Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ASNET/0/323430333a633234303a3a2f33322d3332203d3e2039323634.roa
File:                     323430333a633234303a3a2f33322d3332203d3e2039323634.roa (raw, json)
Hash identifier:          oe8xOwIqr2mO81l6+e7ZMOIERS2RYBz6q6ygl7MIFms=
Subject key identifier:   2F:7D:D7:58:6B:2A:71:00:65:BA:8F:44:69:27:C7:1E:3A:DB:05:F3
Certificate issuer:       /CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Certificate serial:       0DEE29B4C7C417AE8E59A13166A0D3F5F69359E5
Authority key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ASNET/0/323430333a633234303a3a2f33322d3332203d3e2039323634.roa
Signing time:             Mon 11 May 2026 17:09:10 +0000
ROA not before:           Mon 11 May 2026 17:04:10 +0000
ROA not after:            Mon 10 May 2027 17:09:10 +0000
asID:                     9264
IP address blocks:        2403:c240::/32 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ee:29:b4:c7:c4:17:ae:8e:59:a1:31:66:a0:d3:f5:f6:93:59:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
        Validity
            Not Before: May 11 17:04:10 2026 GMT
            Not After : May 10 17:09:10 2027 GMT
        Subject: CN=2F7DD7586B2A710065BA8F446927C71E3ADB05F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b4:2d:12:10:d1:0c:dc:f3:9e:98:01:0f:3e:
                    ea:eb:f6:99:ce:4d:08:95:e2:3f:4e:f8:f6:83:54:
                    00:18:97:7a:b4:c0:fb:1e:ed:5e:dc:66:20:a2:72:
                    0d:8e:4d:8a:64:fc:d1:1f:54:58:76:47:90:94:40:
                    26:78:86:fc:03:48:95:ba:d4:53:fa:38:3b:e4:69:
                    f4:54:b0:bb:d6:31:de:ab:53:29:0f:e3:64:c8:85:
                    e7:34:60:12:99:dd:fb:2f:86:c6:f4:9a:e8:5a:ff:
                    0e:12:88:ca:61:eb:0f:82:3b:10:94:f9:08:66:8f:
                    ff:e5:89:50:a1:be:e2:52:eb:ca:f9:e3:f3:fe:bc:
                    48:35:e9:a9:b0:29:24:37:d9:7d:8a:30:a3:5b:38:
                    a8:6e:94:a6:4f:52:25:d8:d0:c6:d6:a3:3e:e6:98:
                    c6:ff:44:47:e7:dd:2f:21:67:c4:46:ea:12:4d:85:
                    ee:14:b3:5f:5d:47:6c:68:07:93:72:fc:b2:d4:bf:
                    c0:23:d1:a7:f3:94:e6:4f:5e:e6:cc:c2:a0:46:cc:
                    76:ae:64:05:c5:c4:18:e6:3f:85:f1:31:5e:ec:0e:
                    46:76:7d:e0:14:49:d0:f1:1e:ed:60:33:6f:44:ef:
                    c2:90:9d:70:14:fd:55:59:15:90:4f:c5:f4:52:34:
                    49:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7D:D7:58:6B:2A:71:00:65:BA:8F:44:69:27:C7:1E:3A:DB:05:F3
            X509v3 Authority Key Identifier:
