Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/COLIN/0/3130332e362e3132342e302f32332d3332203d3e20313530373638.roa
File:                     3130332e362e3132342e302f32332d3332203d3e20313530373638.roa (raw, json)
Hash identifier:          6vguh3CJd68lcmEK8FAHm7dq7zEm2fYFwl9UdWFuOJk=
Subject key identifier:   6C:6C:E5:54:60:F6:FA:20:57:EF:3A:7F:E9:6C:06:77:57:BB:F6:E9
Certificate issuer:       /CN=3135985A244571EE521F17A73A1F0D6341A35ED5
Certificate serial:       522E55717D54A9ADF17537ED18FCEA0AD6C45CC1
Authority key identifier: 31:35:98:5A:24:45:71:EE:52:1F:17:A7:3A:1F:0D:63:41:A3:5E:D5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/COLIN/0/3130332e362e3132342e302f32332d3332203d3e20313530373638.roa
Signing time:             Mon 11 May 2026 17:37:57 +0000
ROA not before:           Mon 11 May 2026 17:32:57 +0000
ROA not after:            Mon 10 May 2027 17:37:57 +0000
asID:                     150768
IP address blocks:        103.6.124.0/23 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2e:55:71:7d:54:a9:ad:f1:75:37:ed:18:fc:ea:0a:d6:c4:5c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3135985A244571EE521F17A73A1F0D6341A35ED5
        Validity
            Not Before: May 11 17:32:57 2026 GMT
            Not After : May 10 17:37:57 2027 GMT
        Subject: CN=6C6CE55460F6FA2057EF3A7FE96C067757BBF6E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:27:a2:f3:16:9a:00:97:5a:bc:4e:67:fb:
                    68:3c:78:a0:f4:c3:66:78:6d:81:10:31:88:8a:d1:
                    cd:f0:b7:20:b4:70:31:c0:09:cb:dd:03:23:c3:b9:
                    dd:b5:df:46:44:9f:0a:7b:4e:2c:68:8d:73:9c:75:
                    e3:91:32:ca:83:c9:c6:c8:5f:c1:03:17:79:04:d6:
                    ec:17:52:9c:f8:e4:f7:55:8f:02:c2:49:fb:23:5d:
                    17:fe:81:63:c3:d8:04:70:3d:cb:90:e6:40:24:7e:
                    8c:db:62:9a:bd:6e:14:c0:e1:46:82:87:00:c0:53:
                    81:56:5f:36:ee:41:1e:6e:e0:c7:4f:3c:3c:ec:7d:
                    94:06:72:84:52:b8:75:8e:0c:cb:47:39:31:2a:4a:
                    26:64:0a:59:b1:4d:da:78:79:4e:3f:c1:01:96:b5:
                    1c:a0:ca:ad:80:89:51:99:48:a6:0b:8c:8d:ef:7b:
                    cd:ae:3e:30:fd:b0:2d:3c:a3:ff:04:ad:5b:09:53:
                    74:32:27:e8:d6:c5:a8:fd:67:c9:6e:c2:24:bd:f0:
                    ad:cf:da:e9:80:08:95:3a:23:73:26:21:25:ae:16:
                    ed:aa:bc:8f:80:26:8b:f5:dd:49:76:f2:b0:4d:69:
                    1f:4c:18:31:63:b4:64:9f:f5:48:ec:ba:86:77:34:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6C:E5:54:60:F6:FA:20:57:EF:3A:7F:E9:6C:06:77:57:BB:F6:E9
            X509v3 Authority Key Identifier:
