Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/COCODIGIT/0/33362e35302e3232392e302f32342d3332203d3e20313530373636.roa
File:                     33362e35302e3232392e302f32342d3332203d3e20313530373636.roa (raw, json)
Hash identifier:          h8gyFFvDIAX3bMa9Tnsi5Lv1Sog1AR7udxjaRncAT3E=
Subject key identifier:   F6:A8:98:67:80:ED:E9:38:13:A8:28:F0:30:61:EA:01:8E:F9:A6:D7
Certificate issuer:       /CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
Certificate serial:       6A909C50BFA6B56C42A4AB93C08E948F1D83D1F5
Authority key identifier: F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/33362e35302e3232392e302f32342d3332203d3e20313530373636.roa
Signing time:             Mon 11 May 2026 17:38:18 +0000
ROA not before:           Mon 11 May 2026 17:33:18 +0000
ROA not after:            Mon 10 May 2027 17:38:18 +0000
asID:                     150766
IP address blocks:        36.50.229.0/24 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:90:9c:50:bf:a6:b5:6c:42:a4:ab:93:c0:8e:94:8f:1d:83:d1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
        Validity
            Not Before: May 11 17:33:18 2026 GMT
            Not After : May 10 17:38:18 2027 GMT
        Subject: CN=F6A8986780EDE93813A828F03061EA018EF9A6D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:35:31:ef:98:42:9a:93:84:d0:a8:23:f8:
                    10:10:e1:a7:21:e3:12:ff:67:af:66:a2:33:3c:ef:
                    7a:25:3a:e6:67:d7:cd:5d:0e:e1:f5:42:64:45:3a:
                    0a:b7:28:8c:95:5c:7c:b2:37:62:9d:6d:47:83:18:
                    a4:6d:7f:5a:5c:65:b9:c5:e7:d3:cd:04:2e:93:66:
                    6a:cf:82:cb:5f:b2:a7:85:e2:40:28:ff:76:ce:18:
                    66:13:00:cb:0a:ee:93:60:24:ea:bc:4e:27:cf:19:
                    09:64:80:fa:90:06:0e:75:c1:f8:ba:c8:e5:fc:ee:
                    4b:1a:09:11:6b:08:26:39:06:06:6b:03:b6:a7:80:
                    bb:6a:a8:13:b5:49:6a:9a:47:96:6a:af:13:25:22:
                    80:af:da:08:0e:e1:dd:bd:68:9d:34:eb:f0:36:3d:
                    66:65:a8:6f:78:54:1e:93:7b:4a:51:2e:15:84:86:
                    0a:c4:5f:46:94:a0:59:76:59:03:f6:13:98:a4:8c:
                    51:5a:48:c6:de:d7:0a:26:ce:95:11:de:43:5b:52:
                    49:30:03:4f:4b:b3:1a:8d:00:ea:05:8c:31:0f:81:
                    d4:07:52:85:49:3c:03:0e:6c:e0:24:ec:91:1b:81:
                    c3:bf:f2:05:ff:bf:3b:a5:fc:3c:6c:6b:50:4a:dc:
                    12:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A8:98:67:80:ED:E9:38:13:A8:28:F0:30:61:EA:01:8E:F9:A6:D7
            X509v3 Authority Key Identifier:
                keyid:F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/33362e35302e3232392e302f32342d3332203d3e20313530373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:fb:d3:bf:46:74:25:ab:1d:1c:15:23:ff:ce:45:71:e1:96:
         ed:ff:8a:80:f0:70:fd:04:11:5d:66:be:c9:d6:57:72:5b:66:
         65:f8:d7:d1:97:79:56:d0:5d:66:fa:03:32:f9:a2:49:3f:d4:
         f8:be:3c:7d:68:a5:2f:37:a0:47:95:18:8b:21:16:73:6f:27:
         1f:16:f0:92:91:2d:1c:ee:2c:98:22:5f:b9:6a:14:75:55:84:
         90:e1:b4:f9:ca:42:1f:57:ee:da:03:dd:bd:33:91:08:4a:62:
         0a:78:68:90:e3:f0:47:ad:2d:55:76:c3:0b:1b:c3:0a:b2:98:
         65:f2:7c:f1:74:37:04:8f:72:1f:2b:d4:bc:62:10:39:3e:9c:
         34:0c:41:64:d7:11:20:2c:89:00:7b:b9:ee:4d:a7:63:6b:20:
         53:e8:a7:fb:29:7e:69:b5:78:03:2d:72:32:db:14:3e:db:76:
         5e:83:3c:c3:55:22:17:0f:e3:e2:fe:e4:df:78:90:5e:52:12:
         90:13:cd:8f:f6:c0:46:3d:f9:f3:15:1b:b9:1e:76:92:da:21:
         ab:7f:27:0e:df:2d:e1:5e:4e:e5:09:3b:b3:1c:ff:1a:09:c1:
         4b:df:91:64:25:b5:c9:97:32:1b:61:27:13:d4:50:05:2f:68:
         86:44:a8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:41 2026 by rpki-client