Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CODEUPTECH/1/3136302e33302e3231302e302f32342d3234203d3e20313532363133.roa
File:                     3136302e33302e3231302e302f32342d3234203d3e20313532363133.roa (raw, json)
Hash identifier:          3V+eLijCrneWsUaRvj4OtnRRirUVmLqCfv2HSVSfeog=
Subject key identifier:   4D:CC:B5:A1:5C:AA:B4:BB:F6:93:F8:4C:ED:86:DC:73:3A:8F:FE:33
Certificate issuer:       /CN=985AF7058B94D432A9181F30B0AE306C97BD4F3B
Certificate serial:       1A92131CF45D88E3DBA28D4B52178400131FBA0B
Authority key identifier: 98:5A:F7:05:8B:94:D4:32:A9:18:1F:30:B0:AE:30:6C:97:BD:4F:3B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/985AF7058B94D432A9181F30B0AE306C97BD4F3B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CODEUPTECH/1/3136302e33302e3231302e302f32342d3234203d3e20313532363133.roa
Signing time:             Mon 11 May 2026 17:44:53 +0000
ROA not before:           Mon 11 May 2026 17:39:53 +0000
ROA not after:            Mon 10 May 2027 17:44:53 +0000
asID:                     152613
IP address blocks:        160.30.210.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:92:13:1c:f4:5d:88:e3:db:a2:8d:4b:52:17:84:00:13:1f:ba:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985AF7058B94D432A9181F30B0AE306C97BD4F3B
        Validity
            Not Before: May 11 17:39:53 2026 GMT
            Not After : May 10 17:44:53 2027 GMT
        Subject: CN=4DCCB5A15CAAB4BBF693F84CED86DC733A8FFE33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:84:9f:c6:ad:9a:26:ea:35:f6:ca:bf:94:
                    eb:9f:fe:cd:06:45:87:a8:1f:6d:90:04:a7:c1:22:
                    71:46:5d:d1:38:5f:f0:51:0a:06:32:70:6f:13:e8:
                    0f:7e:62:c2:93:f6:50:cc:42:f1:86:48:74:90:6c:
                    e0:08:68:db:e4:38:d4:b7:19:fc:b9:90:8f:6a:d0:
                    a4:0e:4f:c1:83:94:1c:1e:45:d1:48:58:4b:f6:46:
                    7d:80:5a:31:3f:cd:e0:3a:c8:69:53:b8:1d:61:a8:
                    36:91:f8:90:89:3b:9b:89:23:53:55:d1:78:f7:91:
                    cd:4e:4a:d6:48:ca:9d:97:bf:0b:81:89:6d:44:17:
                    0f:7a:c2:67:c7:97:25:06:8f:34:be:a8:07:42:e7:
                    c1:0f:04:8b:2b:91:6c:28:4d:c1:94:54:9a:10:85:
                    09:01:da:cd:9c:d3:5c:ec:47:ee:52:45:e3:d2:02:
                    68:67:39:66:23:89:e4:9c:0f:e8:8f:91:dc:9d:42:
                    49:ed:7d:9e:74:ec:a2:d7:3d:a9:f9:ae:e0:e0:1f:
                    19:e4:28:4e:a3:56:94:0f:d8:16:cf:c2:50:b6:8d:
                    a2:dc:09:96:78:93:0f:8b:5c:b0:61:36:96:59:25:
                    fa:21:ef:d0:3a:af:8b:69:28:e5:eb:da:b6:84:72:
                    03:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CC:B5:A1:5C:AA:B4:BB:F6:93:F8:4C:ED:86:DC:73:3A:8F:FE:33
            X509v3 Authority Key Identifier:
                keyid:98:5A:F7:05:8B:94:D4:32:A9:18:1F:30:B0:AE:30:6C:97:BD:4F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CODEUPTECH/1/985AF7058B94D432A9181F30B0AE306C97BD4F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/985AF7058B94D432A9181F30B0AE306C97BD4F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CODEUPTECH/1/3136302e33302e3231302e302f32342d3234203d3e20313532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:e7:e8:e3:65:45:ed:68:c3:46:12:98:53:71:e7:f6:2f:23:
         a3:8e:64:3c:f0:2b:6a:6d:64:8b:99:f6:a0:7b:45:de:a3:79:
         bb:ec:b0:10:0d:f3:99:c2:64:ea:df:18:b2:d9:9d:bd:54:e5:
         e9:da:22:af:c1:ae:65:93:ef:86:bb:99:81:53:6f:08:4f:fe:
         9a:f1:09:6f:e3:c8:67:3b:74:1a:0f:5a:95:58:47:7d:b0:4d:
         c6:dd:1f:08:e4:f2:bc:41:64:44:23:50:6f:00:fd:e9:58:6a:
         ca:a2:b9:6f:5e:9c:d2:84:04:bf:d4:ad:b7:31:c4:e5:97:36:
         f8:7e:99:23:8f:09:80:22:e4:2f:f9:99:ea:25:12:d8:94:9a:
         4f:27:51:f5:ec:e6:70:16:5d:c2:de:01:4b:64:4f:97:53:7b:
         bd:74:13:b7:e0:e4:83:7c:03:c5:8b:e8:d5:ef:71:33:13:6b:
         4a:22:c9:66:cc:b8:2c:47:41:17:c3:48:1a:ab:12:63:dc:e1:
         21:7c:ca:f4:dc:0e:55:db:7f:e3:3c:5c:6d:57:95:f4:f2:55:
         7c:2f:39:9f:af:b0:70:40:1d:21:55:35:5c:6c:f9:b3:bc:fe:
         d0:1e:db:61:b1:6f:7b:b6:81:fd:16:96:60:2a:00:37:1d:af:
         b2:da:8b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:18 2026 by rpki-client