                keyid:98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/323430333a633234303a3a2f33322d3332203d3e2039323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:c240::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:c8:fa:fb:d0:34:2e:c6:8b:ef:00:0e:a8:9f:ac:93:de:e5:
         14:4f:18:e2:b3:b5:01:84:73:60:bb:82:dc:d6:48:c0:90:21:
         1d:18:67:65:08:5f:59:e1:b8:35:ae:98:4b:a2:45:d6:23:e0:
         4a:08:27:e9:20:c7:cf:cd:3e:08:5b:96:92:a4:3c:6f:7e:e9:
         c2:00:15:1b:b0:5a:f9:65:4d:be:68:d3:42:1d:29:4f:8d:92:
         fa:eb:b9:cd:90:e2:62:80:f9:d1:4f:5d:78:aa:a1:70:c3:8e:
         d3:9c:6a:07:d9:7b:b1:a0:dc:33:26:d4:61:59:27:06:43:95:
         6b:50:ef:07:2f:a5:c9:fa:c1:78:68:1b:9e:7b:3d:51:15:f6:
         d3:31:4f:02:f5:f1:ca:13:dd:85:74:ec:38:bc:86:14:e7:34:
         e8:e5:16:fa:c1:5d:04:a1:76:8f:79:6f:17:3e:b3:a0:53:2e:
         ef:b0:8e:e7:43:74:94:84:e8:bf:86:ec:ca:ec:d4:3a:b1:77:
         a1:53:c7:74:f8:36:99:f7:f1:77:2c:6a:52:0f:ad:cb:e1:45:
         b9:b0:1e:b4:c3:38:f8:a9:fb:d3:45:24:9d:ec:ae:b7:7e:fb:
         28:bb:bf:76:2d:af:38:81:f9:e5:3f:24:93:4c:ba:04:82:f4:
         cd:62:5e:3e
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIUDe4ptMfEF66OWaExZqDT9faTWeUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgzMkE3RTRDRjQ1NzI5RURDRDM2ODFEMDE0NkUxRUQz
QTRBNDBDMzAeFw0yNjA1MTExNzA0MTBaFw0yNzA1MTAxNzA5MTBaMDMxMTAvBgNV
BAMTKDJGN0RENzU4NkIyQTcxMDA2NUJBOEY0NDY5MjdDNzFFM0FEQjA1RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGtC0SENEM3POemAEPPurr9pnO
TQiV4j9O+PaDVAAYl3q0wPse7V7cZiCicg2OTYpk/NEfVFh2R5CUQCZ4hvwDSJW6
1FP6ODvkafRUsLvWMd6rUykP42TIhec0YBKZ3fsvhsb0muha/w4SiMph6w+COxCU
+Qhmj//liVChvuJS68r54/P+vEg16amwKSQ32X2KMKNbOKhulKZPUiXY0MbWoz7m
mMb/REfn3S8hZ8RG6hJNhe4Us19dR2xoB5Ny/LLUv8Aj0afzlOZPXubMwqBGzHau
ZAXFxBjmP4XxMV7sDkZ2feAUSdDxHu1gM29E78KQnXAU/VVZFZBPxfRSNEm/AgMB
AAGjggHeMIIB2jAdBgNVHQ4EFgQUL33XWGsqcQBluo9EaSfHHjrbBfMwHwYDVR0j
BBgwFoAUmDKn5M9Fcp7c02gdAUbh7TpKQMMwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVNORVQv
MC85ODMyQTdFNENGNDU3MjlFRENEMzY4MUQwMTQ2RTFFRDNBNEE0MEMzLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzk4MzJBN0U0Q0Y0NTcyOUVEQ0QzNjgxRDAxNDZF
MUVEM0E0QTQwQzMuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BU05FVC8wLzMyMzQzMDMzM2E2MzMy
MzQzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM5MzIzNjM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA
JAPCQDANBgkqhkiG9w0BAQsFAAOCAQEAgcj6+9A0LsaL7wAOqJ+sk97lFE8Y4rO1
AYRzYLuC3NZIwJAhHRhnZQhfWeG4Na6YS6JF1iPgSggn6SDHz80+CFuWkqQ8b37p
wgAVG7Ba+WVNvmjTQh0pT42S+uu5zZDiYoD50U9deKqhcMOO05xqB9l7saDcMybU
YVknBkOVa1DvBy+lyfrBeGgbnns9URX20zFPAvXxyhPdhXTsOLyGFOc06OUW+sFd
BKF2j3lvFz6zoFMu77CO50N0lITov4bsyuzUOrF3oVPHdPg2mffxdyxqUg+ty+FF
ubAetMM4+Kn700Ukneyut377KLu/di2vOIH55T8kk0y6BIL0zWJePg==
-----END CERTIFICATE-----