Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3132332e3133312e302f32342d3234203d3e20333936393832.roa
File:                     3130332e3132332e3133312e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          QqBGfQ7BdcX4jk0myPQHJHO1V9xzygncrdNvKEsMmnA=
Subject key identifier:   E0:6B:35:79:8D:8A:3F:E9:01:BE:08:5C:95:43:73:9A:62:2F:81:42
Certificate issuer:       /CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
Certificate serial:       6BA97BB1739A01EA53A59F7F99B45BA5CA580295
Authority key identifier: 05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3132332e3133312e302f32342d3234203d3e20333936393832.roa
Signing time:             Mon 11 May 2026 17:10:17 +0000
ROA not before:           Mon 11 May 2026 17:05:17 +0000
ROA not after:            Mon 10 May 2027 17:10:17 +0000
asID:                     396982
IP address blocks:        103.123.131.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a9:7b:b1:73:9a:01:ea:53:a5:9f:7f:99:b4:5b:a5:ca:58:02:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
        Validity
            Not Before: May 11 17:05:17 2026 GMT
            Not After : May 10 17:10:17 2027 GMT
        Subject: CN=E06B35798D8A3FE901BE085C9543739A622F8142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:7e:02:73:f9:9a:d9:12:92:85:65:9f:65:
                    47:bf:b6:98:fc:27:99:02:af:25:11:f2:7d:73:5f:
                    33:9c:5e:6f:88:9c:c8:6f:3d:77:d0:69:7d:f8:2b:
                    d0:02:ae:ab:e5:60:01:b7:95:db:18:09:2c:9b:de:
                    a0:38:70:a6:7d:bd:e2:4f:dd:f3:83:aa:79:02:16:
                    52:ac:dd:a6:6d:09:c8:d6:db:86:26:a4:04:19:7a:
                    f5:62:ca:f3:78:b3:0f:13:92:4b:19:63:7f:4a:6c:
                    65:31:5d:e6:63:d6:bf:5b:5d:ec:f8:47:96:9b:1f:
                    c0:93:f7:07:62:37:58:16:8b:da:44:02:af:cd:b4:
                    30:95:0e:c1:5c:03:36:39:37:9e:a6:1a:54:56:b7:
                    65:b8:b3:06:02:2d:8b:64:ea:1b:8f:4c:b0:9c:75:
                    12:67:67:10:0d:ae:a8:e5:6b:16:8b:7d:6d:fd:f0:
                    53:20:2e:e8:24:35:ba:10:e2:ab:15:7f:4b:d0:22:
                    d0:40:06:68:36:43:a9:13:46:10:a3:16:e8:1c:06:
                    3f:fa:27:54:af:3a:ff:bf:d3:26:10:f8:0e:6f:63:
                    58:05:63:61:af:fd:af:88:e5:46:68:46:96:c0:a9:
                    38:55:58:fc:35:f4:34:a0:04:47:ac:46:70:ab:e3:
                    26:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6B:35:79:8D:8A:3F:E9:01:BE:08:5C:95:43:73:9A:62:2F:81:42
            X509v3 Authority Key Identifier:
                keyid:05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3132332e3133312e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:69:52:f5:c9:08:17:2c:87:60:38:17:5a:d9:d2:ea:15:43:
         a2:b9:5b:ad:6c:0d:a6:18:9f:3d:f4:27:8e:4c:cc:1d:c1:64:
         8f:70:40:1d:5d:86:55:5a:c2:8d:da:80:d3:dc:9d:49:e5:09:
         6b:11:83:01:cc:8e:3d:6b:ca:22:a4:aa:d5:00:c8:bf:30:15:
         8d:73:12:72:38:9f:e1:05:10:a6:b8:45:2f:fc:d0:76:30:71:
         59:55:5a:80:a9:2f:76:eb:d7:2d:85:2a:7f:21:8a:97:5b:8d:
         2f:f6:f1:55:d4:a3:1e:96:e9:22:8a:d1:74:7b:a1:b7:f4:45:
         19:fc:8b:df:7c:34:24:a8:74:65:55:d5:34:6b:d8:c9:99:d4:
         d4:53:02:bb:06:99:f9:fb:e5:91:b5:33:34:14:e8:b0:48:e6:
         48:b9:b5:fd:22:ee:0f:5e:46:a9:85:53:9d:a8:0b:c8:55:70:
         6e:cd:7c:ed:c3:8d:17:c8:ee:d6:41:0d:2e:36:ad:c1:03:f0:
         8b:6b:26:6f:29:bb:bf:49:7d:11:39:cb:3a:67:d8:cf:06:42:
         8a:7b:6b:c4:7b:cb:12:f1:fb:f6:bb:a3:98:d8:3a:61:b7:19:
         f8:c9:4a:da:d2:a0:8d:9d:d4:28:0e:bc:51:cd:6e:0f:63:cc:
         20:b0:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:11:58 2026 by rpki-client