Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DWINS/0/3130332e34332e35302e302f32342d3234203d3e20313338393135.roa
File:                     3130332e34332e35302e302f32342d3234203d3e20313338393135.roa (raw, json)
Hash identifier:          hTEAAzN0PA9rsWlL7Pu0rf3KFazJnBuaWNIwQ+dbKTo=
Subject key identifier:   5C:3B:06:19:48:12:A9:63:CF:0D:6B:71:6E:48:93:9E:A0:C8:62:7E
Certificate issuer:       /CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
Certificate serial:       7839C592F9B5CC5289461021265B9722E551ADE4
Authority key identifier: C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DWINS/0/3130332e34332e35302e302f32342d3234203d3e20313338393135.roa
Signing time:             Mon 11 May 2026 17:57:16 +0000
ROA not before:           Mon 11 May 2026 17:52:16 +0000
ROA not after:            Mon 10 May 2027 17:57:16 +0000
asID:                     138915
IP address blocks:        103.43.50.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:39:c5:92:f9:b5:cc:52:89:46:10:21:26:5b:97:22:e5:51:ad:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
        Validity
            Not Before: May 11 17:52:16 2026 GMT
            Not After : May 10 17:57:16 2027 GMT
        Subject: CN=5C3B06194812A963CF0D6B716E48939EA0C8627E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a8:ed:8b:6b:db:31:06:1a:6c:e8:da:f3:19:
                    ae:7b:8f:23:59:8c:cc:4b:b4:0c:e7:01:96:38:3f:
                    63:0a:3e:c6:17:5d:c3:ef:df:ba:72:e7:19:16:6c:
                    26:e6:c4:a6:5a:51:c5:ce:05:c3:d4:29:4e:69:c0:
                    5e:2a:d1:29:96:ba:bc:cd:bc:a5:04:cd:89:88:7f:
                    b9:07:61:90:9c:fa:8f:9a:10:d9:5d:0d:bf:0f:2e:
                    e1:ea:48:89:20:93:ee:4d:eb:94:01:f9:52:90:5c:
                    a7:fc:23:14:5c:e3:8c:47:09:e3:51:ff:6e:ce:7d:
                    2d:d5:74:99:cc:af:87:9f:bf:a6:5e:30:38:72:09:
                    61:a3:9c:9e:6c:47:41:e4:29:a6:92:6b:97:3c:63:
                    06:57:39:4f:be:95:ef:64:8c:1b:df:62:fd:18:ef:
                    3a:70:b3:f7:b3:01:08:4f:78:e1:4a:df:89:79:44:
                    93:d0:b6:75:eb:8b:4b:6b:ee:c5:ed:0e:30:be:dc:
                    2c:43:f8:a7:85:d7:61:74:d3:b9:a6:84:c1:ed:d3:
                    fb:4d:e8:5f:8f:78:ac:75:10:de:2a:34:63:fe:4f:
                    35:f5:06:b3:d8:75:8f:b6:24:c5:86:95:b1:59:67:
                    77:54:83:1d:fc:bf:31:b2:24:36:a5:6a:16:b8:e4:
                    e6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3B:06:19:48:12:A9:63:CF:0D:6B:71:6E:48:93:9E:A0:C8:62:7E
            X509v3 Authority Key Identifier:
                keyid:C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/3130332e34332e35302e302f32342d3234203d3e20313338393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ad:8a:b6:9f:d7:aa:ac:08:d8:6c:d4:5f:3c:63:fc:77:87:
         3f:c5:4d:9c:6d:3d:de:03:15:40:c3:9a:ea:99:a6:c3:d9:cf:
         4e:6e:83:00:9a:8a:c9:3a:ab:e2:f5:a9:4d:2e:ee:9c:39:30:
         2b:81:68:93:25:93:73:c1:34:9f:79:b6:ea:db:c5:c9:9e:33:
         43:b4:ca:2b:cc:06:c8:e8:76:89:db:67:45:9f:29:63:a2:69:
         38:43:94:5a:91:f0:f8:80:2c:f5:92:91:0c:e9:50:64:44:87:
         c6:3e:6b:e5:3e:a6:39:57:b0:16:1b:d7:dd:81:1f:df:7e:ea:
         21:fb:87:99:dc:4c:f8:b0:95:e6:9d:40:8b:aa:52:a8:d9:bf:
         e0:d7:6f:fe:26:d4:26:57:8c:fe:5c:0c:c2:51:ca:92:9c:e3:
         8d:05:51:84:62:7d:b8:71:91:16:87:c3:86:70:42:c4:47:c7:
         61:8b:71:de:a6:c6:c8:e7:16:33:bf:b6:f4:ae:bf:82:e0:5a:
         65:04:f8:21:d4:f4:4e:fa:ee:2d:1b:d3:55:95:ee:23:5e:bf:
         1b:80:4d:75:90:ef:62:e7:4c:e0:87:b3:99:c7:de:0c:17:fa:
         cb:1f:09:79:5b:a6:dc:f5:6f:5e:6f:59:9a:4a:c2:be:33:94:
         aa:38:9a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:01 2026 by rpki-client