                keyid:31:35:98:5A:24:45:71:EE:52:1F:17:A7:3A:1F:0D:63:41:A3:5E:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COLIN/0/3130332e362e3132342e302f32332d3332203d3e20313530373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:66:86:8f:d9:c3:fb:32:32:cf:4f:d1:54:2c:bd:b0:9d:58:
         02:4e:63:62:da:dc:32:b2:a8:8e:1f:ef:0c:49:a5:e6:c1:4b:
         eb:c4:29:b4:4b:d1:e9:d5:b2:86:5d:e2:95:0a:e5:93:91:b7:
         9a:c9:e4:91:ec:b7:43:35:ea:aa:ed:16:ca:3b:cc:06:04:44:
         a7:5f:a8:dd:3a:16:dd:75:20:ff:22:03:b6:72:6c:38:a8:f7:
         01:ba:69:64:50:ff:52:7d:19:ba:85:c5:23:1c:ae:0b:29:78:
         c9:81:d1:46:b5:d8:fa:ac:f7:af:53:04:19:d3:22:63:26:0f:
         94:42:63:96:ca:84:ec:be:59:2a:26:4b:f2:dc:f1:e9:7b:77:
         39:e8:4e:d2:29:74:4c:92:df:f5:22:62:9d:27:96:29:05:a3:
         f2:77:4e:97:e2:0a:05:e1:8f:54:de:ba:03:d3:53:b6:de:c3:
         ff:7f:cc:8d:11:85:3c:8a:80:9f:20:15:f6:39:a8:4f:c0:10:
         17:c2:5f:03:65:5e:5d:07:24:8e:3f:f1:70:fe:12:4e:67:7d:
         ba:07:f8:49:08:c5:0a:37:24:e7:00:b5:2e:a8:e3:0e:d8:a5:
         fe:0d:85:1f:4a:e6:1d:fb:93:9f:0a:d6:2c:4a:ab:58:b3:3b:
         01:48:d0:4e
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIUUi5VcX1Uqa3xdTftGPzqCtbEXMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEzNTk4NUEyNDQ1NzFFRTUyMUYxN0E3M0ExRjBENjM0
MUEzNUVENTAeFw0yNjA1MTExNzMyNTdaFw0yNzA1MTAxNzM3NTdaMDMxMTAvBgNV
BAMTKDZDNkNFNTU0NjBGNkZBMjA1N0VGM0E3RkU5NkMwNjc3NTdCQkY2RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3SCei8xaaAJdavE5n+2g8eKD0
w2Z4bYEQMYiK0c3wtyC0cDHACcvdAyPDud2130ZEnwp7TixojXOcdeORMsqDycbI
X8EDF3kE1uwXUpz45PdVjwLCSfsjXRf+gWPD2ARwPcuQ5kAkfozbYpq9bhTA4UaC
hwDAU4FWXzbuQR5u4MdPPDzsfZQGcoRSuHWODMtHOTEqSiZkClmxTdp4eU4/wQGW
tRygyq2AiVGZSKYLjI3ve82uPjD9sC08o/8ErVsJU3QyJ+jWxaj9Z8luwiS98K3P
2umACJU6I3MmISWuFu2qvI+AJov13Ul28rBNaR9MGDFjtGSf9UjsuoZ3NHelAgMB
AAGjggHhMIIB3TAdBgNVHQ4EFgQUbGzlVGD2+iBX7zp/6WwGd1e79ukwHwYDVR0j
BBgwFoAUMTWYWiRFce5SHxenOh8NY0GjXtUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09MSU4v
MC8zMTM1OTg1QTI0NDU3MUVFNTIxRjE3QTczQTFGMEQ2MzQxQTM1RUQ1LmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzMxMzU5ODVBMjQ0NTcxRUU1MjFGMTdBNzNBMUYw
RDYzNDFBMzVFRDUuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DT0xJTi8wLzMxMzAzMzJlMzYyZTMx
MzIzNDJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDMxMzUzMDM3MzYzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWcGfDANBgkqhkiG9w0BAQsFAAOCAQEADGaGj9nD+zIyz0/RVCy9sJ1YAk5j
YtrcMrKojh/vDEml5sFL68QptEvR6dWyhl3ilQrlk5G3msnkkey3QzXqqu0WyjvM
BgREp1+o3ToW3XUg/yIDtnJsOKj3AbppZFD/Un0ZuoXFIxyuCyl4yYHRRrXY+qz3
r1MEGdMiYyYPlEJjlsqE7L5ZKiZL8tzx6Xt3OehO0il0TJLf9SJinSeWKQWj8ndO
l+IKBeGPVN66A9NTtt7D/3/MjRGFPIqAnyAV9jmoT8AQF8JfA2VeXQckjj/xcP4S
Tmd9ugf4SQjFCjck5wC1LqjjDtil/g2FH0rmHfuTnwrWLEqrWLM7AUjQTg==
-----END CERTIFICATE-----
Generated at Wed May 13 01:42:14 2026 by rpki-client