a1:ea:1a:82:c6:f7:
                    03:64:f8:3b:e4:bf:21:75:ac:89:44:a3:77:dc:31:
                    57:2f:72:28:f4:f4:e8:40:71:e5:6e:c1:48:3e:e6:
                    34:5f:2f:cd:53:1f:65:3d:3e:ec:e9:a2:2e:bd:c2:
                    49:b5:05:9a:bf:6d:a3:30:42:c0:5c:3b:d8:31:55:
                    8d:00:aa:5c:f4:8b:56:a0:a7:ff:a0:e4:3f:99:5b:
                    37:a0:48:5f:d3:93:5c:a8:7e:64:7e:d7:6b:d5:d4:
                    cb:a5:b0:6b:6b:e7:52:a1:05:63:d4:a8:ca:9e:04:
                    e9:fe:28:fb:8d:4c:ac:a3:b2:27:56:bd:bc:2b:10:
                    dd:e9:87:ba:43:b6:ec:b9:7a:83:5b:6e:c3:d7:d4:
                    9b:44:56:f3:b4:ef:de:33:9f:5e:3f:cd:7d:a5:aa:
                    47:9d:03:2f:c5:ff:13:b3:65:7d:db:88:d9:25:97:
                    e7:4d:bb:29:8a:c6:fa:8c:54:88:b8:67:f2:6f:11:
                    8f:e3:bc:9b:d2:ac:7c:a6:67:3d:fe:fd:93:33:96:
                    9b:f7:ff:0d:5c:24:b1:22:9c:4c:b0:d1:53:c5:14:
                    d6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2A:F6:13:D1:B9:54:75:68:5D:33:9C:BA:B2:D1:A4:DA:5A:8B:83
            X509v3 Authority Key Identifier:
                keyid:98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/3230322e3136392e3136302e302f32302d3230203d3e2039323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:9a:aa:7a:45:24:75:58:e6:f0:3e:d6:04:d5:6c:33:5d:ff:
         c8:13:35:92:42:6d:ad:16:00:5d:6f:9e:f3:f3:1b:ad:88:9c:
         9b:4e:a9:df:47:1e:18:e2:06:70:65:cc:30:8e:2e:b2:bc:85:
         d2:2d:a0:29:23:47:53:0a:08:ec:53:be:73:e3:05:05:0a:34:
         14:01:94:d4:ad:b3:23:68:0f:e0:80:a6:61:eb:86:3f:21:bf:
         71:0e:28:87:0c:9d:9d:b1:63:38:b6:cc:fc:f5:15:72:a3:c2:
         2c:75:b6:3f:f9:1d:de:ad:f6:ba:c2:04:76:a1:7e:c2:f1:49:
         a1:4e:e4:6a:cb:1f:a9:87:48:5f:0d:5c:b7:ae:f8:fe:8e:75:
         54:5c:84:96:fc:a6:48:ae:b5:f2:f2:8e:e0:a6:61:5a:b1:dd:
         c4:76:d6:fb:a5:eb:92:9c:71:3d:ed:ff:48:11:7b:c7:d2:c4:
         c7:5e:72:3f:72:ab:22:bb:1b:59:cb:26:9e:09:56:f1:75:af:
         91:22:8f:21:7c:42:0c:63:4e:f5:81:63:41:8c:40:cb:9d:2d:
         47:dd:b1:1f:54:13:f3:09:f5:5d:bf:07:5e:3a:1a:93:7a:11:
         e6:c1:f6:57:0c:4c:3b:11:a5:00:f4:c7:63:ae:c6:e7:52:57:
         93:27:a3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----